, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1874.117645] ? find_held_lock+0x2d/0x110 [ 1874.121691] handle_mm_fault+0x288/0x7a0 [ 1874.125740] __do_page_fault+0x4bc/0xb40 [ 1874.129782] ? vmalloc_fault+0xdf0/0xdf0 [ 1874.133823] ? do_page_fault+0x60/0x4f2 [ 1874.137776] ? page_fault+0x2f/0x50 [ 1874.141381] page_fault+0x45/0x50 [ 1874.144813] RIP: 00f1:0x11 [ 1874.147632] RSP: 000c:000000c42004ff18 EFLAGS: 0042f0a0 [ 1874.322831] Mem-Info: [ 1874.331689] active_anon:203486 inactive_anon:1102533 isolated_anon:0 [ 1874.331689] active_file:221 inactive_file:133 isolated_file:32 [ 1874.331689] unevictable:40761 dirty:0 writeback:0 unstable:0 [ 1874.331689] slab_reclaimable:18850 slab_unreclaimable:113392 [ 1874.331689] mapped:63918 shmem:10358 pagetables:18252 bounce:0 [ 1874.331689] free:25051 free_pcp:212 free_cma:0 [ 1874.369001] Node 0 active_anon:742768kB inactive_anon:1020228kB active_file:104kB inactive_file:0kB unevictable:103592kB isolated(anon):0kB isolated(file):0kB mapped:227784kB dirty:0kB writeback:0kB shmem:29088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1874.398788] Node 1 active_anon:71176kB inactive_anon:3389904kB active_file:676kB inactive_file:860kB unevictable:59452kB isolated(anon):0kB isolated(file):0kB mapped:27788kB dirty:0kB writeback:0kB shmem:12344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1874.428518] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.458980] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1874.464542] Node 0 DMA32 free:35996kB min:36272kB low:45340kB high:54408kB active_anon:742708kB inactive_anon:1015624kB active_file:4kB inactive_file:4kB unevictable:103800kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103800kB kernel_stack:12320kB pagetables:28276kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1874.504689] lowmem_reserve[]: 0 0 0 0 0 [ 1874.514004] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.549563] lowmem_reserve[]: 0 0 0 0 0 [ 1874.554004] Node 1 Normal free:55776kB min:53612kB low:67012kB high:80412kB active_anon:71176kB inactive_anon:3390332kB active_file:952kB inactive_file:0kB unevictable:58728kB writepending:0kB present:3932160kB managed:3870192kB mlocked:58656kB kernel_stack:14496kB pagetables:44724kB bounce:0kB free_pcp:764kB local_pcp:84kB free_cma:0kB [ 1874.605516] lowmem_reserve[]: 0 0 0 0 0 [ 1874.631006] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1874.698296] Node 0 DMA32: 82*4kB (U) 448*8kB (UE) 794*16kB (U) 600*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35816kB [ 1874.712022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1874.723145] Node 1 Normal: 237*4kB (UME) 178*8kB (UME) 81*16kB (UME) 45*32kB (UME) 26*64kB (ME) 56*128kB (UME) 17*256kB (UME) 27*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53620kB [ 1874.740345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.749369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1874.758048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.766969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1874.823936] 14863 total pagecache pages [ 1874.827945] 0 pages in swap cache [ 1874.831386] Swap cache stats: add 0, delete 0, find 0/0 [ 1874.856972] Free swap = 0kB [ 1874.861931] Total swap = 0kB [ 1874.865023] 1965979 pages RAM [ 1874.868120] 0 pages HighMem/MovableOnly [ 1874.872083] 339053 pages reserved [ 1874.875609] 0 pages cma reserved [ 1874.878992] Out of memory: Kill process 27101 (syz-executor.2) score 1007 or sacrifice child [ 1874.887772] Killed process 27101 (syz-executor.2) total-vm:74972kB, anon-rss:17980kB, file-rss:39340kB, shmem-rss:0kB [ 1874.970652] oom_reaper: reaped process 27101 (syz-executor.2), now anon-rss:17992kB, file-rss:5360kB, shmem-rss:0kB [ 1875.000783] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1875.052474] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1875.060412] CPU: 0 PID: 27111 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1875.068314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1875.077668] Call Trace: [ 1875.080271] dump_stack+0x13e/0x194 [ 1875.083928] dump_header+0x178/0x6d4 [ 1875.087641] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1875.092665] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1875.097774] ? ___ratelimit+0x50/0x519 [ 1875.101672] oom_kill_process.cold+0x10/0xae3 [ 1875.106173] ? lock_acquire+0x170/0x3f0 [ 1875.110150] ? lock_downgrade+0x6e0/0x6e0 [ 1875.114310] out_of_memory+0x2d5/0x1110 [ 1875.118297] ? oom_killer_disable+0x1c0/0x1c0 [ 1875.122786] ? mutex_trylock+0x152/0x1a0 [ 1875.126840] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1875.131695] ? warn_alloc+0xf0/0xf0 [ 1875.135336] __alloc_pages_nodemask+0x5d3/0x700 [ 1875.140006] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1875.145037] ? find_held_lock+0x2d/0x110 [ 1875.149106] alloc_pages_vma+0xc2/0x4a0 [ 1875.153080] __handle_mm_fault+0x17b6/0x3280 [ 1875.157494] ? copy_page_range+0x1d70/0x1d70 [ 1875.161918] ? find_held_lock+0x2d/0x110 [ 1875.165990] handle_mm_fault+0x288/0x7a0 [ 1875.170050] __get_user_pages+0x44d/0x11e0 [ 1875.174290] ? follow_page_mask+0x1580/0x1580 [ 1875.178787] ? lock_acquire+0x170/0x3f0 [ 1875.182754] ? __mm_populate+0x1e3/0x2c0 [ 1875.186818] populate_vma_page_range+0x17b/0x210 [ 1875.191571] __mm_populate+0x195/0x2c0 [ 1875.195460] ? populate_vma_page_range+0x210/0x210 [ 1875.200385] ? security_capable+0x88/0xb0 [ 1875.204670] SyS_mlockall+0x3f5/0x520 [ 1875.208469] ? SyS_munlock+0xf0/0xf0 [ 1875.212184] do_syscall_64+0x1d5/0x640 [ 1875.216085] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1875.221276] RIP: 0033:0x45ca29 [ 1875.224551] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1875.232284] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1875.239555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1875.246835] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1875.254208] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1875.261481] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 [ 1875.279959] Mem-Info: [ 1875.282655] active_anon:203491 inactive_anon:1102519 isolated_anon:0 [ 1875.282655] active_file:24 inactive_file:7 isolated_file:0 [ 1875.282655] unevictable:41775 dirty:0 writeback:0 unstable:0 [ 1875.282655] slab_reclaimable:18874 slab_unreclaimable:113353 [ 1875.282655] mapped:63599 shmem:10358 pagetables:18251 bounce:0 [ 1875.282655] free:25033 free_pcp:0 free_cma:0 [ 1875.327187] Node 0 active_anon:742768kB inactive_anon:1020220kB active_file:0kB inactive_file:40kB unevictable:104148kB isolated(anon):0kB isolated(file):0kB mapped:227820kB dirty:0kB writeback:0kB shmem:29088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.367067] Node 1 active_anon:71196kB inactive_anon:3389856kB active_file:116kB inactive_file:0kB unevictable:62952kB isolated(anon):0kB isolated(file):0kB mapped:26576kB dirty:0kB writeback:0kB shmem:12344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.408213] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.591843] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1875.627774] Node 0 DMA32 free:36180kB min:36272kB low:45340kB high:54408kB active_anon:742708kB inactive_anon:1015124kB active_file:0kB inactive_file:40kB unevictable:104148kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104148kB kernel_stack:12320kB pagetables:28276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.753804] lowmem_reserve[]: 0 0 0 0 0 [ 1875.757976] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.836898] lowmem_reserve[]: 0 0 0 0 0 [ 1875.840949] Node 1 Normal free:53504kB min:53612kB low:67012kB high:80412kB active_anon:71196kB inactive_anon:3389856kB active_file:156kB inactive_file:64kB unevictable:62952kB writepending:0kB present:3932160kB managed:3870192kB mlocked:62952kB kernel_stack:14368kB pagetables:44720kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1876.060208] lowmem_reserve[]: 0 0 0 0 0 [ 1876.071104] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1876.134446] Node 0 DMA32: 132*4kB (UM) 451*8kB (UE) 799*16kB (UE) 602*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 1876.195265] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1876.248781] Node 1 Normal: 208*4kB (UME) 192*8kB (UME) 82*16kB (UME) 49*32kB (UE) 25*64kB (ME) 56*128kB (UME) 17*256kB (UME) 27*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53696kB [ 1876.311121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1876.320022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1876.367947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1876.423596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1876.473497] 14866 total pagecache pages [ 1876.500173] 0 pages in swap cache [ 1876.503658] Swap cache stats: add 0, delete 0, find 0/0 [ 1876.567569] Free swap = 0kB [ 1876.570638] Total swap = 0kB [ 1876.573652] 1965979 pages RAM [ 1876.606713] 0 pages HighMem/MovableOnly [ 1876.610719] 339053 pages reserved [ 1876.675742] 0 pages cma reserved [ 1876.679398] Out of memory: Kill process 14483 (syz-executor.1) score 1007 or sacrifice child [ 1876.761028] Killed process 14483 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB 07:50:21 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x82040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) [ 1877.008325] oom_reaper: reaped process 14483 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:50:21 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:21 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:21 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:21 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x10000, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x1315, 0xffff, 0x4, 0x0, 0x6, 0x1000, 0x431, 0x25, r5}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x1}, &(0x7f0000000180)=0x8) 07:50:21 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x60}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000340)={0x7fff, 0x1, &(0x7f0000000180)=[0x5], &(0x7f0000000200)=[0x6, 0x3, 0x1, 0x6, 0x101, 0xab80], &(0x7f0000000280)=[0x200, 0x2, 0x0, 0xf9, 0x6, 0x9]}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000100000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000591ab2c08e6f88bc23be9bf51708f56ccfd29f334d137676e3d5899124378b16a7b20b25be58c872959b1edc32a5ffecc43544c2f5c0e64b1ee9b321c65f2dd752e0ad86942726db7a64da67b980e45e98f59b5b23f67ee205cb55a9"], 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000100)={0x6, [0x1ae0, 0x3560, 0x1, 0x2, 0xc2, 0x0, 0x7f, 0x800, 0x0, 0x1, 0x9, 0x5, 0x5, 0x958, 0x0, 0x1, 0x5, 0xfeff, 0x7fff, 0x7ff, 0xff80, 0xb0, 0xc000, 0x5, 0x4, 0x0, 0x3, 0x7, 0xdd1, 0x1, 0x5, 0x400, 0x7, 0x7ff, 0x81, 0x3f, 0x745, 0xfffa, 0x0, 0x5e67, 0x7ff, 0x1, 0x100, 0x8000, 0x3, 0x6a8, 0xe5, 0x1]}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @dev={[], 0x19}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) 07:50:21 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:21 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0xe8}, 0x1) ioctl$RTC_UIE_OFF(r2, 0x7004) 07:50:21 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000000)={0xffffffd8, "da9e00a200a2c65f20e80a35ef801427202b892581fd3200", 0x1, 0x200, 0x5, 0xde2f7, 0x0, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) [ 1877.943334] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1877.971221] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1877.983141] CPU: 0 PID: 27129 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1877.991141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1878.000497] Call Trace: [ 1878.003110] dump_stack+0x13e/0x194 [ 1878.006824] dump_header+0x178/0x6d4 [ 1878.010540] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1878.015586] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1878.020694] ? ___ratelimit+0x50/0x519 [ 1878.024590] oom_kill_process.cold+0x10/0xae3 [ 1878.029110] ? lock_downgrade+0x6e0/0x6e0 [ 1878.033292] out_of_memory+0x2d5/0x1110 [ 1878.037280] ? oom_killer_disable+0x1c0/0x1c0 [ 1878.041867] ? mutex_trylock+0x152/0x1a0 [ 1878.045936] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1878.050802] ? warn_alloc+0xf0/0xf0 [ 1878.054447] __alloc_pages_nodemask+0x5d3/0x700 [ 1878.059121] ? __pte_alloc+0x19c/0x2c0 [ 1878.063011] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1878.068565] alloc_pages_vma+0xc2/0x4a0 [ 1878.072549] __handle_mm_fault+0x17b6/0x3280 [ 1878.076969] ? copy_page_range+0x1d70/0x1d70 [ 1878.081387] ? find_held_lock+0x2d/0x110 [ 1878.085560] handle_mm_fault+0x288/0x7a0 [ 1878.089631] __get_user_pages+0x44d/0x11e0 [ 1878.095709] ? follow_page_mask+0x1580/0x1580 [ 1878.100246] ? lock_acquire+0x170/0x3f0 [ 1878.104230] ? __mm_populate+0x1e3/0x2c0 [ 1878.108299] populate_vma_page_range+0x17b/0x210 [ 1878.113067] __mm_populate+0x195/0x2c0 [ 1878.116962] ? populate_vma_page_range+0x210/0x210 [ 1878.121894] ? security_capable+0x88/0xb0 [ 1878.126050] SyS_mlockall+0x3f5/0x520 [ 1878.129853] ? SyS_munlock+0xf0/0xf0 [ 1878.134006] do_syscall_64+0x1d5/0x640 [ 1878.137906] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1878.143100] RIP: 0033:0x45ca29 [ 1878.146307] RSP: 002b:00007f23ee40cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1878.154022] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1878.161433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1878.168736] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1878.176144] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1878.183953] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23ee40d6d4 [ 1878.222399] Mem-Info: [ 1878.224981] active_anon:203494 inactive_anon:1097971 isolated_anon:0 [ 1878.224981] active_file:28 inactive_file:1 isolated_file:0 [ 1878.224981] unevictable:46560 dirty:0 writeback:0 unstable:0 [ 1878.224981] slab_reclaimable:18923 slab_unreclaimable:113196 [ 1878.224981] mapped:64856 shmem:10358 pagetables:18258 bounce:0 [ 1878.224981] free:24878 free_pcp:1 free_cma:0 [ 1878.271470] Node 0 active_anon:742864kB inactive_anon:1020220kB active_file:12kB inactive_file:0kB unevictable:103084kB isolated(anon):0kB isolated(file):0kB mapped:226944kB dirty:0kB writeback:0kB shmem:29088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1878.312381] Node 1 active_anon:71112kB inactive_anon:3371664kB active_file:88kB inactive_file:12kB unevictable:83156kB isolated(anon):0kB isolated(file):0kB mapped:32480kB dirty:0kB writeback:0kB shmem:12344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1878.353136] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1878.391810] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1878.399330] Node 0 DMA32 free:35868kB min:36272kB low:45340kB high:54408kB active_anon:742804kB inactive_anon:1015124kB active_file:12kB inactive_file:0kB unevictable:103084kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103084kB kernel_stack:12320kB pagetables:28276kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1878.443048] lowmem_reserve[]: 0 0 0 0 0 [ 1878.450604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1878.503470] lowmem_reserve[]: 0 0 0 0 0 [ 1878.512995] Node 1 Normal free:53196kB min:53612kB low:67012kB high:80412kB active_anon:71112kB inactive_anon:3371664kB active_file:64kB inactive_file:48kB unevictable:83156kB writepending:0kB present:3932160kB managed:3870192kB mlocked:83156kB kernel_stack:14560kB pagetables:44748kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1878.573078] lowmem_reserve[]: 0 0 0 0 0 [ 1878.582123] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1878.605405] Node 0 DMA32: 303*4kB (UME) 304*8kB (UE) 810*16kB (UE) 602*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35868kB [ 1878.626228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1878.639450] Node 1 Normal: 209*4kB (UME) 287*8kB (UE) 99*16kB (UME) 53*32kB (UME) 23*64kB (E) 24*128kB (UME) 25*256kB (UME) 28*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53196kB [ 1878.660314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1878.699730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1878.732369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1878.760928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1878.791965] 16099 total pagecache pages [ 1878.822376] 0 pages in swap cache [ 1878.852458] Swap cache stats: add 0, delete 0, find 0/0 [ 1878.862864] Free swap = 0kB [ 1878.880289] Total swap = 0kB [ 1878.883338] 1965979 pages RAM [ 1878.901355] 0 pages HighMem/MovableOnly [ 1878.910216] 339053 pages reserved [ 1878.921150] 0 pages cma reserved [ 1878.927416] Out of memory: Kill process 27128 (syz-executor.4) score 1007 or sacrifice child [ 1878.950267] Killed process 27128 (syz-executor.4) total-vm:74972kB, anon-rss:17976kB, file-rss:39344kB, shmem-rss:0kB [ 1878.999959] oom_reaper: reaped process 27128 (syz-executor.4), now anon-rss:18024kB, file-rss:5368kB, shmem-rss:0kB [ 1879.468099] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1879.507033] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1879.586265] CPU: 1 PID: 27146 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1879.594186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1879.603543] Call Trace: [ 1879.606139] dump_stack+0x13e/0x194 [ 1879.609772] dump_header+0x178/0x6d4 [ 1879.613487] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1879.618540] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1879.623644] ? ___ratelimit+0x50/0x519 [ 1879.627564] oom_kill_process.cold+0x10/0xae3 [ 1879.632062] ? lock_acquire+0x170/0x3f0 [ 1879.636035] ? lock_downgrade+0x6e0/0x6e0 [ 1879.640186] out_of_memory+0x2d5/0x1110 [ 1879.644164] ? oom_killer_disable+0x1c0/0x1c0 [ 1879.648659] ? mutex_trylock+0x152/0x1a0 [ 1879.652721] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1879.657582] ? warn_alloc+0xf0/0xf0 [ 1879.661248] __alloc_pages_nodemask+0x5d3/0x700 [ 1879.665923] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1879.670941] ? find_held_lock+0x2d/0x110 [ 1879.675016] alloc_pages_vma+0xc2/0x4a0 [ 1879.679001] __handle_mm_fault+0x17b6/0x3280 [ 1879.683415] ? copy_page_range+0x1d70/0x1d70 [ 1879.687825] ? find_held_lock+0x2d/0x110 [ 1879.691899] handle_mm_fault+0x288/0x7a0 [ 1879.695966] __get_user_pages+0x44d/0x11e0 [ 1879.700206] ? follow_page_mask+0x1580/0x1580 [ 1879.704708] ? lock_acquire+0x170/0x3f0 [ 1879.708682] ? __mm_populate+0x1e3/0x2c0 [ 1879.712750] populate_vma_page_range+0x17b/0x210 [ 1879.717512] __mm_populate+0x195/0x2c0 [ 1879.721407] ? populate_vma_page_range+0x210/0x210 [ 1879.726332] ? security_capable+0x88/0xb0 [ 1879.730485] SyS_mlockall+0x3f5/0x520 [ 1879.734279] ? SyS_munlock+0xf0/0xf0 [ 1879.737989] do_syscall_64+0x1d5/0x640 [ 1879.741889] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1879.747075] RIP: 0033:0x45ca29 [ 1879.750270] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1879.758063] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1879.765337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1879.772615] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1879.779887] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1879.787162] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 1879.990955] Mem-Info: [ 1879.993542] active_anon:203488 inactive_anon:1097987 isolated_anon:0 [ 1879.993542] active_file:16 inactive_file:8 isolated_file:0 [ 1879.993542] unevictable:46490 dirty:0 writeback:0 unstable:0 [ 1879.993542] slab_reclaimable:18945 slab_unreclaimable:113164 [ 1879.993542] mapped:67362 shmem:10358 pagetables:18268 bounce:0 [ 1879.993542] free:24888 free_pcp:0 free_cma:0 [ 1880.037057] Node 0 active_anon:742864kB inactive_anon:1020220kB active_file:0kB inactive_file:16kB unevictable:103084kB isolated(anon):0kB isolated(file):0kB mapped:226944kB dirty:0kB writeback:0kB shmem:29088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.072553] Node 1 active_anon:71088kB inactive_anon:3371728kB active_file:76kB inactive_file:16kB unevictable:82876kB isolated(anon):0kB isolated(file):0kB mapped:42504kB dirty:0kB writeback:0kB shmem:12344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.109837] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.139151] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1880.144251] Node 0 DMA32 free:35852kB min:36272kB low:45340kB high:54408kB active_anon:742804kB inactive_anon:1015124kB active_file:0kB inactive_file:20kB unevictable:103084kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103084kB kernel_stack:12320kB pagetables:28276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.176529] lowmem_reserve[]: 0 0 0 0 0 [ 1880.180650] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.210662] lowmem_reserve[]: 0 0 0 0 0 [ 1880.219645] Node 1 Normal free:53252kB min:53612kB low:67012kB high:80412kB active_anon:71088kB inactive_anon:3371728kB active_file:60kB inactive_file:68kB unevictable:82676kB writepending:0kB present:3932160kB managed:3870192kB mlocked:82640kB kernel_stack:14560kB pagetables:44788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.252660] lowmem_reserve[]: 0 0 0 0 0 [ 1880.303369] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1880.334436] Node 0 DMA32: 309*4kB (UME) 292*8kB (UE) 813*16kB (UE) 601*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35812kB [ 1880.393302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1880.481729] Node 1 Normal: 180*4kB (UME) 300*8kB (UME) 106*16kB (UE) 59*32kB (UME) 23*64kB (E) 25*128kB (UME) 25*256kB (UME) 28*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53616kB [ 1880.599084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.632015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.649985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.670052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.689530] 17610 total pagecache pages 07:50:24 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:24 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1880.729759] 0 pages in swap cache [ 1880.733790] Swap cache stats: add 0, delete 0, find 0/0 [ 1880.747601] Free swap = 0kB [ 1880.751041] Total swap = 0kB [ 1880.756587] 1965979 pages RAM [ 1880.759702] 0 pages HighMem/MovableOnly 07:50:24 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioprio_get$uid(0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) [ 1880.807407] 339053 pages reserved [ 1880.810897] 0 pages cma reserved [ 1880.839210] Out of memory: Kill process 27126 (syz-executor.2) score 1009 or sacrifice child 07:50:25 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:25 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:25 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400101, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x1315, 0xffff, 0x4, 0x0, 0x6, 0x1000, 0x431, 0x25, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000080)=0x8) socket$inet(0x2, 0x6, 0xabda) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timerfd_create(0x7, 0x80000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) write$UHID_INPUT2(r8, &(0x7f0000000300)={0xc, {0xd2, "6a3e41d5d15a1543bca16d00b195d9b66f858b04e3cbfd62e7e03cf26d8ab219606237ea10bce8fca0fcbe2594b04ba96aaa2ed14669f09c512ae5d2f36c1efe0477e25f35a0aa4e74dcc7679f8720aee04a6290c7504d422bfeb3bbad69668334989daa51686451962c8b30b786886610f48d6b889b5f291b55069e38a20be07d861d6015bfba3a03009c4aa6bdb5f4a9829ce253df3c5b0ec8b3bd3537d030da4d696b3e44e636d2e876ae8c6d5742ccdd40e2162bd25e4217928a4959e9a2d015131d04d758be1b9cc3cc580f26e1202b"}}, 0xd8) setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f0000000400)=@v1={0x2, 'x'}, 0x2, 0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) 07:50:25 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:25 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="1a", 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000140)=0x8487, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x60}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000100)={@local, r7}, 0x14) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000080)=0x6) [ 1881.791566] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1881.866059] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1881.907425] CPU: 1 PID: 6346 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1881.916723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.926081] Call Trace: [ 1881.928669] dump_stack+0x13e/0x194 [ 1881.932301] dump_header+0x178/0x6d4 [ 1881.936020] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1881.941042] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1881.946152] ? ___ratelimit+0x50/0x519 [ 1881.950049] oom_kill_process.cold+0x10/0xae3 [ 1881.954551] ? lock_downgrade+0x6e0/0x6e0 [ 1881.958706] out_of_memory+0x2d5/0x1110 [ 1881.962699] ? oom_killer_disable+0x1c0/0x1c0 [ 1881.967196] ? mutex_trylock+0x152/0x1a0 [ 1881.971268] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1881.976124] ? warn_alloc+0xf0/0xf0 [ 1881.979774] __alloc_pages_nodemask+0x5d3/0x700 [ 1881.984456] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1881.989564] ? lock_downgrade+0x6e0/0x6e0 [ 1881.993720] alloc_pages_current+0xe7/0x1e0 [ 1881.998054] __page_cache_alloc+0x245/0x3d0 [ 1882.002384] filemap_fault+0xc18/0x1c50 [ 1882.006372] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1882.011049] ? lock_acquire+0x170/0x3f0 [ 1882.015034] ? ext4_filemap_fault+0x7c/0xb0 [ 1882.019368] ext4_filemap_fault+0x84/0xb0 [ 1882.023520] __do_fault+0xfa/0x380 [ 1882.027061] __handle_mm_fault+0x22e9/0x3280 [ 1882.031470] ? copy_page_range+0x1d70/0x1d70 [ 1882.035881] ? find_held_lock+0x2d/0x110 [ 1882.039950] handle_mm_fault+0x288/0x7a0 [ 1882.044014] __do_page_fault+0x4bc/0xb40 [ 1882.048081] ? vmalloc_fault+0xdf0/0xdf0 [ 1882.052146] ? do_page_fault+0x60/0x4f2 [ 1882.056218] ? page_fault+0x2f/0x50 [ 1882.059902] page_fault+0x45/0x50 [ 1882.063354] RIP: ce2b8250:0x1cb5d9 [ 1882.066893] RSP: 1cb5d9:000000000000081a EFLAGS: 00000000 [ 1882.847229] Mem-Info: [ 1882.855426] active_anon:203514 inactive_anon:1097968 isolated_anon:0 [ 1882.855426] active_file:3 inactive_file:12 isolated_file:15 [ 1882.855426] unevictable:45546 dirty:0 writeback:0 unstable:0 [ 1882.855426] slab_reclaimable:18857 slab_unreclaimable:113853 [ 1882.855426] mapped:64642 shmem:10358 pagetables:18306 bounce:0 [ 1882.855426] free:25167 free_pcp:15 free_cma:0 [ 1882.889435] Node 0 active_anon:742880kB inactive_anon:1020212kB active_file:0kB inactive_file:4kB unevictable:101884kB isolated(anon):0kB isolated(file):0kB mapped:226880kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1882.918406] Node 1 active_anon:71176kB inactive_anon:3371660kB active_file:12kB inactive_file:44kB unevictable:80676kB isolated(anon):0kB isolated(file):60kB mapped:31688kB dirty:0kB writeback:0kB shmem:12352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1882.946598] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1882.974311] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1882.979382] Node 0 DMA32 free:36232kB min:36272kB low:45340kB high:54408kB active_anon:742820kB inactive_anon:1015116kB active_file:0kB inactive_file:4kB unevictable:101884kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101884kB kernel_stack:12352kB pagetables:28288kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 1883.009210] lowmem_reserve[]: 0 0 0 0 0 [ 1883.013250] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1883.038800] lowmem_reserve[]: 0 0 0 0 0 [ 1883.042787] Node 1 Normal free:53492kB min:53612kB low:67012kB high:80412kB active_anon:71176kB inactive_anon:3371660kB active_file:12kB inactive_file:44kB unevictable:80676kB writepending:0kB present:3932160kB managed:3870192kB mlocked:80676kB kernel_stack:14720kB pagetables:44928kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1883.072823] lowmem_reserve[]: 0 0 0 0 0 [ 1883.076851] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1883.092847] Node 0 DMA32: 428*4kB (UME) 196*8kB (UME) 828*16kB (UME) 612*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36240kB [ 1883.107466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1883.118251] Node 1 Normal: 121*4kB (UE) 68*8kB (UE) 47*16kB (UME) 78*32kB (UME) 25*64kB (UME) 42*128kB (UME) 25*256kB (UME) 28*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53492kB [ 1883.135486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1883.144479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1883.153058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1883.162063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1883.170705] 15871 total pagecache pages [ 1883.174751] 0 pages in swap cache [ 1883.178192] Swap cache stats: add 0, delete 0, find 0/0 [ 1883.183579] Free swap = 0kB [ 1883.186584] Total swap = 0kB [ 1883.189596] 1965979 pages RAM [ 1883.192792] 0 pages HighMem/MovableOnly [ 1883.196807] 339053 pages reserved [ 1883.200240] 0 pages cma reserved [ 1883.203669] Out of memory: Kill process 27156 (syz-executor.5) score 1007 or sacrifice child [ 1883.212255] Killed process 27156 (syz-executor.5) total-vm:74972kB, anon-rss:17972kB, file-rss:39340kB, shmem-rss:0kB 07:50:27 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1884.388097] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1884.521540] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1884.568550] CPU: 0 PID: 27192 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1884.576458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1884.585806] Call Trace: [ 1884.588394] dump_stack+0x13e/0x194 [ 1884.592020] dump_header+0x178/0x6d4 [ 1884.595814] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1884.600827] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1884.606139] ? ___ratelimit+0x50/0x519 [ 1884.610025] oom_kill_process.cold+0x10/0xae3 [ 1884.614523] ? lock_downgrade+0x6e0/0x6e0 [ 1884.618680] out_of_memory+0x2d5/0x1110 [ 1884.622659] ? oom_killer_disable+0x1c0/0x1c0 [ 1884.627154] ? mutex_trylock+0x152/0x1a0 [ 1884.631215] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1884.636064] ? warn_alloc+0xf0/0xf0 [ 1884.639685] ? find_held_lock+0x2d/0x110 [ 1884.643740] ? fs_reclaim_acquire+0x10/0x10 [ 1884.648063] __alloc_pages_nodemask+0x5d3/0x700 [ 1884.652726] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1884.657741] ? copy_process.part.0+0x17d5/0x6a50 [ 1884.662491] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1884.667506] ? save_trace+0x290/0x290 [ 1884.671303] copy_process.part.0+0x26a/0x6a50 [ 1884.675792] ? find_held_lock+0x2d/0x110 [ 1884.679847] ? __handle_mm_fault+0x1af7/0x3280 [ 1884.684430] ? lock_downgrade+0x6e0/0x6e0 [ 1884.688576] ? pud_val+0xd0/0xd0 [ 1884.691933] ? do_raw_spin_unlock+0x164/0x250 [ 1884.696427] ? __cleanup_sighand+0x40/0x40 [ 1884.700661] _do_fork+0x180/0xc80 [ 1884.704109] ? fork_idle+0x270/0x270 [ 1884.707816] ? up_read+0x17/0x30 [ 1884.711172] ? __do_page_fault+0x35b/0xb40 [ 1884.715401] ? do_syscall_64+0x4c/0x640 [ 1884.719369] ? sys_vfork+0x20/0x20 [ 1884.722903] do_syscall_64+0x1d5/0x640 [ 1884.726799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1884.731979] RIP: 0033:0x45f3f9 [ 1884.735157] RSP: 002b:00007fff3f399558 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1884.742857] RAX: ffffffffffffffda RBX: 00007f18dedc5700 RCX: 000000000045f3f9 [ 1884.750122] RDX: 00007f18dedc59d0 RSI: 00007f18dedc4db0 RDI: 00000000003d0f00 [ 1884.757909] RBP: 00007fff3f399780 R08: 00007f18dedc5700 R09: 00007f18dedc5700 [ 1884.765179] R10: 00007f18dedc59d0 R11: 0000000000000202 R12: 0000000000000000 [ 1884.772439] R13: 00007fff3f39960f R14: 00007f18dedc59c0 R15: 000000000078bf0c 07:50:29 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:29 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000000)={[0x8000]}, 0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x42100, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socket$alg(0x26, 0x5, 0x0) 07:50:29 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:29 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:29 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1885.606939] Mem-Info: [ 1885.609672] active_anon:203512 inactive_anon:1102565 isolated_anon:0 [ 1885.609672] active_file:8 inactive_file:47 isolated_file:0 [ 1885.609672] unevictable:40222 dirty:28 writeback:0 unstable:0 [ 1885.609672] slab_reclaimable:18853 slab_unreclaimable:113968 [ 1885.609672] mapped:63592 shmem:10358 pagetables:18337 bounce:0 [ 1885.609672] free:25337 free_pcp:339 free_cma:0 [ 1885.685327] Node 0 active_anon:742900kB inactive_anon:1021020kB active_file:12kB inactive_file:0kB unevictable:103372kB isolated(anon):0kB isolated(file):32kB mapped:227060kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1885.715086] Node 1 active_anon:71148kB inactive_anon:3389240kB active_file:120kB inactive_file:64kB unevictable:58916kB isolated(anon):0kB isolated(file):0kB mapped:27408kB dirty:112kB writeback:0kB shmem:12348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1885.744364] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1885.771447] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1885.776614] Node 0 DMA32 free:36392kB min:36272kB low:45340kB high:54408kB active_anon:742864kB inactive_anon:1015872kB active_file:0kB inactive_file:28kB unevictable:103320kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103320kB kernel_stack:12320kB pagetables:28632kB bounce:0kB free_pcp:328kB local_pcp:120kB free_cma:0kB [ 1885.866138] lowmem_reserve[]: 0 0 0 0 0 [ 1885.870233] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1886.073189] lowmem_reserve[]: 0 0 0 0 0 [ 1886.103071] Node 1 Normal free:53608kB min:53612kB low:67012kB high:80412kB active_anon:71180kB inactive_anon:3389188kB active_file:52kB inactive_file:48kB unevictable:59544kB writepending:24kB present:3932160kB managed:3870192kB mlocked:59544kB kernel_stack:14624kB pagetables:44604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1886.332156] lowmem_reserve[]: 0 0 0 0 0 [ 1886.357571] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1886.460639] Node 0 DMA32: 29*4kB (UM) 399*8kB (UM) 825*16kB (UE) 602*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35772kB [ 1886.570153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1886.646578] Node 1 Normal: 189*4kB (UME) 49*8kB (UE) 41*16kB (UE) 89*32kB (ME) 51*64kB (ME) 41*128kB (ME) 18*256kB (UME) 28*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53612kB [ 1886.776322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1886.836000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1886.910461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1886.977833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1887.027392] 14798 total pagecache pages [ 1887.056820] 0 pages in swap cache [ 1887.090321] Swap cache stats: add 0, delete 0, find 0/0 [ 1887.130493] Free swap = 0kB [ 1887.147398] Total swap = 0kB [ 1887.182917] 1965979 pages RAM [ 1887.200935] 0 pages HighMem/MovableOnly [ 1887.237190] 339053 pages reserved [ 1887.260246] 0 pages cma reserved [ 1887.287864] Out of memory: Kill process 27163 (syz-executor.1) score 1008 or sacrifice child [ 1887.467520] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1887.565270] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1887.607425] CPU: 0 PID: 27198 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1887.615350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1887.624741] Call Trace: [ 1887.627333] dump_stack+0x13e/0x194 [ 1887.630963] dump_header+0x178/0x6d4 [ 1887.634674] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1887.639690] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1887.644797] ? ___ratelimit+0x50/0x519 [ 1887.648686] oom_kill_process.cold+0x10/0xae3 [ 1887.653187] ? lock_downgrade+0x6e0/0x6e0 [ 1887.657339] out_of_memory+0x2d5/0x1110 [ 1887.661314] ? oom_killer_disable+0x1c0/0x1c0 [ 1887.665808] ? mutex_trylock+0x152/0x1a0 [ 1887.669868] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1887.674732] ? warn_alloc+0xf0/0xf0 [ 1887.678370] __alloc_pages_nodemask+0x5d3/0x700 [ 1887.683037] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1887.688056] ? find_held_lock+0x2d/0x110 [ 1887.692124] alloc_pages_vma+0xc2/0x4a0 [ 1887.696096] __handle_mm_fault+0x17b6/0x3280 [ 1887.700507] ? copy_page_range+0x1d70/0x1d70 [ 1887.704912] ? find_held_lock+0x2d/0x110 [ 1887.708982] handle_mm_fault+0x288/0x7a0 [ 1887.713044] __get_user_pages+0x44d/0x11e0 [ 1887.717286] ? follow_page_mask+0x1580/0x1580 [ 1887.721781] ? lock_acquire+0x170/0x3f0 [ 1887.725748] ? __mm_populate+0x1e3/0x2c0 [ 1887.729805] populate_vma_page_range+0x17b/0x210 [ 1887.734560] __mm_populate+0x195/0x2c0 [ 1887.738454] ? populate_vma_page_range+0x210/0x210 [ 1887.743409] ? security_capable+0x88/0xb0 [ 1887.747558] SyS_mlockall+0x3f5/0x520 [ 1887.751354] ? SyS_munlock+0xf0/0xf0 [ 1887.755062] do_syscall_64+0x1d5/0x640 [ 1887.758952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1887.764136] RIP: 0033:0x45ca29 [ 1887.767318] RSP: 002b:00007fab877c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1887.775019] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1887.782368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1887.789654] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1887.796918] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1887.804200] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fab877c96d4 [ 1888.957882] Mem-Info: [ 1888.960350] active_anon:203543 inactive_anon:1102539 isolated_anon:0 [ 1888.960350] active_file:30 inactive_file:0 isolated_file:1 [ 1888.960350] unevictable:41021 dirty:0 writeback:0 unstable:0 [ 1888.960350] slab_reclaimable:18864 slab_unreclaimable:114047 [ 1888.960350] mapped:63588 shmem:10358 pagetables:18299 bounce:0 [ 1888.960350] free:24955 free_pcp:33 free_cma:0 [ 1888.994910] Node 0 active_anon:742992kB inactive_anon:1020968kB active_file:0kB inactive_file:0kB unevictable:104540kB isolated(anon):0kB isolated(file):4kB mapped:226980kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1889.023289] Node 1 active_anon:71180kB inactive_anon:3389188kB active_file:48kB inactive_file:48kB unevictable:59544kB isolated(anon):0kB isolated(file):0kB mapped:27372kB dirty:0kB writeback:0kB shmem:12348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1889.051361] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1889.077953] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1889.083029] Node 0 DMA32 free:35748kB min:36272kB low:45340kB high:54408kB active_anon:742932kB inactive_anon:1015872kB active_file:0kB inactive_file:0kB unevictable:104540kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104540kB kernel_stack:12320kB pagetables:28584kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1889.113043] lowmem_reserve[]: 0 0 0 0 0 [ 1889.117066] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1889.143226] lowmem_reserve[]: 0 0 0 0 0 [ 1889.147228] Node 1 Normal free:53588kB min:53612kB low:67012kB high:80412kB active_anon:71180kB inactive_anon:3389188kB active_file:48kB inactive_file:48kB unevictable:59544kB writepending:0kB present:3932160kB managed:3870192kB mlocked:59544kB kernel_stack:14528kB pagetables:44608kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1889.178176] lowmem_reserve[]: 0 0 0 0 0 [ 1889.182177] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1889.198535] Node 0 DMA32: 83*4kB (UME) 439*8kB (UME) 825*16kB (UME) 604*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36372kB [ 1889.212786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1889.224317] Node 1 Normal: 806*4kB (UME) 384*8kB (UME) 247*16kB (UME) 141*32kB (UME) 54*64kB (ME) 41*128kB (ME) 18*256kB (UME) 28*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 63912kB [ 1889.257868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:50:33 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1889.333208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1889.404709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:50:33 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa08, 0x298000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) write$UHID_INPUT2(r5, &(0x7f0000000100)={0xc, {0x19, "5d2b1ccc66478ec2b13af883aeb2c7afed643f2af226f374a0"}}, 0x1f) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x5}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r7, 0x1}, 0x14}}, 0x0) shutdown(r6, 0x1) [ 1889.506403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:50:33 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:33 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1889.602705] 16740 total pagecache pages [ 1889.655358] 0 pages in swap cache [ 1889.697070] Swap cache stats: add 0, delete 0, find 0/0 [ 1889.733341] Free swap = 0kB 07:50:33 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1889.749930] Total swap = 0kB [ 1889.783784] 1965979 pages RAM [ 1889.804531] 0 pages HighMem/MovableOnly [ 1889.826740] 339053 pages reserved [ 1889.847748] 0 pages cma reserved [ 1889.858342] Out of memory: Kill process 27194 (syz-executor.2) score 1007 or sacrifice child [ 1890.517291] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1890.634359] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1890.639177] CPU: 1 PID: 6321 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1890.646618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1890.655966] Call Trace: [ 1890.658561] dump_stack+0x13e/0x194 [ 1890.662186] dump_header+0x178/0x6d4 [ 1890.665895] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1890.670907] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1890.676004] ? ___ratelimit+0x50/0x519 [ 1890.679890] oom_kill_process.cold+0x10/0xae3 [ 1890.684388] ? lock_downgrade+0x6e0/0x6e0 [ 1890.688534] out_of_memory+0x2d5/0x1110 [ 1890.692509] ? oom_killer_disable+0x1c0/0x1c0 [ 1890.697002] ? mutex_trylock+0x152/0x1a0 [ 1890.701060] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1890.705910] ? warn_alloc+0xf0/0xf0 [ 1890.709541] __alloc_pages_nodemask+0x5d3/0x700 [ 1890.714206] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1890.719217] ? lock_downgrade+0x6e0/0x6e0 [ 1890.723369] alloc_pages_current+0xe7/0x1e0 [ 1890.727687] __page_cache_alloc+0x245/0x3d0 [ 1890.732015] filemap_fault+0xc18/0x1c50 [ 1890.735994] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1890.740660] ? lock_acquire+0x170/0x3f0 [ 1890.744629] ? ext4_filemap_fault+0x7c/0xb0 [ 1890.748950] ext4_filemap_fault+0x84/0xb0 [ 1890.753094] __do_fault+0xfa/0x380 [ 1890.756630] __handle_mm_fault+0x22e9/0x3280 [ 1890.761033] ? copy_page_range+0x1d70/0x1d70 [ 1890.765446] ? find_held_lock+0x2d/0x110 [ 1890.769509] handle_mm_fault+0x288/0x7a0 [ 1890.773565] __do_page_fault+0x4bc/0xb40 [ 1890.777620] ? vmalloc_fault+0xdf0/0xdf0 [ 1890.781676] ? do_page_fault+0x60/0x4f2 [ 1890.785642] ? page_fault+0x2f/0x50 [ 1890.789264] page_fault+0x45/0x50 [ 1890.792706] RIP: 00f1:0x11 [ 1890.795537] RSP: 20001e00:000000c42016bde8 EFLAGS: 00000000 [ 1892.185188] Mem-Info: [ 1892.264428] active_anon:203512 inactive_anon:1102574 isolated_anon:0 [ 1892.264428] active_file:32 inactive_file:10 isolated_file:0 [ 1892.264428] unevictable:41731 dirty:4 writeback:0 unstable:0 [ 1892.264428] slab_reclaimable:18890 slab_unreclaimable:113178 [ 1892.264428] mapped:64908 shmem:10358 pagetables:18316 bounce:0 [ 1892.264428] free:25036 free_pcp:0 free_cma:0 [ 1892.613690] Node 0 active_anon:742928kB inactive_anon:1020976kB active_file:12kB inactive_file:8kB unevictable:104792kB isolated(anon):0kB isolated(file):0kB mapped:229244kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1892.709064] Node 1 active_anon:71120kB inactive_anon:3389320kB active_file:128kB inactive_file:80kB unevictable:62132kB isolated(anon):0kB isolated(file):108kB mapped:30388kB dirty:16kB writeback:0kB shmem:12352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1892.737536] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1892.764171] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1892.769216] Node 0 DMA32 free:36140kB min:36272kB low:45340kB high:54408kB active_anon:742868kB inactive_anon:1015880kB active_file:0kB inactive_file:64kB unevictable:104792kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104792kB kernel_stack:12416kB pagetables:28372kB bounce:0kB free_pcp:48kB local_pcp:20kB free_cma:0kB [ 1892.799751] lowmem_reserve[]: 0 0 0 0 0 [ 1892.803811] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1892.862762] lowmem_reserve[]: 0 0 0 0 0 [ 1892.866798] Node 1 Normal free:53728kB min:53612kB low:67012kB high:80412kB active_anon:71100kB inactive_anon:3404512kB active_file:6164kB inactive_file:6420kB unevictable:34708kB writepending:16kB present:3932160kB managed:3870192kB mlocked:34544kB kernel_stack:14336kB pagetables:44620kB bounce:0kB free_pcp:516kB local_pcp:212kB free_cma:0kB [ 1892.948687] lowmem_reserve[]: 0 0 0 0 0 [ 1892.979702] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1893.002312] Node 0 DMA32: 184*4kB (UME) 376*8kB (UM) 839*16kB (UME) 604*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36496kB 07:50:37 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:37 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:37 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1893.136918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1893.207202] Node 1 Normal: 1209*4kB (ME) 1735*8kB (UME) 654*16kB (UME) 211*32kB (UME) 51*64kB (UME) 43*128kB (UME) 15*256kB (UME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 83356kB 07:50:37 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1893.308524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1893.358091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1893.404679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1893.461843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1893.527413] 16498 total pagecache pages [ 1893.559986] 0 pages in swap cache [ 1893.586399] Swap cache stats: add 0, delete 0, find 0/0 [ 1893.606293] Free swap = 0kB [ 1893.618572] Total swap = 0kB [ 1893.628352] 1965979 pages RAM [ 1893.633885] 0 pages HighMem/MovableOnly [ 1893.637993] 339053 pages reserved [ 1893.641699] 0 pages cma reserved [ 1893.652332] Out of memory: Kill process 27215 (syz-executor.1) score 1008 or sacrifice child [ 1893.867296] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1893.973087] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1894.006822] CPU: 1 PID: 6321 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1894.014305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1894.023658] Call Trace: [ 1894.026257] dump_stack+0x13e/0x194 [ 1894.029919] dump_header+0x178/0x6d4 [ 1894.033642] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1894.038682] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1894.043796] ? ___ratelimit+0x50/0x519 [ 1894.047684] oom_kill_process.cold+0x10/0xae3 [ 1894.052181] ? lock_downgrade+0x6e0/0x6e0 [ 1894.056336] out_of_memory+0x2d5/0x1110 [ 1894.060372] ? oom_killer_disable+0x1c0/0x1c0 [ 1894.064874] ? mutex_trylock+0x152/0x1a0 [ 1894.068942] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1894.073800] ? warn_alloc+0xf0/0xf0 [ 1894.077439] __alloc_pages_nodemask+0x5d3/0x700 [ 1894.082111] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1894.087127] ? lock_downgrade+0x6e0/0x6e0 [ 1894.091284] alloc_pages_current+0xe7/0x1e0 [ 1894.095611] __page_cache_alloc+0x245/0x3d0 [ 1894.099936] filemap_fault+0xc18/0x1c50 [ 1894.103917] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1894.108585] ? lock_acquire+0x170/0x3f0 [ 1894.112559] ? ext4_filemap_fault+0x7c/0xb0 [ 1894.116912] ext4_filemap_fault+0x84/0xb0 [ 1894.121058] __do_fault+0xfa/0x380 [ 1894.124595] __handle_mm_fault+0x22e9/0x3280 [ 1894.128997] ? copy_page_range+0x1d70/0x1d70 [ 1894.133399] ? find_held_lock+0x2d/0x110 [ 1894.137468] handle_mm_fault+0x288/0x7a0 [ 1894.141525] __do_page_fault+0x4bc/0xb40 [ 1894.145586] ? vmalloc_fault+0xdf0/0xdf0 [ 1894.149641] ? do_page_fault+0x60/0x4f2 [ 1894.153610] ? page_fault+0x2f/0x50 [ 1894.157231] page_fault+0x45/0x50 [ 1894.160681] RIP: 00f1:0x11 [ 1894.163514] RSP: 2015a400:000000c42016bda0 EFLAGS: 00000000 [ 1894.999840] Mem-Info: [ 1895.039611] active_anon:203502 inactive_anon:1102539 isolated_anon:0 [ 1895.039611] active_file:27 inactive_file:0 isolated_file:0 [ 1895.039611] unevictable:41600 dirty:0 writeback:0 unstable:0 [ 1895.039611] slab_reclaimable:18887 slab_unreclaimable:113441 [ 1895.039611] mapped:63605 shmem:10358 pagetables:18251 bounce:0 [ 1895.039611] free:25060 free_pcp:45 free_cma:0 [ 1895.262667] Node 0 active_anon:743116kB inactive_anon:1020964kB active_file:12kB inactive_file:8kB unevictable:103304kB isolated(anon):0kB isolated(file):0kB mapped:228852kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1895.446909] Node 1 active_anon:70892kB inactive_anon:3389192kB active_file:0kB inactive_file:76kB unevictable:63096kB isolated(anon):0kB isolated(file):0kB mapped:25568kB dirty:0kB writeback:0kB shmem:12352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1895.628610] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1895.808580] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1895.842758] Node 0 DMA32 free:36232kB min:36272kB low:45340kB high:54408kB active_anon:743056kB inactive_anon:1015868kB active_file:12kB inactive_file:8kB unevictable:103304kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103304kB kernel_stack:12320kB pagetables:28276kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 1896.039459] lowmem_reserve[]: 0 0 0 0 0 [ 1896.066241] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1896.239161] lowmem_reserve[]: 0 0 0 0 0 [ 1896.264127] Node 1 Normal free:53556kB min:53612kB low:67012kB high:80412kB active_anon:70892kB inactive_anon:3389192kB active_file:92kB inactive_file:0kB unevictable:63124kB writepending:0kB present:3932160kB managed:3870192kB mlocked:63124kB kernel_stack:14400kB pagetables:44720kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1896.482033] lowmem_reserve[]: 0 0 0 0 0 [ 1896.501504] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1896.587105] Node 0 DMA32: 398*4kB (UME) 240*8kB (UME) 834*16kB (UE) 602*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 1896.687971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1896.766691] Node 1 Normal: 193*4kB (UM) 182*8kB (UME) 198*16kB (UME) 78*32kB (UME) 31*64kB (UME) 40*128kB (UME) 15*256kB (UME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53652kB [ 1896.881269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.956943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1897.031915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1897.087443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1897.137269] 14809 total pagecache pages [ 1897.141277] 0 pages in swap cache [ 1897.190164] Swap cache stats: add 0, delete 0, find 0/0 [ 1897.216154] Free swap = 0kB [ 1897.219195] Total swap = 0kB [ 1897.222206] 1965979 pages RAM [ 1897.228494] 0 pages HighMem/MovableOnly [ 1897.256547] 339053 pages reserved [ 1897.260030] 0 pages cma reserved [ 1897.272336] Out of memory: Kill process 27230 (syz-executor.2) score 1007 or sacrifice child [ 1897.301247] Killed process 27233 (syz-executor.2) total-vm:74840kB, anon-rss:15880kB, file-rss:40176kB, shmem-rss:0kB 07:50:41 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:41 executing program 4 (fault-call:9 fault-nth:0): mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:41 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:41 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket(0x28, 0x800, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = dup(0xffffffffffffffff) r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0xc000000000, 0x3ff, 0x2, 0xb0b0b0b0}) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x2800) shmctl$SHM_LOCK(r2, 0xb) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0xfffffffffffffe1f, r5, 0x1}, 0x14}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f0000000500)=""/163, 0xa3}], 0x3, &(0x7f00000005c0)=""/14, 0xa}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40401, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000300)=""/251, 0xfb}, &(0x7f0000000140), 0x15}, 0x20) 07:50:41 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1897.674892] audit: type=1800 audit(1589615441.741:53): pid=27245 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=65538 res=0 [ 1897.873041] audit: type=1800 audit(1589615441.931:54): pid=27249 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=98306 res=0 [ 1898.403466] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1898.474451] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1898.479614] CPU: 1 PID: 27244 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1898.487492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1898.496844] Call Trace: [ 1898.499442] dump_stack+0x13e/0x194 [ 1898.503076] dump_header+0x178/0x6d4 [ 1898.506796] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1898.511815] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1898.517006] ? ___ratelimit+0x50/0x519 [ 1898.520898] oom_kill_process.cold+0x10/0xae3 [ 1898.525393] ? lock_acquire+0x170/0x3f0 [ 1898.529364] ? lock_downgrade+0x6e0/0x6e0 [ 1898.533516] out_of_memory+0x2d5/0x1110 [ 1898.537495] ? oom_killer_disable+0x1c0/0x1c0 [ 1898.541989] ? mutex_trylock+0x152/0x1a0 [ 1898.546054] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1898.550912] ? warn_alloc+0xf0/0xf0 [ 1898.554580] __alloc_pages_nodemask+0x5d3/0x700 [ 1898.559254] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1898.564270] ? find_held_lock+0x2d/0x110 [ 1898.568343] alloc_pages_vma+0xc2/0x4a0 [ 1898.572324] __handle_mm_fault+0x17b6/0x3280 [ 1898.576739] ? copy_page_range+0x1d70/0x1d70 [ 1898.581155] ? find_held_lock+0x2d/0x110 [ 1898.585233] handle_mm_fault+0x288/0x7a0 [ 1898.589302] __get_user_pages+0x44d/0x11e0 [ 1898.593549] ? follow_page_mask+0x1580/0x1580 [ 1898.598050] ? lock_acquire+0x170/0x3f0 [ 1898.602026] ? __mm_populate+0x1e3/0x2c0 [ 1898.606092] populate_vma_page_range+0x17b/0x210 [ 1898.610870] __mm_populate+0x195/0x2c0 [ 1898.614761] ? populate_vma_page_range+0x210/0x210 [ 1898.619691] ? security_capable+0x88/0xb0 [ 1898.623848] SyS_mlockall+0x3f5/0x520 [ 1898.627647] ? SyS_munlock+0xf0/0xf0 [ 1898.631361] do_syscall_64+0x1d5/0x640 [ 1898.635255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1898.640443] RIP: 0033:0x45ca29 [ 1898.643649] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1898.651359] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1898.658627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1898.665899] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1898.673169] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1898.680442] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 1899.172260] Mem-Info: [ 1899.234914] active_anon:203506 inactive_anon:1104587 isolated_anon:0 [ 1899.234914] active_file:4 inactive_file:23 isolated_file:0 [ 1899.234914] unevictable:38915 dirty:0 writeback:0 unstable:0 [ 1899.234914] slab_reclaimable:18784 slab_unreclaimable:114235 [ 1899.234914] mapped:63615 shmem:12406 pagetables:18247 bounce:0 [ 1899.234914] free:24964 free_pcp:68 free_cma:0 [ 1899.512094] Node 0 active_anon:743100kB inactive_anon:1020964kB active_file:0kB inactive_file:12kB unevictable:103976kB isolated(anon):0kB isolated(file):0kB mapped:229140kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1899.687159] Node 1 active_anon:70924kB inactive_anon:3397384kB active_file:108kB inactive_file:0kB unevictable:51684kB isolated(anon):0kB isolated(file):0kB mapped:25320kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1899.870973] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1899.909938] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1899.919921] Node 0 DMA32 free:36168kB min:36272kB low:45340kB high:54408kB active_anon:743040kB inactive_anon:1015868kB active_file:8kB inactive_file:8kB unevictable:103988kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103988kB kernel_stack:12320kB pagetables:28272kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 1899.965040] lowmem_reserve[]: 0 0 0 0 0 [ 1899.969066] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1900.009204] lowmem_reserve[]: 0 0 0 0 0 [ 1900.018121] Node 1 Normal free:53244kB min:53612kB low:67012kB high:80412kB active_anon:70924kB inactive_anon:3397384kB active_file:56kB inactive_file:44kB unevictable:51752kB writepending:0kB present:3932160kB managed:3870192kB mlocked:51752kB kernel_stack:14496kB pagetables:44708kB bounce:0kB free_pcp:144kB local_pcp:4kB free_cma:0kB [ 1900.065109] lowmem_reserve[]: 0 0 0 0 0 [ 1900.069168] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1900.100167] Node 0 DMA32: 198*4kB (UM) 310*8kB (UME) 840*16kB (UE) 608*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36168kB [ 1900.128327] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1900.146743] Node 1 Normal: 273*4kB (UE) 83*8kB (UE) 68*16kB (UME) 97*32kB (UME) 45*64kB (UME) 43*128kB (UME) 16*256kB (UME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53244kB [ 1900.178866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1900.195248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1900.218786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1900.245780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1900.264358] 16850 total pagecache pages [ 1900.268465] 0 pages in swap cache [ 1900.271987] Swap cache stats: add 0, delete 0, find 0/0 [ 1900.289581] Free swap = 0kB [ 1900.297756] Total swap = 0kB [ 1900.300854] 1965979 pages RAM [ 1900.318789] 0 pages HighMem/MovableOnly [ 1900.330281] 339053 pages reserved [ 1900.341321] 0 pages cma reserved [ 1900.352101] Out of memory: Kill process 14501 (syz-executor.2) score 1007 or sacrifice child [ 1900.368151] Killed process 14501 (syz-executor.2) total-vm:74972kB, anon-rss:18260kB, file-rss:34628kB, shmem-rss:0kB [ 1900.535243] oom_reaper: reaped process 14501 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:50:44 executing program 1 (fault-call:3 fault-nth:0): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:50:44 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:45 executing program 5 (fault-call:13 fault-nth:0): mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:45 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000480)={@null=' \x00', 0xf, 'ipvlan0\x00'}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ecc7ce9acd004044d04f0948bbd2c12e3c153f0d", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01000002000000000000010000005f00a7497cd1d97dd2ebc462afabb675f84577e48f0a9863795e4a9bc78466c9365ea1c3a7e845944fa467ea73a9cece757da8ac138663998484cdb7aaf75bf2ee36289b0d2db514c272cca8b9d7f6e0121cbfd99d1029a4b809cdd8b318984f28b3e35be8c655acdfa3820bdec718262bbe109c9f062c79e63239d7559c64007eadfffa9a129c7bd2c31d577419311fdb1ad65d1af8a1a3ad06a3c6b0052ef711123d473da8f09a4d"], 0x14}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xe00, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="0aac2cc76486d45e3871f7ee6e2672eb51993c7cd8db0804ce02cf97796c74e0f1481bf4527682e298f58b7109e7b834b69bd5585d1ee7d953799fe5cf09b77101004392d755527bcfaa766aaa000000000100d90001173ad2d68d372866fad5157fdfce14a67692d7972cc770d701cea125262d5eda7e5acf47b0e407d800ce9908956bb6bbfc7e70a22a78a829de96426f03056edf249908ce7f33bf82aee2a0cb58d29e6a89ebacdf49dc6e", 0xad}, {&(0x7f0000000140)="505930ea2972813bdc41b34b46bcc8ab18655e03df322170343caa", 0x1b}], 0x2) 07:50:45 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:45 executing program 4: mlockall(0x5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)="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", 0x1f9) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYRES16=r2], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1901.035360] FAULT_INJECTION: forcing a failure. [ 1901.035360] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.088978] CPU: 0 PID: 27264 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1901.096905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.106266] Call Trace: [ 1901.108867] dump_stack+0x13e/0x194 [ 1901.112529] should_fail.cold+0x10a/0x14b [ 1901.116690] should_failslab+0xd6/0x130 [ 1901.120672] __kmalloc+0x2e9/0x7c0 [ 1901.124212] ? SyS_memfd_create+0xb9/0x3a0 [ 1901.128454] ? wait_for_completion+0x390/0x390 [ 1901.133039] ? strnlen_user+0x130/0x1a0 [ 1901.137019] SyS_memfd_create+0xb9/0x3a0 [ 1901.141172] ? shmem_fcntl+0x120/0x120 [ 1901.145085] ? SyS_clock_settime+0x1a0/0x1a0 [ 1901.149498] ? do_syscall_64+0x4c/0x640 [ 1901.153473] ? shmem_fcntl+0x120/0x120 [ 1901.157363] do_syscall_64+0x1d5/0x640 [ 1901.161264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1901.166495] RIP: 0033:0x45ca29 [ 1901.169682] RSP: 002b:00007f23ee3eba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1901.177409] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1901.184685] RDX: 0000000020000588 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1901.191957] RBP: 000000000078bfa0 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1901.199231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1901.206508] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007f23ee3ec6d4 07:50:45 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x90801, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)=ANY=[@ANYBLOB="14679910", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) r6 = dup(r4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000010000000000000000", @ANYRES32=r10, @ANYBLOB="0100000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100018, r10}) socket$packet(0x11, 0x3, 0x300) [ 1901.563734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1902.047420] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1902.069400] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1902.074853] CPU: 1 PID: 27269 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1902.082739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1902.092132] Call Trace: [ 1902.094760] dump_stack+0x13e/0x194 [ 1902.098417] dump_header+0x178/0x6d4 [ 1902.102132] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1902.107219] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1902.112312] ? ___ratelimit+0x50/0x519 [ 1902.116200] oom_kill_process.cold+0x10/0xae3 [ 1902.120707] ? lock_downgrade+0x6e0/0x6e0 [ 1902.124852] out_of_memory+0x2d5/0x1110 [ 1902.128829] ? oom_killer_disable+0x1c0/0x1c0 [ 1902.133323] ? mutex_trylock+0x152/0x1a0 [ 1902.137384] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1902.142324] ? warn_alloc+0xf0/0xf0 [ 1902.145956] __alloc_pages_nodemask+0x5d3/0x700 [ 1902.150616] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1902.155621] ? find_held_lock+0x2d/0x110 [ 1902.159692] alloc_pages_vma+0xc2/0x4a0 [ 1902.163669] __handle_mm_fault+0x17b6/0x3280 [ 1902.168072] ? copy_page_range+0x1d70/0x1d70 [ 1902.172482] ? find_held_lock+0x2d/0x110 [ 1902.176546] handle_mm_fault+0x288/0x7a0 [ 1902.180599] __get_user_pages+0x44d/0x11e0 [ 1902.184831] ? follow_page_mask+0x1580/0x1580 [ 1902.189404] ? lock_acquire+0x170/0x3f0 [ 1902.193372] ? __mm_populate+0x1e3/0x2c0 [ 1902.197431] populate_vma_page_range+0x17b/0x210 [ 1902.202204] __mm_populate+0x195/0x2c0 [ 1902.206092] ? populate_vma_page_range+0x210/0x210 [ 1902.211015] ? security_capable+0x88/0xb0 [ 1902.215163] SyS_mlockall+0x3f5/0x520 [ 1902.218962] ? SyS_munlock+0xf0/0xf0 [ 1902.222701] do_syscall_64+0x1d5/0x640 [ 1902.226594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1902.231776] RIP: 0033:0x45ca29 [ 1902.234958] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1902.242756] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1902.250110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1902.257400] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1902.264669] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1902.271940] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 1902.282539] Mem-Info: [ 1902.284990] active_anon:203553 inactive_anon:1100048 isolated_anon:0 [ 1902.284990] active_file:40 inactive_file:21 isolated_file:0 [ 1902.284990] unevictable:43025 dirty:0 writeback:0 unstable:0 [ 1902.284990] slab_reclaimable:18792 slab_unreclaimable:113645 [ 1902.284990] mapped:64890 shmem:12406 pagetables:18331 bounce:0 [ 1902.284990] free:24894 free_pcp:0 free_cma:0 [ 1902.328641] Node 0 active_anon:743120kB inactive_anon:1020968kB active_file:76kB inactive_file:56kB unevictable:107888kB isolated(anon):0kB isolated(file):0kB mapped:228072kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1902.369269] Node 1 active_anon:71092kB inactive_anon:3379224kB active_file:100kB inactive_file:12kB unevictable:64212kB isolated(anon):0kB isolated(file):0kB mapped:31488kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1902.416489] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.460689] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1902.485432] Node 0 DMA32 free:36184kB min:36272kB low:45340kB high:54408kB active_anon:743060kB inactive_anon:1015872kB active_file:24kB inactive_file:24kB unevictable:107888kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107888kB kernel_stack:12384kB pagetables:28320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.542334] lowmem_reserve[]: 0 0 0 0 0 [ 1902.546619] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.603297] lowmem_reserve[]: 0 0 0 0 0 [ 1902.607563] Node 1 Normal free:53480kB min:53612kB low:67012kB high:80412kB active_anon:71092kB inactive_anon:3379224kB active_file:4kB inactive_file:72kB unevictable:64272kB writepending:0kB present:3932160kB managed:3870192kB mlocked:64272kB kernel_stack:14848kB pagetables:44996kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.661229] lowmem_reserve[]: 0 0 0 0 0 [ 1902.689056] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1902.732900] Node 0 DMA32: 26*4kB (U) 158*8kB (UM) 968*16kB (UE) 604*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 1902.761561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1902.787401] Node 1 Normal: 242*4kB (UME) 222*8kB (UME) 55*16kB (ME) 36*32kB (UME) 27*64kB (UME) 39*128kB (ME) 30*256kB (ME) 27*512kB (UME) 12*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53480kB [ 1902.820371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1902.847986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1902.871769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1902.886006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1902.909679] 18097 total pagecache pages [ 1902.918928] 0 pages in swap cache [ 1902.929051] Swap cache stats: add 0, delete 0, find 0/0 [ 1902.959464] Free swap = 0kB [ 1902.987275] Total swap = 0kB [ 1902.990551] 1965979 pages RAM [ 1903.001318] 0 pages HighMem/MovableOnly [ 1903.028254] 339053 pages reserved [ 1903.031734] 0 pages cma reserved [ 1903.050674] Out of memory: Kill process 27259 (syz-executor.2) score 1008 or sacrifice child [ 1903.080998] Killed process 27281 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1903.216680] oom_reaper: reaped process 27281 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1903.268984] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1903.291983] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1903.297195] CPU: 0 PID: 6346 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1903.305093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.314467] Call Trace: [ 1903.317085] dump_stack+0x13e/0x194 [ 1903.320723] dump_header+0x178/0x6d4 [ 1903.324420] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1903.329418] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1903.334598] ? ___ratelimit+0x50/0x519 [ 1903.338477] oom_kill_process.cold+0x10/0xae3 [ 1903.342958] ? lock_downgrade+0x6e0/0x6e0 [ 1903.347107] out_of_memory+0x2d5/0x1110 [ 1903.351081] ? oom_killer_disable+0x1c0/0x1c0 [ 1903.355570] ? mutex_trylock+0x152/0x1a0 [ 1903.359806] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1903.364664] ? warn_alloc+0xf0/0xf0 [ 1903.368426] __alloc_pages_nodemask+0x5d3/0x700 [ 1903.373107] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1903.378227] ? lock_downgrade+0x6e0/0x6e0 [ 1903.382387] alloc_pages_current+0xe7/0x1e0 [ 1903.386702] __page_cache_alloc+0x245/0x3d0 [ 1903.391010] filemap_fault+0xc18/0x1c50 [ 1903.395077] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1903.399793] ? lock_acquire+0x170/0x3f0 [ 1903.403823] ? ext4_filemap_fault+0x7c/0xb0 [ 1903.408196] ext4_filemap_fault+0x84/0xb0 [ 1903.412343] __do_fault+0xfa/0x380 [ 1903.415868] __handle_mm_fault+0x22e9/0x3280 [ 1903.420261] ? copy_page_range+0x1d70/0x1d70 [ 1903.424654] ? find_held_lock+0x2d/0x110 [ 1903.428703] handle_mm_fault+0x288/0x7a0 [ 1903.432750] __do_page_fault+0x4bc/0xb40 [ 1903.436797] ? vmalloc_fault+0xdf0/0xdf0 [ 1903.440851] ? do_page_fault+0x60/0x4f2 [ 1903.444813] ? page_fault+0x2f/0x50 [ 1903.448426] page_fault+0x45/0x50 [ 1903.451856] RIP: ce2b8250:0x1d0433 [ 1903.455372] RSP: 1d0517:000000000000082b EFLAGS: 00000012 [ 1903.462238] Mem-Info: [ 1903.470201] active_anon:203550 inactive_anon:1100044 isolated_anon:0 [ 1903.470201] active_file:22 inactive_file:9 isolated_file:0 [ 1903.470201] unevictable:43040 dirty:0 writeback:0 unstable:0 [ 1903.470201] slab_reclaimable:18792 slab_unreclaimable:113651 [ 1903.470201] mapped:64872 shmem:12406 pagetables:18299 bounce:0 [ 1903.470201] free:24991 free_pcp:77 free_cma:0 [ 1903.508973] Node 0 active_anon:743120kB inactive_anon:1020968kB active_file:100kB inactive_file:0kB unevictable:107888kB isolated(anon):0kB isolated(file):0kB mapped:228012kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1903.542318] Node 1 active_anon:71080kB inactive_anon:3379208kB active_file:0kB inactive_file:96kB unevictable:64272kB isolated(anon):0kB isolated(file):0kB mapped:31476kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1903.575461] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.607703] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1903.612843] Node 0 DMA32 free:35996kB min:36272kB low:45340kB high:54408kB active_anon:743060kB inactive_anon:1015872kB active_file:100kB inactive_file:0kB unevictable:107888kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107888kB kernel_stack:12384kB pagetables:28316kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1903.646241] lowmem_reserve[]: 0 0 0 0 0 [ 1903.650236] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.686570] lowmem_reserve[]: 0 0 0 0 0 [ 1903.690691] Node 1 Normal free:53512kB min:53612kB low:67012kB high:80412kB active_anon:71080kB inactive_anon:3379208kB active_file:80kB inactive_file:0kB unevictable:64272kB writepending:0kB present:3932160kB managed:3870192kB mlocked:64272kB kernel_stack:14816kB pagetables:44872kB bounce:0kB free_pcp:180kB local_pcp:0kB free_cma:0kB [ 1903.731514] lowmem_reserve[]: 0 0 0 0 0 [ 1903.736103] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1903.757862] Node 0 DMA32: 1*4kB (U) 151*8kB (UM) 968*16kB (UE) 603*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35996kB [ 1903.823773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1903.849186] Node 1 Normal: 242*4kB (UME) 222*8kB (UME) 55*16kB (ME) 37*32kB (UME) 27*64kB (UME) 39*128kB (ME) 30*256kB (ME) 27*512kB (UME) 12*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53512kB [ 1903.912110] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 1903.956248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.977514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1904.013134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1904.047878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1904.116566] 17229 total pagecache pages [ 1904.121459] 0 pages in swap cache [ 1904.133595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1904.151448] Swap cache stats: add 0, delete 0, find 0/0 07:50:48 executing program 1 (fault-call:3 fault-nth:1): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:50:48 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1904.194030] Free swap = 0kB [ 1904.197673] Total swap = 0kB [ 1904.233258] 1965979 pages RAM [ 1904.248933] 0 pages HighMem/MovableOnly [ 1904.276517] 339053 pages reserved [ 1904.297891] 0 pages cma reserved [ 1904.319004] Out of memory: Kill process 27259 (syz-executor.2) score 1008 or sacrifice child [ 1904.331194] FAULT_INJECTION: forcing a failure. [ 1904.331194] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.416371] CPU: 0 PID: 27301 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1904.424296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.433667] Call Trace: [ 1904.436364] dump_stack+0x13e/0x194 [ 1904.440008] should_fail.cold+0x10a/0x14b [ 1904.444173] should_failslab+0xd6/0x130 [ 1904.448187] kmem_cache_alloc+0x2b5/0x770 [ 1904.452355] ? find_held_lock+0x2d/0x110 [ 1904.456431] ? __alloc_fd+0x1bf/0x490 [ 1904.460268] __d_alloc+0x2a/0x9b0 [ 1904.463731] ? lock_downgrade+0x6e0/0x6e0 [ 1904.467890] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1904.472741] ? shmem_fill_super+0x8a0/0x8a0 [ 1904.477069] ? __alloc_fd+0x1bf/0x490 [ 1904.480882] SyS_memfd_create+0x1f6/0x3a0 [ 1904.485036] ? shmem_fcntl+0x120/0x120 [ 1904.488934] ? SyS_clock_settime+0x1a0/0x1a0 [ 1904.493360] ? do_syscall_64+0x4c/0x640 [ 1904.497348] ? shmem_fcntl+0x120/0x120 [ 1904.501242] do_syscall_64+0x1d5/0x640 [ 1904.505140] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1904.510419] RIP: 0033:0x45ca29 07:50:48 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:48 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x100000080000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1904.513629] RSP: 002b:00007f23ee3eba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1904.521349] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1904.528732] RDX: 0000000020000588 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1904.536184] RBP: 000000000078bfa0 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1904.543485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1904.550763] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007f23ee3ec6d4 07:50:48 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, 0x0, 0x8001, 0xfffffffffffffffc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f7365300000000000000000795a3ced541a10db410000000000000000000000001000"/509], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:48 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setpgid(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1905.579081] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1905.691296] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1905.739907] CPU: 1 PID: 27317 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1905.747827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.757210] Call Trace: [ 1905.759811] dump_stack+0x13e/0x194 [ 1905.763460] dump_header+0x178/0x6d4 [ 1905.767220] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1905.772242] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1905.777346] ? ___ratelimit+0x50/0x519 [ 1905.781500] oom_kill_process.cold+0x10/0xae3 [ 1905.786004] ? lock_downgrade+0x6e0/0x6e0 [ 1905.790185] out_of_memory+0x2d5/0x1110 [ 1905.794173] ? oom_killer_disable+0x1c0/0x1c0 [ 1905.798673] ? mutex_trylock+0x152/0x1a0 [ 1905.802742] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1905.807602] ? warn_alloc+0xf0/0xf0 [ 1905.811244] __alloc_pages_nodemask+0x5d3/0x700 [ 1905.815916] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1905.820942] ? find_held_lock+0x2d/0x110 [ 1905.825012] alloc_pages_vma+0xc2/0x4a0 [ 1905.828990] __handle_mm_fault+0x17b6/0x3280 [ 1905.833402] ? copy_page_range+0x1d70/0x1d70 [ 1905.837816] ? find_held_lock+0x2d/0x110 [ 1905.841890] handle_mm_fault+0x288/0x7a0 [ 1905.845957] __get_user_pages+0x44d/0x11e0 [ 1905.850202] ? follow_page_mask+0x1580/0x1580 [ 1905.854702] ? lock_acquire+0x170/0x3f0 [ 1905.858678] ? __mm_populate+0x1e3/0x2c0 [ 1905.862751] populate_vma_page_range+0x17b/0x210 [ 1905.867512] __mm_populate+0x195/0x2c0 [ 1905.871403] ? populate_vma_page_range+0x210/0x210 [ 1905.876349] ? security_capable+0x88/0xb0 [ 1905.880503] SyS_mlockall+0x3f5/0x520 [ 1905.884300] ? SyS_munlock+0xf0/0xf0 [ 1905.888014] do_syscall_64+0x1d5/0x640 [ 1905.891908] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1905.897095] RIP: 0033:0x45ca29 [ 1905.900278] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1905.907984] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1905.915251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1905.922519] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1905.929791] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1905.937060] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 [ 1905.999410] Mem-Info: [ 1906.005143] active_anon:203553 inactive_anon:1100058 isolated_anon:0 [ 1906.005143] active_file:28 inactive_file:3 isolated_file:12 [ 1906.005143] unevictable:42836 dirty:0 writeback:0 unstable:0 [ 1906.005143] slab_reclaimable:18801 slab_unreclaimable:113741 [ 1906.005143] mapped:65354 shmem:12406 pagetables:18332 bounce:0 [ 1906.005143] free:24950 free_pcp:8 free_cma:0 [ 1906.039762] Node 0 active_anon:743488kB inactive_anon:1020964kB active_file:4kB inactive_file:0kB unevictable:101928kB isolated(anon):0kB isolated(file):0kB mapped:227848kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.068484] Node 1 active_anon:70724kB inactive_anon:3379268kB active_file:44kB inactive_file:16kB unevictable:69508kB isolated(anon):0kB isolated(file):48kB mapped:33556kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.097622] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.126737] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1906.131809] Node 0 DMA32 free:36200kB min:36272kB low:45340kB high:54408kB active_anon:743428kB inactive_anon:1015868kB active_file:0kB inactive_file:4kB unevictable:101928kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101928kB kernel_stack:12352kB pagetables:28280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.161681] lowmem_reserve[]: 0 0 0 0 0 [ 1906.165710] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.191214] lowmem_reserve[]: 0 0 0 0 0 [ 1906.195241] Node 1 Normal free:53544kB min:53612kB low:67012kB high:80412kB active_anon:70724kB inactive_anon:3379268kB active_file:32kB inactive_file:28kB unevictable:69508kB writepending:0kB present:3932160kB managed:3870192kB mlocked:69508kB kernel_stack:14688kB pagetables:45040kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1906.225440] lowmem_reserve[]: 0 0 0 0 0 [ 1906.229465] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1906.246295] Node 0 DMA32: 477*4kB (UM) 259*8kB (UE) 805*16kB (UE) 605*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36220kB [ 1906.260402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1906.271285] Node 1 Normal: 260*4kB (UME) 102*8kB (UME) 368*16kB (UME) 66*32kB (UME) 31*64kB (UE) 6*128kB (UE) 25*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53824kB [ 1906.288268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.297142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.305796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.314670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.323305] 18559 total pagecache pages [ 1906.327297] 0 pages in swap cache [ 1906.330729] Swap cache stats: add 0, delete 0, find 0/0 [ 1906.336294] Free swap = 0kB [ 1906.339299] Total swap = 0kB [ 1906.342729] 1965979 pages RAM [ 1906.345838] 0 pages HighMem/MovableOnly [ 1906.349865] 339053 pages reserved [ 1906.353361] 0 pages cma reserved [ 1906.356719] Out of memory: Kill process 27299 (syz-executor.2) score 1008 or sacrifice child [ 1906.365862] Killed process 27318 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1906.409499] oom_reaper: reaped process 27318 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1906.434723] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1906.448057] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1906.453208] CPU: 0 PID: 27317 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1906.461081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.470447] Call Trace: [ 1906.473051] dump_stack+0x13e/0x194 [ 1906.476684] dump_header+0x178/0x6d4 [ 1906.480396] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1906.485413] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1906.490605] ? ___ratelimit+0x50/0x519 [ 1906.494497] oom_kill_process.cold+0x10/0xae3 [ 1906.498988] ? lock_acquire+0x170/0x3f0 [ 1906.502955] ? lock_downgrade+0x6e0/0x6e0 [ 1906.507102] out_of_memory+0x2d5/0x1110 [ 1906.511075] ? oom_killer_disable+0x1c0/0x1c0 [ 1906.515567] ? mutex_trylock+0x152/0x1a0 [ 1906.519668] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1906.524525] ? warn_alloc+0xf0/0xf0 [ 1906.528244] __alloc_pages_nodemask+0x5d3/0x700 [ 1906.532928] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1906.538024] ? find_held_lock+0x2d/0x110 [ 1906.542090] alloc_pages_vma+0xc2/0x4a0 [ 1906.546071] __handle_mm_fault+0x17b6/0x3280 [ 1906.550481] ? copy_page_range+0x1d70/0x1d70 [ 1906.554890] ? find_held_lock+0x2d/0x110 [ 1906.558966] handle_mm_fault+0x288/0x7a0 [ 1906.563032] __get_user_pages+0x44d/0x11e0 [ 1906.567271] ? follow_page_mask+0x1580/0x1580 [ 1906.571769] ? lock_acquire+0x170/0x3f0 [ 1906.575743] ? __mm_populate+0x1e3/0x2c0 [ 1906.579840] populate_vma_page_range+0x17b/0x210 [ 1906.584631] __mm_populate+0x195/0x2c0 [ 1906.588518] ? populate_vma_page_range+0x210/0x210 [ 1906.593475] ? security_capable+0x88/0xb0 [ 1906.597630] SyS_mlockall+0x3f5/0x520 [ 1906.601434] ? SyS_munlock+0xf0/0xf0 [ 1906.605147] do_syscall_64+0x1d5/0x640 [ 1906.609041] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1906.614249] RIP: 0033:0x45ca29 [ 1906.617433] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1906.625140] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1906.632428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1906.640217] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1906.647933] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1906.655203] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 [ 1906.995847] Mem-Info: [ 1906.998392] active_anon:203550 inactive_anon:1100043 isolated_anon:0 [ 1906.998392] active_file:12 inactive_file:3 isolated_file:0 [ 1906.998392] unevictable:43085 dirty:0 writeback:0 unstable:0 [ 1906.998392] slab_reclaimable:18801 slab_unreclaimable:113736 [ 1906.998392] mapped:65442 shmem:12406 pagetables:18300 bounce:0 [ 1906.998392] free:24966 free_pcp:0 free_cma:0 [ 1907.041391] Node 0 active_anon:743488kB inactive_anon:1020964kB active_file:0kB inactive_file:4kB unevictable:101928kB isolated(anon):0kB isolated(file):0kB mapped:227848kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.079666] Node 1 active_anon:70712kB inactive_anon:3379208kB active_file:84kB inactive_file:0kB unevictable:70412kB isolated(anon):0kB isolated(file):0kB mapped:33920kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.118315] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.154038] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1907.159225] Node 0 DMA32 free:36200kB min:36272kB low:45340kB high:54408kB active_anon:743428kB inactive_anon:1015868kB active_file:0kB inactive_file:4kB unevictable:101928kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101928kB kernel_stack:12352kB pagetables:28280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.199175] lowmem_reserve[]: 0 0 0 0 0 [ 1907.203440] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.239960] lowmem_reserve[]: 0 0 0 0 0 [ 1907.244999] Node 1 Normal free:53208kB min:53612kB low:67012kB high:80412kB active_anon:70712kB inactive_anon:3379208kB active_file:128kB inactive_file:28kB unevictable:70412kB writepending:0kB present:3932160kB managed:3870192kB mlocked:70412kB kernel_stack:14656kB pagetables:44912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.286842] lowmem_reserve[]: 0 0 0 0 0 [ 1907.291090] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1907.317698] Node 0 DMA32: 478*4kB (UM) 256*8kB (UE) 805*16kB (UE) 605*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36200kB [ 1907.334136] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.352795] Node 1 Normal: 200*4kB (UME) 115*8kB (UME) 367*16kB (UE) 69*32kB (UME) 32*64kB (UME) 6*128kB (UE) 23*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53320kB [ 1907.384007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.400596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.413456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.432504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.441122] 18642 total pagecache pages [ 1907.452842] 0 pages in swap cache [ 1907.456312] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.461667] Free swap = 0kB [ 1907.472398] Total swap = 0kB [ 1907.475435] 1965979 pages RAM [ 1907.478531] 0 pages HighMem/MovableOnly [ 1907.499560] 339053 pages reserved [ 1907.505702] 0 pages cma reserved [ 1907.509107] Out of memory: Kill process 27299 (syz-executor.2) score 1008 or sacrifice child [ 1907.521120] Killed process 27300 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:43564kB, shmem-rss:0kB [ 1907.600196] oom_reaper: reaped process 27300 (syz-executor.2), now anon-rss:18020kB, file-rss:10864kB, shmem-rss:0kB 07:50:51 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:50:51 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1907.986848] EXT4-fs (loop1): unsupported inode size: 25717 [ 1908.031266] EXT4-fs (loop1): blocksize: 4096 07:50:52 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x840, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000300)=""/70) r3 = dup(r1) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200040, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) dup2(r0, r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000fcdbdf250700000014000300fe80000000000000000000000000003014000200fc010000000000000000000000000001"], 0x3c}}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f00000000c0)='P', 0x1}], 0x2) 07:50:52 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e21, @loopback}}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:52 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:52 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) rt_sigaction(0x23, &(0x7f0000000180)={&(0x7f0000000380)="6467f0814d00790000002ef3420f1ac9c403615d745a000267f2d87700c482e5400e66660fdc3d692800002e360f12f98f2978c199e0ac00004b0f6e30c403817c2300", 0x4, &(0x7f0000000400)="3e66470f3a2182ad427063a766460f72e706c4e3495d77003c6667440f05c4e281b9db0faeab76810000c4e3197c190066460f6175e667660f382546e80fd16a73", {[0xfffffffffffffffe]}}, &(0x7f00000004c0)={&(0x7f0000000200)="f24a0f2a1ce6c4224109ea660f2f5c70c6c4c21d97d0f246ae8f497880dc667200c401795b90ae1811a9c4c1be5d4b2e3e660f2f8062fcca7a", 0x0, &(0x7f0000000480)="dbc36a478f296093e7c4632546c80666480f38f5750766f0468141920700c4020dbeeec401ff107100c481fc298001800000f30f1efa"}, 0x8, &(0x7f0000000500)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:52 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1908.688011] syz-executor.2 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 1908.846630] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1908.888440] CPU: 1 PID: 27350 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1908.896357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.905715] Call Trace: [ 1908.908308] dump_stack+0x13e/0x194 [ 1908.911938] dump_header+0x178/0x6d4 [ 1908.916175] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1908.921225] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1908.926329] ? ___ratelimit+0x50/0x519 [ 1908.930240] oom_kill_process.cold+0x10/0xae3 [ 1908.934738] ? lock_downgrade+0x6e0/0x6e0 [ 1908.938895] out_of_memory+0x2d5/0x1110 [ 1908.942882] ? oom_killer_disable+0x1c0/0x1c0 [ 1908.947549] ? mutex_trylock+0x152/0x1a0 [ 1908.951614] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1908.956474] ? warn_alloc+0xf0/0xf0 [ 1908.960109] __alloc_pages_nodemask+0x5d3/0x700 [ 1908.964776] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1908.969802] alloc_pages_vma+0xc2/0x4a0 [ 1908.973793] wp_page_copy+0x1f1/0x1300 [ 1908.977682] ? follow_pfn+0x200/0x200 [ 1908.981483] do_wp_page+0x244/0x11d0 [ 1908.985195] ? finish_mkwrite_fault+0x640/0x640 [ 1908.990043] __handle_mm_fault+0x1c0e/0x3280 [ 1908.994454] ? copy_page_range+0x1d70/0x1d70 [ 1908.998864] ? find_held_lock+0x2d/0x110 [ 1909.002960] handle_mm_fault+0x288/0x7a0 [ 1909.007044] __do_page_fault+0x4bc/0xb40 [ 1909.011128] ? vmalloc_fault+0xdf0/0xdf0 [ 1909.015206] ? do_page_fault+0x60/0x4f2 [ 1909.019198] ? page_fault+0x2f/0x50 [ 1909.022825] page_fault+0x45/0x50 [ 1909.026553] RIP: 0076:0x4c331e [ 1909.029744] RSP: 4dabc0:000000000078bfa0 EFLAGS: ffffffff [ 1909.078537] Mem-Info: [ 1909.091387] active_anon:203843 inactive_anon:1100028 isolated_anon:0 [ 1909.091387] active_file:35 inactive_file:27 isolated_file:0 [ 1909.091387] unevictable:42717 dirty:0 writeback:0 unstable:0 [ 1909.091387] slab_reclaimable:18801 slab_unreclaimable:113725 [ 1909.091387] mapped:64771 shmem:12406 pagetables:18352 bounce:0 [ 1909.091387] free:24841 free_pcp:0 free_cma:0 [ 1909.130641] Node 0 active_anon:743492kB inactive_anon:1020964kB active_file:4kB inactive_file:0kB unevictable:103404kB isolated(anon):0kB isolated(file):0kB mapped:228304kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.177492] Node 1 active_anon:71880kB inactive_anon:3379148kB active_file:136kB inactive_file:24kB unevictable:67464kB isolated(anon):0kB isolated(file):100kB mapped:30780kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.408503] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.614819] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1909.619917] Node 0 DMA32 free:35828kB min:36272kB low:45340kB high:54408kB active_anon:743432kB inactive_anon:1015868kB active_file:4kB inactive_file:0kB unevictable:103404kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103420kB kernel_stack:12352kB pagetables:28316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.900775] lowmem_reserve[]: 0 0 0 0 0 [ 1909.950432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.184038] lowmem_reserve[]: 0 0 0 0 0 [ 1910.188374] Node 1 Normal free:53520kB min:53612kB low:67012kB high:80412kB active_anon:71880kB inactive_anon:3379148kB active_file:60kB inactive_file:60kB unevictable:67500kB writepending:0kB present:3932160kB managed:3870192kB mlocked:67500kB kernel_stack:14752kB pagetables:45084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.516955] lowmem_reserve[]: 0 0 0 0 0 [ 1910.555551] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1910.691124] Node 0 DMA32: 110*4kB (UM) 384*8kB (UE) 808*16kB (UE) 604*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35768kB [ 1910.821248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1910.951101] Node 1 Normal: 157*4kB (UE) 168*8kB (UME) 90*16kB (UME) 147*32kB (UME) 37*64kB (UME) 18*128kB (UME) 21*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 52980kB [ 1910.981259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1910.993393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.016817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1911.040410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.059683] 17958 total pagecache pages [ 1911.063837] 0 pages in swap cache [ 1911.067310] Swap cache stats: add 0, delete 0, find 0/0 [ 1911.082440] Free swap = 0kB [ 1911.085506] Total swap = 0kB [ 1911.088524] 1965979 pages RAM [ 1911.099242] 0 pages HighMem/MovableOnly [ 1911.105843] 339053 pages reserved [ 1911.109587] 0 pages cma reserved [ 1911.120547] Out of memory: Kill process 27325 (syz-executor.2) score 1007 or sacrifice child [ 1911.130847] Killed process 27350 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:42996kB, shmem-rss:0kB [ 1911.187391] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1911.209061] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1911.214329] CPU: 1 PID: 25720 Comm: kworker/u4:3 Not tainted 4.14.180-syzkaller #0 [ 1911.222041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1911.231418] Workqueue: krdsd rds_connect_worker [ 1911.236087] Call Trace: [ 1911.238676] dump_stack+0x13e/0x194 [ 1911.242310] dump_header+0x178/0x6d4 [ 1911.246025] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1911.251158] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1911.256270] ? ___ratelimit+0x50/0x519 [ 1911.260166] oom_kill_process.cold+0x10/0xae3 [ 1911.264665] ? lock_downgrade+0x6e0/0x6e0 [ 1911.268817] out_of_memory+0x2d5/0x1110 [ 1911.272793] ? oom_killer_disable+0x1c0/0x1c0 [ 1911.277284] ? mutex_trylock+0x152/0x1a0 [ 1911.281347] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1911.286208] ? warn_alloc+0xf0/0xf0 [ 1911.290211] __alloc_pages_nodemask+0x5d3/0x700 [ 1911.294894] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1911.299744] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1911.304891] ? mark_held_locks+0xa6/0xf0 [ 1911.308950] ? cache_grow_begin+0x32d/0x410 [ 1911.313469] cache_grow_begin+0x7b/0x410 [ 1911.317626] fallback_alloc+0x205/0x2b0 [ 1911.321692] kmem_cache_alloc+0x1ea/0x770 [ 1911.325844] ? selinux_socket_create+0x219/0x4a0 [ 1911.330583] ? sock_destroy_inode+0x60/0x60 07:50:55 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1911.334887] sock_alloc_inode+0x19/0x250 [ 1911.338929] ? sock_destroy_inode+0x60/0x60 [ 1911.343228] alloc_inode+0x5d/0x170 [ 1911.346920] new_inode_pseudo+0x14/0xe0 [ 1911.350872] sock_alloc+0x3c/0x270 [ 1911.354401] __sock_create+0x89/0x620 [ 1911.358183] rds_tcp_conn_path_connect+0x1b2/0x4d0 [ 1911.363210] ? save_trace+0x290/0x290 [ 1911.367010] ? rds_tcp_state_change+0x290/0x290 [ 1911.371678] ? __lock_is_held+0xad/0x140 [ 1911.375745] rds_connect_worker+0x13f/0x1d0 [ 1911.380252] process_one_work+0x813/0x1540 [ 1911.384497] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1911.389166] ? worker_thread+0x15d/0x1070 [ 1911.393576] ? _raw_spin_unlock_irq+0x24/0x80 [ 1911.398094] worker_thread+0x5d1/0x1070 [ 1911.402074] ? process_one_work+0x1540/0x1540 [ 1911.406567] kthread+0x30d/0x420 [ 1911.409927] ? kthread_create_on_node+0xd0/0xd0 [ 1911.414595] ret_from_fork+0x24/0x30 [ 1911.433102] Mem-Info: [ 1911.438147] active_anon:203843 inactive_anon:1100024 isolated_anon:0 [ 1911.438147] active_file:570 inactive_file:714 isolated_file:0 [ 1911.438147] unevictable:40346 dirty:14 writeback:0 unstable:0 [ 1911.438147] slab_reclaimable:18803 slab_unreclaimable:113741 [ 1911.438147] mapped:64984 shmem:12406 pagetables:18311 bounce:0 [ 1911.438147] free:25837 free_pcp:304 free_cma:0 [ 1911.474031] Node 0 active_anon:743492kB inactive_anon:1020964kB active_file:136kB inactive_file:0kB unevictable:102876kB isolated(anon):0kB isolated(file):0kB mapped:227860kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:50:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) write$rfkill(r1, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x1, 0x1}, 0x8) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:50:55 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x4000000000}], 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:55 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x80000000}}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)={'security\x00'}, &(0x7f0000000200)=0x54) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1911.699102] Node 1 active_anon:71780kB inactive_anon:3390632kB active_file:8120kB inactive_file:13564kB unevictable:21708kB isolated(anon):0kB isolated(file):0kB mapped:28676kB dirty:56kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:50:55 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:55 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1911.888979] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1911.900324] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.948362] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1911.996447] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1912.007658] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1912.037741] Node 0 DMA32 free:36008kB min:36272kB low:45340kB high:54408kB active_anon:743464kB inactive_anon:1015868kB active_file:12kB inactive_file:8kB unevictable:101436kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101436kB kernel_stack:12384kB pagetables:28400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.078543] EXT4-fs (loop1): journal inode is deleted [ 1912.103495] lowmem_reserve[]: 0 0 0 0 0 [ 1912.107873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.139993] lowmem_reserve[]: 0 0 0 0 0 [ 1912.144845] Node 1 Normal free:55116kB min:53612kB low:67012kB high:80412kB active_anon:71928kB inactive_anon:3379192kB active_file:56kB inactive_file:544kB unevictable:60520kB writepending:256kB present:3932160kB managed:3870192kB mlocked:60520kB kernel_stack:14784kB pagetables:44940kB bounce:0kB free_pcp:248kB local_pcp:132kB free_cma:0kB [ 1912.177466] lowmem_reserve[]: 0 0 0 0 0 [ 1912.182231] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1912.199629] Node 0 DMA32: 416*4kB (UME) 309*8kB (UME) 810*16kB (UE) 605*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36456kB [ 1912.340540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1912.435280] Node 1 Normal: 395*4kB (UME) 57*8kB (UME) 66*16kB (UME) 162*32kB (UME) 46*64kB (UME) 20*128kB (UME) 22*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 54228kB [ 1912.570735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.666150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.745909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.823543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.904462] 19765 total pagecache pages [ 1912.926943] 0 pages in swap cache [ 1912.947941] Swap cache stats: add 0, delete 0, find 0/0 [ 1912.957408] Free swap = 0kB [ 1912.960882] Total swap = 0kB [ 1912.977273] 1965979 pages RAM [ 1912.987967] 0 pages HighMem/MovableOnly [ 1912.998530] 339053 pages reserved [ 1913.019976] 0 pages cma reserved [ 1913.028498] Out of memory: Kill process 27335 (syz-executor.4) score 1007 or sacrifice child [ 1913.067888] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1913.091649] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1913.096916] CPU: 1 PID: 6348 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1913.104883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1913.114230] Call Trace: [ 1913.116808] dump_stack+0x13e/0x194 [ 1913.120420] dump_header+0x178/0x6d4 [ 1913.124130] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1913.129135] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1913.134225] ? ___ratelimit+0x50/0x519 [ 1913.138095] oom_kill_process.cold+0x10/0xae3 [ 1913.142573] ? lock_acquire+0x170/0x3f0 [ 1913.146534] ? lock_downgrade+0x6e0/0x6e0 [ 1913.150663] out_of_memory+0x2d5/0x1110 [ 1913.154620] ? oom_killer_disable+0x1c0/0x1c0 [ 1913.159094] ? mutex_trylock+0x152/0x1a0 [ 1913.163134] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1913.167962] ? warn_alloc+0xf0/0xf0 [ 1913.171586] __alloc_pages_nodemask+0x5d3/0x700 [ 1913.176241] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1913.181271] ? lock_downgrade+0x6e0/0x6e0 [ 1913.185419] alloc_pages_current+0xe7/0x1e0 [ 1913.189730] __page_cache_alloc+0x245/0x3d0 [ 1913.194049] filemap_fault+0xc18/0x1c50 [ 1913.198047] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1913.202706] ? lock_acquire+0x170/0x3f0 [ 1913.206670] ? ext4_filemap_fault+0x7c/0xb0 [ 1913.210977] ext4_filemap_fault+0x84/0xb0 [ 1913.215106] __do_fault+0xfa/0x380 [ 1913.218640] __handle_mm_fault+0x22e9/0x3280 [ 1913.223028] ? copy_page_range+0x1d70/0x1d70 [ 1913.227417] ? find_held_lock+0x2d/0x110 [ 1913.231461] handle_mm_fault+0x288/0x7a0 [ 1913.235501] __do_page_fault+0x4bc/0xb40 [ 1913.239558] ? vmalloc_fault+0xdf0/0xdf0 [ 1913.243618] ? do_page_fault+0x60/0x4f2 [ 1913.247586] ? page_fault+0x2f/0x50 [ 1913.251219] page_fault+0x45/0x50 [ 1913.254756] RIP: 55de2ce0:0x1d2c73 [ 1913.258271] RSP: 1d2e4f:0000000000000665 EFLAGS: 00000007 [ 1913.263370] Mem-Info: [ 1913.271324] active_anon:203846 inactive_anon:1100039 isolated_anon:0 [ 1913.271324] active_file:7 inactive_file:11 isolated_file:0 [ 1913.271324] unevictable:41689 dirty:0 writeback:0 unstable:0 [ 1913.271324] slab_reclaimable:18676 slab_unreclaimable:114858 [ 1913.271324] mapped:66666 shmem:12406 pagetables:18350 bounce:0 [ 1913.271324] free:25006 free_pcp:1 free_cma:0 [ 1913.307643] Node 0 active_anon:743516kB inactive_anon:1020964kB active_file:4kB inactive_file:4kB unevictable:102324kB isolated(anon):0kB isolated(file):0kB mapped:227520kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1913.338477] Node 1 active_anon:71868kB inactive_anon:3379192kB active_file:20kB inactive_file:44kB unevictable:64432kB isolated(anon):0kB isolated(file):0kB mapped:39144kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1913.369002] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1913.397552] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1913.402635] Node 0 DMA32 free:36144kB min:36272kB low:45340kB high:54408kB active_anon:743456kB inactive_anon:1015868kB active_file:4kB inactive_file:4kB unevictable:102324kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102324kB kernel_stack:12384kB pagetables:28404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1913.432401] lowmem_reserve[]: 0 0 0 0 0 [ 1913.436391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1913.464926] lowmem_reserve[]: 0 0 0 0 0 [ 1913.468932] Node 1 Normal free:53464kB min:53612kB low:67012kB high:80412kB active_anon:71868kB inactive_anon:3379192kB active_file:0kB inactive_file:76kB unevictable:64432kB writepending:0kB present:3932160kB managed:3870192kB mlocked:64432kB kernel_stack:14784kB pagetables:44988kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1913.503566] lowmem_reserve[]: 0 0 0 0 0 [ 1913.507587] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1913.528219] Node 0 DMA32: 358*4kB (UM) 295*8kB (UE) 810*16kB (UE) 606*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36144kB [ 1913.551999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1913.569047] Node 1 Normal: 276*4kB (UME) 61*8kB (UME) 66*16kB (UME) 152*32kB (UME) 46*64kB (UME) 20*128kB (UME) 22*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53464kB [ 1913.607067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1913.629629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1913.655089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1913.671277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1913.692871] 19831 total pagecache pages [ 1913.697028] 0 pages in swap cache [ 1913.700600] Swap cache stats: add 0, delete 0, find 0/0 [ 1913.711002] Free swap = 0kB [ 1913.716459] Total swap = 0kB [ 1913.719482] 1965979 pages RAM [ 1913.727509] 0 pages HighMem/MovableOnly [ 1913.733917] 339053 pages reserved [ 1913.737368] 0 pages cma reserved [ 1913.746297] Out of memory: Kill process 27353 (syz-executor.2) score 1009 or sacrifice child [ 1913.757375] Killed process 27367 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 1913.820498] oom_reaper: reaped process 27367 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1913.863990] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1913.894122] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1913.899280] CPU: 0 PID: 27370 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1913.907153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1913.916514] Call Trace: [ 1913.919114] dump_stack+0x13e/0x194 [ 1913.922752] dump_header+0x178/0x6d4 [ 1913.926467] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1913.931502] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1913.936608] ? ___ratelimit+0x50/0x519 [ 1913.940590] oom_kill_process.cold+0x10/0xae3 [ 1913.945089] ? lock_downgrade+0x6e0/0x6e0 [ 1913.949245] out_of_memory+0x2d5/0x1110 [ 1913.953263] ? oom_killer_disable+0x1c0/0x1c0 [ 1913.957772] ? mutex_trylock+0x152/0x1a0 [ 1913.961862] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1913.966711] ? warn_alloc+0xf0/0xf0 [ 1913.970425] __alloc_pages_nodemask+0x5d3/0x700 [ 1913.975099] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1913.980121] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1913.984653] alloc_pages_vma+0xc2/0x4a0 [ 1913.988639] __handle_mm_fault+0x17b6/0x3280 [ 1913.993055] ? copy_page_range+0x1d70/0x1d70 [ 1913.997476] ? find_held_lock+0x2d/0x110 [ 1914.001557] handle_mm_fault+0x288/0x7a0 [ 1914.005626] __get_user_pages+0x44d/0x11e0 [ 1914.009908] ? follow_page_mask+0x1580/0x1580 [ 1914.014651] ? lock_acquire+0x170/0x3f0 [ 1914.019762] ? __mm_populate+0x1e3/0x2c0 [ 1914.023834] populate_vma_page_range+0x17b/0x210 [ 1914.028612] __mm_populate+0x195/0x2c0 [ 1914.032516] ? populate_vma_page_range+0x210/0x210 [ 1914.037486] ? security_capable+0x88/0xb0 [ 1914.041835] SyS_mlockall+0x3f5/0x520 [ 1914.045644] ? SyS_munlock+0xf0/0xf0 [ 1914.049539] do_syscall_64+0x1d5/0x640 [ 1914.053448] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1914.058639] RIP: 0033:0x45ca29 [ 1914.061824] RSP: 002b:00007f47d6236c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1914.069706] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1914.076970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1914.084244] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1914.091514] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1914.098804] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f47d62376d4 [ 1914.128639] Mem-Info: [ 1914.131256] active_anon:203843 inactive_anon:1100023 isolated_anon:0 [ 1914.131256] active_file:7 inactive_file:11 isolated_file:0 [ 1914.131256] unevictable:41689 dirty:0 writeback:0 unstable:0 [ 1914.131256] slab_reclaimable:18674 slab_unreclaimable:114856 [ 1914.131256] mapped:66666 shmem:12406 pagetables:18318 bounce:0 [ 1914.131256] free:24983 free_pcp:94 free_cma:0 [ 1914.180387] Node 0 active_anon:743516kB inactive_anon:1020964kB active_file:4kB inactive_file:4kB unevictable:102324kB isolated(anon):0kB isolated(file):0kB mapped:227520kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1914.221596] Node 1 active_anon:71856kB inactive_anon:3379128kB active_file:48kB inactive_file:16kB unevictable:64432kB isolated(anon):0kB isolated(file):0kB mapped:39144kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1914.259908] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.293044] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1914.298111] Node 0 DMA32 free:35988kB min:36272kB low:45340kB high:54408kB active_anon:743456kB inactive_anon:1015868kB active_file:8kB inactive_file:0kB unevictable:102324kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102324kB kernel_stack:12384kB pagetables:28400kB bounce:0kB free_pcp:148kB local_pcp:128kB free_cma:0kB [ 1914.333102] lowmem_reserve[]: 0 0 0 0 0 [ 1914.337148] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.365204] lowmem_reserve[]: 0 0 0 0 0 [ 1914.369204] Node 1 Normal free:53496kB min:53612kB low:67012kB high:80412kB active_anon:71856kB inactive_anon:3379128kB active_file:4kB inactive_file:60kB unevictable:64432kB writepending:0kB present:3932160kB managed:3870192kB mlocked:64432kB kernel_stack:14752kB pagetables:44864kB bounce:0kB free_pcp:232kB local_pcp:228kB free_cma:0kB [ 1914.402684] lowmem_reserve[]: 0 0 0 0 0 [ 1914.406703] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1914.431338] Node 0 DMA32: 327*4kB (UM) 295*8kB (UE) 810*16kB (UE) 605*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35988kB [ 1914.501589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1914.571900] Node 1 Normal: 276*4kB (UME) 61*8kB (UME) 66*16kB (UME) 155*32kB (UME) 46*64kB (UME) 20*128kB (UME) 22*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53560kB [ 1914.704508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.750120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1914.841039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.903142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1914.939366] 19558 total pagecache pages [ 1914.970275] 0 pages in swap cache [ 1914.993248] Swap cache stats: add 0, delete 0, find 0/0 [ 1915.026568] Free swap = 0kB [ 1915.029623] Total swap = 0kB [ 1915.113416] 1965979 pages RAM [ 1915.116565] 0 pages HighMem/MovableOnly [ 1915.120624] 339053 pages reserved [ 1915.170473] 0 pages cma reserved [ 1915.179294] Out of memory: Kill process 27353 (syz-executor.2) score 1009 or sacrifice child 07:50:59 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="fea4db554db2c2df07a9bf054a38c2094da94e98a783cc8e3a98bed121a74e1d8d5a97b09fdf986f9034aa7f25ea7c6997b53fc3caa79508553c767cb20d986fa9bbbae6d8dc979925680574a72ad0fe0baf199efd707a24980963d5eed5699aea856e315af11cdee08f99778083da96652df17c9733dba56df72d5fdb5fa33b0e93ab02aef3b1547b4c886ce217d0228edfc0e27136ea5e62c77303218a665c7f9661d0209883aa6062b7cb6a7fccdef2ac41a535c53f9f0e7a4ebdb0da74f676cf73c4fcb8b6badc31cbfbad28ba26a67f0259c27ac57fd4cd981d851e", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5ca, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x80680f, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000100)={0x7, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14) 07:50:59 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/376], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:59 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:59 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802ffa2d1c7ee6466d049efd9c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c452ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5650cbb32cd372c0d4c131d323ab9be1a5539312a34995725110feb04a27a5a67e386506275e59b182eb297c5e129df5f9d507161cb294f9b60ee364c00000000007d11d1a814349c04fd0603333a55a3377ef741d7f4134bc3309698b5b412cb0952077ff400000000320000000000", 0xde) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x507, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0xc000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:59 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe888, 0x0, 0x3, 0x0, 0x0, 0x40, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000010009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310300000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00108020000000000f8ffffffffffffff000000000000005001686173686c696d6974000000000000800000000000000000000000000002726f73653000000000000000000000000000000000000000001000000000000000000000000000000000c677f88c1d1e00000000000100"/501], 0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x12c01, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:50:59 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1915.909070] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1916.048548] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1916.073231] CPU: 1 PID: 27385 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1916.081155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1916.090512] Call Trace: [ 1916.093117] dump_stack+0x13e/0x194 [ 1916.096773] dump_header+0x178/0x6d4 [ 1916.100488] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1916.105503] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1916.110606] ? ___ratelimit+0x50/0x519 [ 1916.114496] oom_kill_process.cold+0x10/0xae3 [ 1916.118993] ? lock_downgrade+0x6e0/0x6e0 [ 1916.123150] out_of_memory+0x2d5/0x1110 [ 1916.127232] ? oom_killer_disable+0x1c0/0x1c0 [ 1916.131748] ? mutex_trylock+0x152/0x1a0 [ 1916.135808] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1916.140688] ? warn_alloc+0xf0/0xf0 [ 1916.144331] __alloc_pages_nodemask+0x5d3/0x700 [ 1916.149005] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1916.154108] ? find_held_lock+0x2d/0x110 [ 1916.158183] alloc_pages_vma+0xc2/0x4a0 [ 1916.162166] __handle_mm_fault+0x17b6/0x3280 [ 1916.166580] ? copy_page_range+0x1d70/0x1d70 [ 1916.170987] ? find_held_lock+0x2d/0x110 [ 1916.175055] handle_mm_fault+0x288/0x7a0 [ 1916.179116] __get_user_pages+0x44d/0x11e0 [ 1916.183565] ? follow_page_mask+0x1580/0x1580 [ 1916.188180] ? lock_acquire+0x170/0x3f0 [ 1916.192151] ? __mm_populate+0x1e3/0x2c0 [ 1916.196218] populate_vma_page_range+0x17b/0x210 [ 1916.200989] __mm_populate+0x195/0x2c0 [ 1916.204878] ? populate_vma_page_range+0x210/0x210 [ 1916.209913] ? security_capable+0x88/0xb0 [ 1916.214069] SyS_mlockall+0x3f5/0x520 [ 1916.217872] ? SyS_munlock+0xf0/0xf0 [ 1916.221720] do_syscall_64+0x1d5/0x640 [ 1916.225622] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1916.230843] RIP: 0033:0x45ca29 [ 1916.234026] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1916.241830] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1916.249106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1916.256375] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1916.263652] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1916.271026] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 1916.279386] Mem-Info: [ 1916.282042] active_anon:203834 inactive_anon:1100024 isolated_anon:0 [ 1916.282042] active_file:10 inactive_file:20 isolated_file:0 [ 1916.282042] unevictable:42034 dirty:0 writeback:0 unstable:0 [ 1916.282042] slab_reclaimable:18638 slab_unreclaimable:114706 [ 1916.282042] mapped:64716 shmem:12406 pagetables:18319 bounce:0 [ 1916.282042] free:24955 free_pcp:0 free_cma:0 [ 1916.316253] Node 0 active_anon:743488kB inactive_anon:1020964kB active_file:0kB inactive_file:76kB unevictable:102552kB isolated(anon):0kB isolated(file):0kB mapped:226816kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1916.344922] Node 1 active_anon:71848kB inactive_anon:3379132kB active_file:68kB inactive_file:4kB unevictable:65584kB isolated(anon):0kB isolated(file):0kB mapped:32048kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1916.373167] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1916.399918] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1916.416092] Node 0 DMA32 free:36072kB min:36272kB low:45340kB high:54408kB active_anon:743428kB inactive_anon:1015868kB active_file:72kB inactive_file:0kB unevictable:102552kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102552kB kernel_stack:12352kB pagetables:28280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1916.451510] lowmem_reserve[]: 0 0 0 0 0 [ 1916.455535] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1916.483933] lowmem_reserve[]: 0 0 0 0 0 [ 1916.487944] Node 1 Normal free:53300kB min:53612kB low:67012kB high:80412kB active_anon:71848kB inactive_anon:3379132kB active_file:52kB inactive_file:20kB unevictable:65584kB writepending:0kB present:3932160kB managed:3870192kB mlocked:65584kB kernel_stack:14688kB pagetables:44988kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1916.520258] lowmem_reserve[]: 0 0 0 0 0 [ 1916.524311] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1916.542853] Node 0 DMA32: 362*4kB (UM) 272*8kB (U) 812*16kB (UE) 608*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36072kB [ 1916.556281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1916.569533] Node 1 Normal: 195*4kB (UME) 109*8kB (UME) 104*16kB (UME) 98*32kB (UME) 60*64kB (UME) 20*128kB (UME) 22*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53300kB [ 1916.587021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1916.595917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1916.604899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1916.621721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1916.630356] 17876 total pagecache pages [ 1916.640320] 0 pages in swap cache [ 1916.646415] Swap cache stats: add 0, delete 0, find 0/0 [ 1916.663888] Free swap = 0kB [ 1916.666927] Total swap = 0kB [ 1916.669940] 1965979 pages RAM [ 1916.677115] 0 pages HighMem/MovableOnly [ 1916.681106] 339053 pages reserved [ 1916.689862] 0 pages cma reserved [ 1916.698613] Out of memory: Kill process 14546 (syz-executor.1) score 1007 or sacrifice child [ 1916.710086] Killed process 14546 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1917.114471] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1917.148267] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1917.160457] CPU: 1 PID: 27393 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1917.168472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1917.177924] Call Trace: [ 1917.180521] dump_stack+0x13e/0x194 [ 1917.184137] dump_header+0x178/0x6d4 [ 1917.187972] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1917.192989] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1917.198088] ? ___ratelimit+0x50/0x519 [ 1917.201987] oom_kill_process.cold+0x10/0xae3 [ 1917.206472] ? lock_downgrade+0x6e0/0x6e0 [ 1917.210610] out_of_memory+0x2d5/0x1110 [ 1917.214582] ? oom_killer_disable+0x1c0/0x1c0 [ 1917.219080] ? mutex_trylock+0x152/0x1a0 [ 1917.223138] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1917.228052] ? warn_alloc+0xf0/0xf0 [ 1917.231683] __alloc_pages_nodemask+0x5d3/0x700 [ 1917.236408] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1917.241425] ? find_held_lock+0x2d/0x110 [ 1917.245497] alloc_pages_vma+0xc2/0x4a0 [ 1917.249474] __handle_mm_fault+0x17b6/0x3280 [ 1917.253895] ? copy_page_range+0x1d70/0x1d70 [ 1917.258308] ? find_held_lock+0x2d/0x110 [ 1917.262384] handle_mm_fault+0x288/0x7a0 [ 1917.266453] __get_user_pages+0x44d/0x11e0 [ 1917.270687] ? follow_page_mask+0x1580/0x1580 [ 1917.275186] ? lock_acquire+0x170/0x3f0 [ 1917.279168] ? __mm_populate+0x1e3/0x2c0 [ 1917.283215] populate_vma_page_range+0x17b/0x210 [ 1917.288302] __mm_populate+0x195/0x2c0 [ 1917.292194] ? populate_vma_page_range+0x210/0x210 [ 1917.297130] ? security_capable+0x88/0xb0 [ 1917.301270] SyS_mlockall+0x3f5/0x520 [ 1917.305052] ? SyS_munlock+0xf0/0xf0 [ 1917.308750] do_syscall_64+0x1d5/0x640 [ 1917.312627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1917.317798] RIP: 0033:0x45ca29 [ 1917.320971] RSP: 002b:00007f47d6236c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1917.328662] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1917.335921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1917.343177] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1917.350429] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1917.357685] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f47d62376d4 [ 1917.446292] Mem-Info: [ 1917.481427] active_anon:203809 inactive_anon:1095478 isolated_anon:0 [ 1917.481427] active_file:9 inactive_file:0 isolated_file:0 [ 1917.481427] unevictable:46848 dirty:8 writeback:0 unstable:0 [ 1917.481427] slab_reclaimable:18646 slab_unreclaimable:114408 [ 1917.481427] mapped:65084 shmem:12406 pagetables:18297 bounce:0 [ 1917.481427] free:24995 free_pcp:0 free_cma:0 [ 1917.578157] Node 0 active_anon:743488kB inactive_anon:1020968kB active_file:28kB inactive_file:28kB unevictable:102548kB isolated(anon):0kB isolated(file):0kB mapped:226816kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1917.613114] Node 1 active_anon:71748kB inactive_anon:3360944kB active_file:108kB inactive_file:0kB unevictable:84844kB isolated(anon):0kB isolated(file):0kB mapped:33520kB dirty:32kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1917.882562] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1917.953675] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1917.958748] Node 0 DMA32 free:36104kB min:36272kB low:45340kB high:54408kB active_anon:743428kB inactive_anon:1015872kB active_file:28kB inactive_file:28kB unevictable:102548kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102548kB kernel_stack:12320kB pagetables:28280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1917.988934] lowmem_reserve[]: 0 0 0 0 0 [ 1917.998872] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1918.028485] lowmem_reserve[]: 0 0 0 0 0 [ 1918.032630] Node 1 Normal free:53496kB min:53612kB low:67012kB high:80412kB active_anon:71748kB inactive_anon:3360944kB active_file:40kB inactive_file:24kB unevictable:84844kB writepending:32kB present:3932160kB managed:3870192kB mlocked:84844kB kernel_stack:14656kB pagetables:44900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1918.091110] lowmem_reserve[]: 0 0 0 0 0 [ 1918.095143] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1918.123043] Node 0 DMA32: 370*4kB (UM) 272*8kB (U) 812*16kB (UE) 609*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36136kB [ 1918.140620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1918.155642] Node 1 Normal: 224*4kB (UME) 130*8kB (UME) 122*16kB (UME) 98*32kB (UME) 38*64kB (UME) 19*128kB (UME) 27*256kB (ME) 26*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53616kB [ 1918.177038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1918.196421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1918.226149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1918.314343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1918.370008] 18243 total pagecache pages [ 1918.404538] 0 pages in swap cache [ 1918.431312] Swap cache stats: add 0, delete 0, find 0/0 [ 1918.500921] Free swap = 0kB [ 1918.532398] Total swap = 0kB [ 1918.568354] 1965979 pages RAM [ 1918.599853] 0 pages HighMem/MovableOnly [ 1918.639187] 339053 pages reserved [ 1918.670792] 0 pages cma reserved [ 1918.697868] Out of memory: Kill process 27389 (syz-executor.5) score 1007 or sacrifice child [ 1918.783884] Killed process 27389 (syz-executor.5) total-vm:75104kB, anon-rss:17956kB, file-rss:39340kB, shmem-rss:0kB [ 1918.847646] oom_reaper: reaped process 27389 (syz-executor.5), now anon-rss:18008kB, file-rss:6832kB, shmem-rss:0kB 07:51:03 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/376], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:03 executing program 3 (fault-call:13 fault-nth:0): mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:51:03 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:03 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000180)}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000540)=""/74, 0x4a}], 0x4, 0x0) accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000480)=0x1c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x4080812, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:03 executing program 4: mlockall(0x1) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000200)={0x62, 0x21, 0x2}, 0xfffffffffffffeaf) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:03 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="050a38a64527146f0735e35757b13bd0dd0443876bac4f1d8112a3b354eddeb62cdc2dbb03064fdd671dbc9e361f7a8bd3485856dfa6409e200405c36b152a2df89888875788b6243ee87e1f4cb9cba5ba75d20e20b64f87951227fa0faf6bd334606549f757736a4ae22a74c70e4d392c0b9c2fa6956db35457019ca8d2f98f363f95d9f0c1fd0c58a80ef426cd0216eda15e50ba029f891460153e0c0ffca09e8f68113f1f1e8c85e3a334c17ae7c80c06bfb1ccb98c7de7ed5522f1519a9cff582004afc67ee6464953c053d9290aebb67b1a97c8b11fb13251bde269abe7798bd3fb8a38", @ANYRES16, @ANYBLOB="effe0d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='sessionid\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x63, 0x8000, 0x2, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:51:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x3}}, 0x800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1919.470731] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1919.535583] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1919.571535] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1919.650584] EXT4-fs error (device loop1): ext4_fill_super:4365: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1919.707392] EXT4-fs (loop1): get root inode failed [ 1919.737087] EXT4-fs (loop1): mount failed [ 1919.803823] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1919.919179] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1919.939721] CPU: 1 PID: 27414 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1919.947624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1919.956962] Call Trace: [ 1919.959537] dump_stack+0x13e/0x194 [ 1919.963193] dump_header+0x178/0x6d4 [ 1919.966888] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1919.971946] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1919.977032] ? ___ratelimit+0x50/0x519 [ 1919.980989] oom_kill_process.cold+0x10/0xae3 [ 1919.985522] ? lock_acquire+0x170/0x3f0 [ 1919.989526] ? lock_downgrade+0x6e0/0x6e0 [ 1919.993659] out_of_memory+0x2d5/0x1110 [ 1919.997621] ? oom_killer_disable+0x1c0/0x1c0 [ 1920.002148] ? mutex_trylock+0x152/0x1a0 [ 1920.006204] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1920.011034] ? warn_alloc+0xf0/0xf0 [ 1920.014649] __alloc_pages_nodemask+0x5d3/0x700 [ 1920.019310] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1920.024320] ? find_held_lock+0x2d/0x110 [ 1920.028398] alloc_pages_vma+0xc2/0x4a0 [ 1920.032381] __handle_mm_fault+0x17b6/0x3280 [ 1920.036771] ? copy_page_range+0x1d70/0x1d70 [ 1920.041159] ? find_held_lock+0x2d/0x110 [ 1920.045816] handle_mm_fault+0x288/0x7a0 [ 1920.049857] __get_user_pages+0x44d/0x11e0 [ 1920.054102] ? follow_page_mask+0x1580/0x1580 [ 1920.058593] ? lock_acquire+0x170/0x3f0 [ 1920.062566] ? __mm_populate+0x1e3/0x2c0 [ 1920.066829] populate_vma_page_range+0x17b/0x210 [ 1920.071568] __mm_populate+0x195/0x2c0 [ 1920.075440] ? populate_vma_page_range+0x210/0x210 [ 1920.080351] ? security_capable+0x88/0xb0 [ 1920.084503] SyS_mlockall+0x3f5/0x520 [ 1920.088299] ? SyS_munlock+0xf0/0xf0 [ 1920.092007] do_syscall_64+0x1d5/0x640 [ 1920.095892] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1920.101060] RIP: 0033:0x45ca29 [ 1920.104227] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1920.111913] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1920.119167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1920.126435] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1920.133700] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1920.140950] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 1920.161004] Mem-Info: [ 1920.163466] active_anon:203834 inactive_anon:1095462 isolated_anon:0 [ 1920.163466] active_file:0 inactive_file:6 isolated_file:0 [ 1920.163466] unevictable:46244 dirty:0 writeback:0 unstable:0 [ 1920.163466] slab_reclaimable:18627 slab_unreclaimable:115150 [ 1920.163466] mapped:64730 shmem:12408 pagetables:18293 bounce:0 [ 1920.163466] free:24924 free_pcp:112 free_cma:0 [ 1920.200007] Node 0 active_anon:743488kB inactive_anon:1020964kB active_file:0kB inactive_file:24kB unevictable:102100kB isolated(anon):0kB isolated(file):0kB mapped:226816kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1920.230994] Node 1 active_anon:71848kB inactive_anon:3360884kB active_file:0kB inactive_file:20kB unevictable:82876kB isolated(anon):0kB isolated(file):0kB mapped:32104kB dirty:0kB writeback:0kB shmem:20552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1920.260803] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.289343] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1920.294425] Node 0 DMA32 free:35904kB min:36272kB low:45340kB high:54408kB active_anon:743428kB inactive_anon:1015868kB active_file:0kB inactive_file:28kB unevictable:102100kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102100kB kernel_stack:12320kB pagetables:28280kB bounce:0kB free_pcp:224kB local_pcp:104kB free_cma:0kB [ 1920.324672] lowmem_reserve[]: 0 0 0 0 0 [ 1920.328689] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.354326] lowmem_reserve[]: 0 0 0 0 0 [ 1920.358349] Node 1 Normal free:53344kB min:53612kB low:67012kB high:80412kB active_anon:71848kB inactive_anon:3360884kB active_file:0kB inactive_file:24kB unevictable:82676kB writepending:0kB present:3932160kB managed:3870192kB mlocked:82676kB kernel_stack:14720kB pagetables:44884kB bounce:0kB free_pcp:224kB local_pcp:100kB free_cma:0kB [ 1920.388365] lowmem_reserve[]: 0 0 0 0 0 [ 1920.392416] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1920.408566] Node 0 DMA32: 467*4kB (U) 177*8kB (UE) 817*16kB (UE) 606*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35748kB [ 1920.422180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1920.432959] Node 1 Normal: 277*4kB (UE) 91*8kB (UE) 136*16kB (UE) 44*32kB (UE) 33*64kB (UME) 33*128kB (UME) 29*256kB (UME) 26*512kB (UME) 12*1024kB (UME) 4*2048kB (ME) 0*4096kB = 52972kB [ 1920.449905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1920.459935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1920.468585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1920.477506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1920.486158] 17850 total pagecache pages [ 1920.490137] 0 pages in swap cache [ 1920.493648] Swap cache stats: add 0, delete 0, find 0/0 [ 1920.499004] Free swap = 0kB [ 1920.502082] Total swap = 0kB [ 1920.505093] 1965979 pages RAM [ 1920.508188] 0 pages HighMem/MovableOnly [ 1920.512203] 339053 pages reserved [ 1920.515648] 0 pages cma reserved [ 1920.519007] Out of memory: Kill process 27407 (syz-executor.3) score 1007 or sacrifice child [ 1920.527682] Killed process 27407 (syz-executor.3) total-vm:74840kB, anon-rss:17716kB, file-rss:39340kB, shmem-rss:0kB [ 1920.577800] oom_reaper: reaped process 27407 (syz-executor.3), now anon-rss:17944kB, file-rss:5360kB, shmem-rss:0kB 07:51:04 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x9, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:51:04 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4, {0x7, 0x1f, 0x8, 0x240040, 0x401, 0x7a2, 0x8, 0xfffffff9}}, 0x50) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) [ 1921.131506] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1921.300536] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1921.352899] CPU: 1 PID: 6340 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1921.360381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1921.369734] Call Trace: [ 1921.372331] dump_stack+0x13e/0x194 [ 1921.375963] dump_header+0x178/0x6d4 [ 1921.379674] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1921.384694] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1921.389888] ? ___ratelimit+0x50/0x519 [ 1921.393787] oom_kill_process.cold+0x10/0xae3 [ 1921.398286] ? lock_acquire+0x170/0x3f0 [ 1921.402268] ? lock_downgrade+0x6e0/0x6e0 [ 1921.407381] out_of_memory+0x2d5/0x1110 [ 1921.411362] ? oom_killer_disable+0x1c0/0x1c0 [ 1921.415855] ? mutex_trylock+0x152/0x1a0 [ 1921.419921] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1921.424776] ? warn_alloc+0xf0/0xf0 [ 1921.428417] __alloc_pages_nodemask+0x5d3/0x700 [ 1921.433090] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1921.438107] ? lock_downgrade+0x6e0/0x6e0 [ 1921.442268] alloc_pages_current+0xe7/0x1e0 [ 1921.446591] __page_cache_alloc+0x245/0x3d0 [ 1921.450914] filemap_fault+0xc18/0x1c50 [ 1921.455007] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1921.459661] ? lock_acquire+0x170/0x3f0 [ 1921.463633] ? ext4_filemap_fault+0x7c/0xb0 [ 1921.467969] ext4_filemap_fault+0x84/0xb0 [ 1921.472826] __do_fault+0xfa/0x380 [ 1921.476405] __handle_mm_fault+0x22e9/0x3280 [ 1921.480817] ? copy_page_range+0x1d70/0x1d70 [ 1921.485234] ? find_held_lock+0x2d/0x110 [ 1921.489419] handle_mm_fault+0x288/0x7a0 [ 1921.493467] __do_page_fault+0x4bc/0xb40 [ 1921.497536] ? vmalloc_fault+0xdf0/0xdf0 [ 1921.501589] ? do_page_fault+0x60/0x4f2 [ 1921.505541] ? page_fault+0x2f/0x50 [ 1921.509151] page_fault+0x45/0x50 [ 1921.512602] RIP: 0014:0x13 [ 1921.515421] RSP: 77d5e0:000000c420169ee0 EFLAGS: ffffffffffffffff [ 1921.795199] Mem-Info: [ 1921.804053] active_anon:203825 inactive_anon:1095466 isolated_anon:0 [ 1921.804053] active_file:6 inactive_file:0 isolated_file:1 [ 1921.804053] unevictable:46087 dirty:0 writeback:0 unstable:0 [ 1921.804053] slab_reclaimable:18631 slab_unreclaimable:115016 [ 1921.804053] mapped:64015 shmem:12406 pagetables:18320 bounce:0 [ 1921.804053] free:24970 free_pcp:31 free_cma:0 [ 1921.837989] Node 0 active_anon:743480kB inactive_anon:1020964kB active_file:0kB inactive_file:56kB unevictable:102084kB isolated(anon):0kB isolated(file):0kB mapped:226816kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1921.866721] Node 1 active_anon:71820kB inactive_anon:3360900kB active_file:12kB inactive_file:0kB unevictable:82360kB isolated(anon):0kB isolated(file):0kB mapped:29292kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1921.894865] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1921.927126] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1921.932855] Node 0 DMA32 free:36168kB min:36272kB low:45340kB high:54408kB active_anon:743420kB inactive_anon:1015868kB active_file:4kB inactive_file:0kB unevictable:102088kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102088kB kernel_stack:12320kB pagetables:28276kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1921.970247] lowmem_reserve[]: 0 0 0 0 0 [ 1921.974345] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1921.999848] lowmem_reserve[]: 0 0 0 0 0 [ 1922.004035] Node 1 Normal free:52996kB min:53612kB low:67012kB high:80412kB active_anon:71812kB inactive_anon:3360908kB active_file:56kB inactive_file:52kB unevictable:82364kB writepending:4kB present:3932160kB managed:3870192kB mlocked:82364kB kernel_stack:14720kB pagetables:45000kB bounce:0kB free_pcp:556kB local_pcp:244kB free_cma:0kB [ 1922.034351] lowmem_reserve[]: 0 0 0 0 0 [ 1922.038354] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1922.054315] Node 0 DMA32: 502*4kB (UME) 208*8kB (UME) 819*16kB (UME) 606*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36168kB [ 1922.068064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1922.078825] Node 1 Normal: 178*4kB (UME) 46*8kB (UME) 83*16kB (UME) 55*32kB (UE) 49*64kB (UME) 34*128kB (UME) 29*256kB (UME) 26*512kB (UME) 12*1024kB (UME) 4*2048kB (ME) 0*4096kB = 52872kB [ 1922.099794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.108850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1922.117537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.126460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1922.135092] 17179 total pagecache pages [ 1922.139068] 0 pages in swap cache [ 1922.142740] Swap cache stats: add 0, delete 0, find 0/0 [ 1922.148101] Free swap = 0kB [ 1922.151365] Total swap = 0kB [ 1922.154383] 1965979 pages RAM [ 1922.157482] 0 pages HighMem/MovableOnly [ 1922.161496] 339053 pages reserved [ 1922.165653] 0 pages cma reserved [ 1922.169021] Out of memory: Kill process 27404 (syz-executor.2) score 1007 or sacrifice child [ 1922.177651] Killed process 27404 (syz-executor.2) total-vm:75104kB, anon-rss:17980kB, file-rss:39340kB, shmem-rss:0kB [ 1922.209364] oom_reaper: reaped process 27404 (syz-executor.2), now anon-rss:17964kB, file-rss:4524kB, shmem-rss:0kB 07:51:06 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/376], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:06 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x110, r2, 0x1000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:06 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1922.416082] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1922.455115] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1922.489660] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1922.527472] EXT4-fs (loop1): journal inode is deleted [ 1923.627824] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1923.782383] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1923.831960] CPU: 0 PID: 27446 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1923.839901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.849253] Call Trace: [ 1923.851849] dump_stack+0x13e/0x194 [ 1923.855476] dump_header+0x178/0x6d4 [ 1923.859186] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1923.864195] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1923.869295] ? ___ratelimit+0x50/0x519 [ 1923.873183] oom_kill_process.cold+0x10/0xae3 [ 1923.877684] ? lock_downgrade+0x6e0/0x6e0 [ 1923.881857] out_of_memory+0x2d5/0x1110 [ 1923.885831] ? oom_killer_disable+0x1c0/0x1c0 [ 1923.890320] ? mutex_trylock+0x152/0x1a0 [ 1923.894378] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1923.899232] ? warn_alloc+0xf0/0xf0 [ 1923.902867] __alloc_pages_nodemask+0x5d3/0x700 [ 1923.907540] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1923.912551] ? find_held_lock+0x2d/0x110 [ 1923.916633] alloc_pages_vma+0xc2/0x4a0 [ 1923.920606] __handle_mm_fault+0x17b6/0x3280 [ 1923.925099] ? copy_page_range+0x1d70/0x1d70 [ 1923.929525] ? find_held_lock+0x2d/0x110 [ 1923.933593] handle_mm_fault+0x288/0x7a0 [ 1923.937653] __get_user_pages+0x44d/0x11e0 [ 1923.941892] ? follow_page_mask+0x1580/0x1580 [ 1923.946386] ? lock_acquire+0x170/0x3f0 [ 1923.950355] ? __mm_populate+0x1e3/0x2c0 [ 1923.954411] populate_vma_page_range+0x17b/0x210 [ 1923.959190] __mm_populate+0x195/0x2c0 [ 1923.963083] ? populate_vma_page_range+0x210/0x210 [ 1923.968028] ? security_capable+0x88/0xb0 [ 1923.972180] SyS_mlockall+0x3f5/0x520 [ 1923.975973] ? SyS_munlock+0xf0/0xf0 [ 1923.979714] do_syscall_64+0x1d5/0x640 [ 1923.983604] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1923.988787] RIP: 0033:0x45ca29 [ 1923.991974] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1923.999678] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1924.007053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1924.014317] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1924.021668] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1924.028942] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 1924.053481] Mem-Info: [ 1924.056126] active_anon:203843 inactive_anon:1095480 isolated_anon:0 [ 1924.056126] active_file:13 inactive_file:1 isolated_file:12 [ 1924.056126] unevictable:45456 dirty:0 writeback:0 unstable:0 [ 1924.056126] slab_reclaimable:18641 slab_unreclaimable:115739 [ 1924.056126] mapped:63786 shmem:12406 pagetables:18299 bounce:0 [ 1924.056126] free:24967 free_pcp:62 free_cma:0 [ 1924.098301] Node 0 active_anon:743696kB inactive_anon:1020964kB active_file:4kB inactive_file:4kB unevictable:102168kB isolated(anon):0kB isolated(file):0kB mapped:227060kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1924.128632] Node 1 active_anon:71676kB inactive_anon:3360956kB active_file:48kB inactive_file:48kB unevictable:79656kB isolated(anon):0kB isolated(file):0kB mapped:28088kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1924.157348] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.196423] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1924.204038] Node 0 DMA32 free:36460kB min:36272kB low:45340kB high:54408kB active_anon:743636kB inactive_anon:1015868kB active_file:4kB inactive_file:4kB unevictable:102168kB writepending:16kB present:3129332kB managed:2621260kB mlocked:102168kB kernel_stack:12352kB pagetables:28352kB bounce:0kB free_pcp:348kB local_pcp:112kB free_cma:0kB [ 1924.240433] lowmem_reserve[]: 0 0 0 0 0 [ 1924.245129] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.483371] lowmem_reserve[]: 0 0 0 0 0 [ 1924.487404] Node 1 Normal free:63944kB min:53612kB low:67012kB high:80412kB active_anon:71684kB inactive_anon:3378600kB active_file:3176kB inactive_file:7380kB unevictable:39844kB writepending:12kB present:3932160kB managed:3870192kB mlocked:39920kB kernel_stack:14560kB pagetables:44836kB bounce:0kB free_pcp:696kB local_pcp:236kB free_cma:0kB 07:51:08 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00e5965c5e7f9ad26600ccc5c56f", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000340)={[0x24000000000, 0x5, 0x4, 0x80000000, 0x1, 0xffffffffffff0001, 0x3, 0x4, 0x1, 0x3, 0x3, 0x5, 0x40, 0xff, 0x7fffffff, 0x8], 0x1000, 0xd1110}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="c4c2198e6d03f265f20f22838fc908999d0500000066baf80cb8e815368fef66bafc0c66b8000066ef66bad104b0eceefff566ba4300ed8fc978cbb60bb4f28b66ba430066b8607e66efc4e269a89900590000", 0x53}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:51:08 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f0000000640), 0x0, 0x5) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) 07:51:08 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/439], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1924.702926] EXT4-fs (loop1): invalid first ino: 0 [ 1924.736938] lowmem_reserve[]: 0 0 0 0 0 [ 1924.764167] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1924.812432] Node 0 DMA32: 1*4kB (M) 456*8kB (U) 823*16kB (UE) 604*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36148kB [ 1924.849628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1924.877266] Node 1 Normal: 609*4kB (UME) 120*8kB (UME) 63*16kB (ME) 80*32kB (UME) 43*64kB (ME) 49*128kB (UME) 30*256kB (ME) 25*512kB (ME) 10*1024kB (UME) 4*2048kB (ME) 0*4096kB = 54900kB [ 1924.972739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.982807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.993139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.003477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.023055] 20023 total pagecache pages [ 1925.053101] 0 pages in swap cache [ 1925.057877] Swap cache stats: add 0, delete 0, find 0/0 [ 1925.063526] Free swap = 0kB [ 1925.066546] Total swap = 0kB [ 1925.069559] 1965979 pages RAM [ 1925.073441] 0 pages HighMem/MovableOnly [ 1925.077595] 339053 pages reserved [ 1925.081325] 0 pages cma reserved [ 1925.084797] Out of memory: Kill process 27439 (syz-executor.2) score 1008 or sacrifice child [ 1925.147252] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1925.185716] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1925.198118] CPU: 0 PID: 27446 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1925.206019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1925.215374] Call Trace: [ 1925.217970] dump_stack+0x13e/0x194 [ 1925.221761] dump_header+0x178/0x6d4 [ 1925.225655] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1925.230674] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1925.235983] ? ___ratelimit+0x50/0x519 [ 1925.239863] oom_kill_process.cold+0x10/0xae3 [ 1925.244352] ? lock_acquire+0x170/0x3f0 [ 1925.248317] ? lock_downgrade+0x6e0/0x6e0 [ 1925.252466] out_of_memory+0x2d5/0x1110 [ 1925.256517] ? oom_killer_disable+0x1c0/0x1c0 [ 1925.260999] ? mutex_trylock+0x152/0x1a0 [ 1925.265122] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1925.269989] ? warn_alloc+0xf0/0xf0 [ 1925.273614] __alloc_pages_nodemask+0x5d3/0x700 [ 1925.278272] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1925.283276] ? find_held_lock+0x2d/0x110 [ 1925.287423] alloc_pages_vma+0xc2/0x4a0 [ 1925.291497] __handle_mm_fault+0x17b6/0x3280 [ 1925.296268] ? copy_page_range+0x1d70/0x1d70 [ 1925.300692] ? find_held_lock+0x2d/0x110 [ 1925.304769] handle_mm_fault+0x288/0x7a0 [ 1925.308839] __get_user_pages+0x44d/0x11e0 [ 1925.313073] ? follow_page_mask+0x1580/0x1580 [ 1925.317559] ? lock_acquire+0x170/0x3f0 [ 1925.321523] ? __mm_populate+0x1e3/0x2c0 [ 1925.325684] populate_vma_page_range+0x17b/0x210 [ 1925.330438] __mm_populate+0x195/0x2c0 [ 1925.334323] ? populate_vma_page_range+0x210/0x210 [ 1925.340544] ? security_capable+0x88/0xb0 [ 1925.344848] SyS_mlockall+0x3f5/0x520 [ 1925.348637] ? SyS_munlock+0xf0/0xf0 [ 1925.352339] do_syscall_64+0x1d5/0x640 [ 1925.356331] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1925.361540] RIP: 0033:0x45ca29 [ 1925.364718] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1925.372425] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1925.380114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1925.387367] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1925.394625] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1925.401951] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 1925.412732] Mem-Info: [ 1925.415178] active_anon:203854 inactive_anon:1099957 isolated_anon:0 [ 1925.415178] active_file:1 inactive_file:9 isolated_file:0 [ 1925.415178] unevictable:41370 dirty:0 writeback:0 unstable:0 [ 1925.415178] slab_reclaimable:18681 slab_unreclaimable:115475 [ 1925.415178] mapped:66584 shmem:12406 pagetables:18291 bounce:0 [ 1925.415178] free:24830 free_pcp:0 free_cma:0 [ 1925.452056] Node 0 active_anon:744700kB inactive_anon:1020964kB active_file:28kB inactive_file:0kB unevictable:105176kB isolated(anon):0kB isolated(file):0kB mapped:229568kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1925.482951] Node 1 active_anon:70716kB inactive_anon:3378864kB active_file:0kB inactive_file:72kB unevictable:60304kB isolated(anon):0kB isolated(file):0kB mapped:36768kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1925.513349] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.550188] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1925.555728] Node 0 DMA32 free:35840kB min:36272kB low:45340kB high:54408kB active_anon:744640kB inactive_anon:1015868kB active_file:28kB inactive_file:0kB unevictable:104676kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104676kB kernel_stack:12416kB pagetables:28388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.590602] lowmem_reserve[]: 0 0 0 0 0 [ 1925.594616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.624747] lowmem_reserve[]: 0 0 0 0 0 [ 1925.628772] Node 1 Normal free:53480kB min:53612kB low:67012kB high:80412kB active_anon:70716kB inactive_anon:3378864kB active_file:0kB inactive_file:8kB unevictable:59804kB writepending:0kB present:3932160kB managed:3870192kB mlocked:59804kB kernel_stack:14496kB pagetables:44768kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1925.663038] lowmem_reserve[]: 0 0 0 0 0 [ 1925.667048] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 12*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 1925.687579] Node 0 DMA32: 2*4kB (UM) 407*8kB (UM) 826*16kB (UE) 605*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35840kB [ 1925.729555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1925.749357] Node 1 Normal: 272*4kB (UM) 81*8kB (UME) 70*16kB (UME) 85*32kB (UME) 43*64kB (ME) 49*128kB (UME) 30*256kB (ME) 25*512kB (ME) 10*1024kB (UME) 4*2048kB (ME) 0*4096kB = 53512kB [ 1925.789393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.819222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.870141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.890846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.899441] 19674 total pagecache pages [ 1925.915245] 0 pages in swap cache [ 1925.918718] Swap cache stats: add 0, delete 0, find 0/0 [ 1925.928889] Free swap = 0kB [ 1925.939081] Total swap = 0kB [ 1925.946845] 1965979 pages RAM [ 1925.949956] 0 pages HighMem/MovableOnly [ 1925.965740] 339053 pages reserved [ 1925.969233] 0 pages cma reserved [ 1925.977294] Out of memory: Kill process 27443 (syz-executor.5) score 1009 or sacrifice child [ 1925.997886] Killed process 27444 (syz-executor.5) total-vm:74972kB, anon-rss:18020kB, file-rss:47852kB, shmem-rss:0kB [ 1926.027092] oom_reaper: reaped process 27444 (syz-executor.5), now anon-rss:18012kB, file-rss:17068kB, shmem-rss:0kB 07:51:10 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, &(0x7f00000017c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x100000080000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:10 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x53c7e450e96dc3f5}, 0x4090) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYRESDEC=r1], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:51:10 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1926.532408] EXT4-fs (loop1): unsupported inode size: 52 [ 1926.558129] EXT4-fs (loop1): blocksize: 4096 [ 1926.939835] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1927.117434] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1927.163247] CPU: 1 PID: 27460 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1927.171168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1927.180613] Call Trace: [ 1927.183214] dump_stack+0x13e/0x194 [ 1927.186855] dump_header+0x178/0x6d4 [ 1927.190571] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1927.195595] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1927.200704] ? ___ratelimit+0x50/0x519 [ 1927.204601] oom_kill_process.cold+0x10/0xae3 [ 1927.209105] ? lock_acquire+0x170/0x3f0 [ 1927.213086] ? lock_downgrade+0x6e0/0x6e0 [ 1927.217237] out_of_memory+0x2d5/0x1110 [ 1927.221215] ? oom_killer_disable+0x1c0/0x1c0 [ 1927.225712] ? mutex_trylock+0x152/0x1a0 [ 1927.229778] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1927.234641] ? warn_alloc+0xf0/0xf0 [ 1927.238288] __alloc_pages_nodemask+0x5d3/0x700 [ 1927.243009] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1927.248034] ? find_held_lock+0x2d/0x110 [ 1927.252112] alloc_pages_vma+0xc2/0x4a0 [ 1927.256127] __handle_mm_fault+0x17b6/0x3280 [ 1927.260543] ? copy_page_range+0x1d70/0x1d70 [ 1927.264960] ? find_held_lock+0x2d/0x110 [ 1927.269040] handle_mm_fault+0x288/0x7a0 [ 1927.273112] __get_user_pages+0x44d/0x11e0 [ 1927.277361] ? follow_page_mask+0x1580/0x1580 [ 1927.281862] ? lock_acquire+0x170/0x3f0 [ 1927.285840] ? __mm_populate+0x1e3/0x2c0 [ 1927.289906] populate_vma_page_range+0x17b/0x210 [ 1927.294669] __mm_populate+0x195/0x2c0 [ 1927.298568] ? populate_vma_page_range+0x210/0x210 [ 1927.303499] ? security_capable+0x88/0xb0 [ 1927.307659] SyS_mlockall+0x3f5/0x520 [ 1927.311460] ? SyS_munlock+0xf0/0xf0 [ 1927.315178] do_syscall_64+0x1d5/0x640 [ 1927.319092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1927.324280] RIP: 0033:0x45ca29 [ 1927.327465] RSP: 002b:00007f47d6236c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1927.335178] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1927.342451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1927.349808] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1927.357079] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1927.364355] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f47d62376d4 [ 1927.457307] Mem-Info: [ 1927.459769] active_anon:203875 inactive_anon:1100202 isolated_anon:0 [ 1927.459769] active_file:20 inactive_file:19 isolated_file:0 [ 1927.459769] unevictable:40717 dirty:0 writeback:0 unstable:0 [ 1927.459769] slab_reclaimable:18642 slab_unreclaimable:115660 [ 1927.459769] mapped:64732 shmem:12665 pagetables:18315 bounce:0 [ 1927.459769] free:24985 free_pcp:19 free_cma:0 [ 1927.536090] Node 0 active_anon:744640kB inactive_anon:1020964kB active_file:0kB inactive_file:20kB unevictable:105640kB isolated(anon):0kB isolated(file):0kB mapped:228144kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1927.813085] Node 1 active_anon:70860kB inactive_anon:3379844kB active_file:80kB inactive_file:0kB unevictable:57228kB isolated(anon):0kB isolated(file):0kB mapped:30784kB dirty:0kB writeback:0kB shmem:21580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1928.089132] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1928.301572] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1928.323129] Node 0 DMA32 free:36268kB min:36272kB low:45340kB high:54408kB active_anon:744580kB inactive_anon:1017884kB active_file:8kB inactive_file:0kB unevictable:103804kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103724kB kernel_stack:12416kB pagetables:28392kB bounce:0kB free_pcp:352kB local_pcp:352kB free_cma:0kB 07:51:12 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/439], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1928.578518] lowmem_reserve[]: 0 0 0 0 0 [ 1928.608342] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1928.730744] lowmem_reserve[]: 0 0 0 0 0 [ 1928.741051] Node 1 Normal free:55572kB min:53612kB low:67012kB high:80412kB active_anon:70860kB inactive_anon:3379760kB active_file:1340kB inactive_file:1144kB unevictable:53232kB writepending:0kB present:3932160kB managed:3870192kB mlocked:53316kB kernel_stack:14624kB pagetables:44864kB bounce:0kB free_pcp:648kB local_pcp:544kB free_cma:0kB [ 1928.828318] lowmem_reserve[]: 0 0 0 0 0 [ 1928.838262] Node 0 DMA: 5*4kB (UE) 9*8kB (UE) 10*16kB (UE) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1928.871289] Node 0 DMA32: 1*4kB (M) 462*8kB (U) 824*16kB (UE) 602*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36148kB [ 1928.903815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1928.915919] Node 1 Normal: 233*4kB (UE) 103*8kB (UE) 61*16kB (UME) 84*32kB (ME) 75*64kB (UME) 50*128kB (UME) 31*256kB (UME) 26*512kB (UME) 7*1024kB (ME) 4*2048kB (ME) 0*4096kB = 53228kB [ 1928.948145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1928.973231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1928.990543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1928.999417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1929.046688] 16867 total pagecache pages [ 1929.063661] 0 pages in swap cache [ 1929.067149] Swap cache stats: add 0, delete 0, find 0/0 [ 1929.079911] Free swap = 0kB [ 1929.087977] Total swap = 0kB [ 1929.098690] 1965979 pages RAM [ 1929.106777] 0 pages HighMem/MovableOnly [ 1929.118049] 339053 pages reserved [ 1929.140058] 0 pages cma reserved [ 1929.148702] Out of memory: Kill process 27459 (syz-executor.2) score 1007 or sacrifice child [ 1929.193621] oom_reaper: reaped process 27460 (syz-executor.3), now anon-rss:15852kB, file-rss:5360kB, shmem-rss:0kB [ 1929.216950] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1929.347504] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1929.392892] CPU: 0 PID: 27484 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 1929.400810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1929.410162] Call Trace: [ 1929.412760] dump_stack+0x13e/0x194 [ 1929.416394] dump_header+0x178/0x6d4 [ 1929.420112] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1929.425136] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1929.430239] ? ___ratelimit+0x50/0x519 [ 1929.434135] oom_kill_process.cold+0x10/0xae3 [ 1929.438631] ? lock_acquire+0x170/0x3f0 [ 1929.442606] ? lock_downgrade+0x6e0/0x6e0 [ 1929.446762] out_of_memory+0x2d5/0x1110 [ 1929.450749] ? oom_killer_disable+0x1c0/0x1c0 [ 1929.455247] ? mutex_trylock+0x152/0x1a0 [ 1929.460528] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1929.465393] ? warn_alloc+0xf0/0xf0 [ 1929.469040] __alloc_pages_nodemask+0x5d3/0x700 [ 1929.474261] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1929.479294] ? find_held_lock+0x2d/0x110 [ 1929.483372] alloc_pages_vma+0xc2/0x4a0 [ 1929.487380] __handle_mm_fault+0x17b6/0x3280 [ 1929.491789] ? copy_page_range+0x1d70/0x1d70 [ 1929.496199] ? find_held_lock+0x2d/0x110 [ 1929.500268] handle_mm_fault+0x288/0x7a0 [ 1929.504329] __get_user_pages+0x44d/0x11e0 [ 1929.508573] ? follow_page_mask+0x1580/0x1580 [ 1929.513081] ? lock_acquire+0x170/0x3f0 [ 1929.517136] ? __mm_populate+0x1e3/0x2c0 [ 1929.521196] populate_vma_page_range+0x17b/0x210 [ 1929.525962] __mm_populate+0x195/0x2c0 [ 1929.529859] ? populate_vma_page_range+0x210/0x210 [ 1929.534787] ? security_capable+0x88/0xb0 [ 1929.538938] SyS_mlockall+0x3f5/0x520 [ 1929.542736] ? SyS_munlock+0xf0/0xf0 [ 1929.546450] do_syscall_64+0x1d5/0x640 [ 1929.550345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1929.555627] RIP: 0033:0x45ca29 [ 1929.558811] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1929.566523] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1929.573899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1929.581174] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1929.588450] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1929.595724] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 07:51:13 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000200)='/dev/ubi_ctrl\x00', &(0x7f0000000240)='/dev/ubi_ctrl\x00', &(0x7f0000000380)='eth1-\x00', &(0x7f00000003c0)='+md5sum\x00', &(0x7f0000000400)='smaps\x00', &(0x7f0000000440)='smaps\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='^\x00', &(0x7f0000000500)='cgroup.controllers\x00', &(0x7f0000000540)='mime_type\x00', &(0x7f0000000580)='cgroup.controllers\x00']) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:51:13 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1d1c81, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/prev\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11012, r1, 0x1000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:13 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c82e32f6", @ANYRES16=r2, @ANYBLOB="200426bd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) 07:51:13 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xff, 0xe, 0x6, 0x8, 0x0, 0x1f, 0x220, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000180), 0xe}, 0x40002, 0x5, 0x0, 0x8, 0x20, 0x7, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1930.119733] Mem-Info: [ 1930.123115] active_anon:203927 inactive_anon:1099973 isolated_anon:0 [ 1930.123115] active_file:11 inactive_file:22 isolated_file:3 [ 1930.123115] unevictable:40330 dirty:0 writeback:0 unstable:0 [ 1930.123115] slab_reclaimable:18691 slab_unreclaimable:115375 [ 1930.123115] mapped:68505 shmem:12407 pagetables:18329 bounce:0 [ 1930.123115] free:25308 free_pcp:183 free_cma:0 [ 1930.203083] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1930.247749] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1930.275011] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1930.299711] EXT4-fs (loop1): journal inode is deleted [ 1930.371109] Node 0 active_anon:744656kB inactive_anon:1020972kB active_file:48kB inactive_file:192kB unevictable:109000kB isolated(anon):0kB isolated(file):0kB mapped:230852kB dirty:0kB writeback:0kB shmem:29088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1930.614657] Node 1 active_anon:71052kB inactive_anon:3378920kB active_file:0kB inactive_file:0kB unevictable:57020kB isolated(anon):0kB isolated(file):0kB mapped:44668kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1930.681082] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5096kB active_file:0kB inactive_file:4kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.767548] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1930.801646] Node 0 DMA32 free:36004kB min:36272kB low:45340kB high:54408kB active_anon:744596kB inactive_anon:1015876kB active_file:4kB inactive_file:108kB unevictable:108160kB writepending:0kB present:3129332kB managed:2621260kB mlocked:108664kB kernel_stack:12384kB pagetables:28364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.028337] lowmem_reserve[]: 0 0 0 0 0 [ 1931.068138] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.281906] lowmem_reserve[]: 0 0 0 0 0 [ 1931.331998] Node 1 Normal free:53552kB min:53612kB low:67012kB high:80412kB active_anon:71096kB inactive_anon:3378920kB active_file:0kB inactive_file:12kB unevictable:57076kB writepending:0kB present:3932160kB managed:3870192kB mlocked:57076kB kernel_stack:14720kB pagetables:44980kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.438133] lowmem_reserve[]: 0 0 0 0 0 [ 1931.445600] Node 0 DMA: 6*4kB (UME) 9*8kB (UE) 10*16kB (UE) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1931.470814] Node 0 DMA32: 2*4kB (UM) 497*8kB (UM) 822*16kB (UE) 594*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36144kB [ 1931.487555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1931.498347] Node 1 Normal: 158*4kB (UM) 81*8kB (ME) 59*16kB (UME) 108*32kB (UME) 76*64kB (UME) 50*128kB (UME) 31*256kB (UME) 26*512kB (UME) 7*1024kB (ME) 4*2048kB (ME) 0*4096kB = 53552kB [ 1931.527512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.536479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.545131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.554065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.562767] 21944 total pagecache pages [ 1931.566745] 0 pages in swap cache [ 1931.570312] Swap cache stats: add 0, delete 0, find 0/0 [ 1931.575671] Free swap = 0kB [ 1931.578684] Total swap = 0kB [ 1931.581748] 1965979 pages RAM [ 1931.585120] 0 pages HighMem/MovableOnly [ 1931.589082] 339053 pages reserved [ 1931.592585] 0 pages cma reserved [ 1931.595946] Out of memory: Kill process 14603 (syz-executor.1) score 1007 or sacrifice child [ 1931.604596] Killed process 14603 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1931.771188] oom_reaper: reaped process 14603 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1931.802087] EXT4-fs (loop1): filesystem too large to mount safely on this system 07:51:16 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:16 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/439], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1932.859655] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1933.032135] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1933.077599] CPU: 1 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1933.085173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1933.094523] Call Trace: [ 1933.097103] dump_stack+0x13e/0x194 [ 1933.100718] dump_header+0x178/0x6d4 [ 1933.104536] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1933.109584] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1933.114798] ? ___ratelimit+0x50/0x519 [ 1933.118684] oom_kill_process.cold+0x10/0xae3 [ 1933.123182] ? lock_acquire+0x170/0x3f0 [ 1933.127171] ? lock_downgrade+0x6e0/0x6e0 [ 1933.131310] out_of_memory+0x2d5/0x1110 [ 1933.135268] ? oom_killer_disable+0x1c0/0x1c0 [ 1933.139746] ? mutex_trylock+0x152/0x1a0 [ 1933.143807] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1933.148638] ? warn_alloc+0xf0/0xf0 [ 1933.152264] __alloc_pages_nodemask+0x5d3/0x700 [ 1933.156920] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1933.161935] ? lock_downgrade+0x6e0/0x6e0 [ 1933.166086] alloc_pages_current+0xe7/0x1e0 [ 1933.170394] __page_cache_alloc+0x245/0x3d0 [ 1933.174717] filemap_fault+0xc18/0x1c50 [ 1933.178677] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1933.183330] ? lock_acquire+0x170/0x3f0 [ 1933.187302] ? ext4_filemap_fault+0x7c/0xb0 [ 1933.191609] ext4_filemap_fault+0x84/0xb0 [ 1933.195743] __do_fault+0xfa/0x380 [ 1933.199381] __handle_mm_fault+0x22e9/0x3280 [ 1933.203796] ? copy_page_range+0x1d70/0x1d70 [ 1933.208196] ? find_held_lock+0x2d/0x110 [ 1933.212266] handle_mm_fault+0x288/0x7a0 [ 1933.216316] __do_page_fault+0x4bc/0xb40 [ 1933.220376] ? vmalloc_fault+0xdf0/0xdf0 [ 1933.224440] ? do_page_fault+0x60/0x4f2 [ 1933.228414] ? page_fault+0x2f/0x50 [ 1933.232030] page_fault+0x45/0x50 [ 1933.235461] RIP: 00f1:0x11 [ 1933.238280] RSP: 458b10:000000c4422a27e8 EFLAGS: 00000000 [ 1933.248027] Mem-Info: [ 1933.256136] active_anon:203846 inactive_anon:1095408 isolated_anon:0 [ 1933.256136] active_file:25 inactive_file:0 isolated_file:0 [ 1933.256136] unevictable:45970 dirty:4 writeback:0 unstable:0 [ 1933.256136] slab_reclaimable:18760 slab_unreclaimable:115306 [ 1933.256136] mapped:66550 shmem:12406 pagetables:18295 bounce:0 [ 1933.256136] free:24986 free_pcp:57 free_cma:0 [ 1933.297420] Node 0 active_anon:744684kB inactive_anon:1020948kB active_file:52kB inactive_file:0kB unevictable:110748kB isolated(anon):0kB isolated(file):0kB mapped:228628kB dirty:0kB writeback:0kB shmem:29092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1933.333489] Node 1 active_anon:70700kB inactive_anon:3360684kB active_file:48kB inactive_file:64kB unevictable:73332kB isolated(anon):0kB isolated(file):0kB mapped:37772kB dirty:16kB writeback:0kB shmem:20532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1933.369242] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:76kB writepending:0kB present:15992kB managed:15908kB mlocked:76kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.403566] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1933.408629] Node 0 DMA32 free:36004kB min:36272kB low:45340kB high:54408kB active_anon:744624kB inactive_anon:1015872kB active_file:52kB inactive_file:0kB unevictable:110672kB writepending:0kB present:3129332kB managed:2621260kB mlocked:110672kB kernel_stack:12352kB pagetables:28384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.446926] lowmem_reserve[]: 0 0 0 0 0 [ 1933.451029] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.498798] lowmem_reserve[]: 0 0 0 0 0 [ 1933.514978] Node 1 Normal free:53116kB min:53612kB low:67012kB high:80412kB active_anon:70700kB inactive_anon:3360684kB active_file:32kB inactive_file:16kB unevictable:73136kB writepending:16kB present:3932160kB managed:3870192kB mlocked:73136kB kernel_stack:14560kB pagetables:44788kB bounce:0kB free_pcp:240kB local_pcp:228kB free_cma:0kB [ 1933.555133] lowmem_reserve[]: 0 0 0 0 0 [ 1933.559157] Node 0 DMA: 6*4kB (UME) 9*8kB (UE) 10*16kB (UE) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1933.584709] Node 0 DMA32: 75*4kB (UME) 374*8kB (UM) 843*16kB (UE) 602*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36044kB [ 1933.607947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1933.618757] Node 1 Normal: 176*4kB (UME) 21*8kB (UME) 87*16kB (ME) 67*32kB (UME) 85*64kB (ME) 64*128kB (UME) 34*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 53368kB [ 1933.645263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1933.656752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1933.686440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1933.699942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1933.771531] 19703 total pagecache pages [ 1933.775540] 0 pages in swap cache [ 1933.778988] Swap cache stats: add 0, delete 0, find 0/0 [ 1933.845168] Free swap = 0kB [ 1933.848215] Total swap = 0kB [ 1933.872939] 1965979 pages RAM [ 1933.876087] 0 pages HighMem/MovableOnly [ 1933.938585] 339053 pages reserved [ 1933.960870] 0 pages cma reserved [ 1933.964268] Out of memory: Kill process 27500 (syz-executor.5) score 1009 or sacrifice child [ 1933.987620] Killed process 27502 (syz-executor.5) total-vm:74972kB, anon-rss:18020kB, file-rss:47148kB, shmem-rss:0kB [ 1934.072949] oom_reaper: reaped process 27502 (syz-executor.5), now anon-rss:18012kB, file-rss:12656kB, shmem-rss:0kB 07:51:18 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) 07:51:18 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000b14200029bd7000fbdbdf2508000300040000000800010000000000080003000100000208003f000200000008003f000000000008003f0004000000080003000100000008000100010000000800010002000000c864e62fa82e7d8be5ac0f2a508fdaabf5450e7ae5c2ccca995ed84df4d7a0139c11fd7bc08a647119ca6eba07d29f9c3eac2a7aeb72df72447af2708e241348f25825d8f607e025554c2363516139873751a1a8eaec0bd17047ffc9157c97eb57b74161600393c42cff8d4cd5d39675fe79deecf408e332510abb1e9834c2207f807fe283fe05f01170308f5758"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000001000)=""/4096) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1935.035687] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1935.223097] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1935.251979] CPU: 0 PID: 27526 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1935.259906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.269287] Call Trace: [ 1935.271883] dump_stack+0x13e/0x194 [ 1935.275509] dump_header+0x178/0x6d4 [ 1935.279216] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1935.284228] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1935.289337] ? ___ratelimit+0x50/0x519 [ 1935.293224] oom_kill_process.cold+0x10/0xae3 [ 1935.297721] ? lock_acquire+0x170/0x3f0 [ 1935.301692] ? lock_downgrade+0x6e0/0x6e0 [ 1935.305839] out_of_memory+0x2d5/0x1110 [ 1935.309813] ? oom_killer_disable+0x1c0/0x1c0 [ 1935.314311] ? mutex_trylock+0x152/0x1a0 [ 1935.318368] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1935.323216] ? warn_alloc+0xf0/0xf0 [ 1935.326850] __alloc_pages_nodemask+0x5d3/0x700 [ 1935.331513] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1935.336538] ? lock_downgrade+0x6e0/0x6e0 [ 1935.340702] alloc_pages_current+0xe7/0x1e0 [ 1935.345030] __page_cache_alloc+0x245/0x3d0 [ 1935.349362] filemap_fault+0xc18/0x1c50 [ 1935.353360] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1935.358026] ? lock_acquire+0x170/0x3f0 [ 1935.361995] ? ext4_filemap_fault+0x7c/0xb0 [ 1935.366321] ext4_filemap_fault+0x84/0xb0 [ 1935.370464] __do_fault+0xfa/0x380 [ 1935.373999] __handle_mm_fault+0x22e9/0x3280 [ 1935.378410] ? copy_page_range+0x1d70/0x1d70 [ 1935.382822] ? find_held_lock+0x2d/0x110 [ 1935.386897] handle_mm_fault+0x288/0x7a0 [ 1935.390968] __get_user_pages+0x44d/0x11e0 [ 1935.395221] ? follow_page_mask+0x1580/0x1580 [ 1935.399735] ? lock_acquire+0x170/0x3f0 [ 1935.403714] ? __mm_populate+0x1e3/0x2c0 [ 1935.407770] populate_vma_page_range+0x17b/0x210 [ 1935.412529] __mm_populate+0x195/0x2c0 [ 1935.416420] ? populate_vma_page_range+0x210/0x210 [ 1935.421353] ? security_capable+0x88/0xb0 [ 1935.425501] SyS_mlockall+0x3f5/0x520 [ 1935.429302] ? SyS_munlock+0xf0/0xf0 [ 1935.433018] do_syscall_64+0x1d5/0x640 [ 1935.436941] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1935.442134] RIP: 0033:0x45ca29 [ 1935.445320] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1935.453032] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1935.460305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1935.467576] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1935.474849] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1935.482122] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 1935.499000] Mem-Info: [ 1935.501807] active_anon:203834 inactive_anon:1095455 isolated_anon:0 [ 1935.501807] active_file:32 inactive_file:24 isolated_file:19 [ 1935.501807] unevictable:43085 dirty:0 writeback:0 unstable:0 [ 1935.501807] slab_reclaimable:18806 slab_unreclaimable:114419 [ 1935.501807] mapped:65592 shmem:12406 pagetables:18329 bounce:0 [ 1935.501807] free:27865 free_pcp:579 free_cma:0 [ 1935.551364] Node 0 active_anon:744684kB inactive_anon:1021084kB active_file:100kB inactive_file:496kB unevictable:111360kB isolated(anon):0kB isolated(file):0kB mapped:228660kB dirty:0kB writeback:0kB shmem:29092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1935.594513] Node 1 active_anon:70652kB inactive_anon:3360736kB active_file:192kB inactive_file:468kB unevictable:60980kB isolated(anon):0kB isolated(file):76kB mapped:34208kB dirty:0kB writeback:0kB shmem:20532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:51:19 executing program 4: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2c, 0x0, 0x3, 0x2, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0xb1, &(0x7f0000000380)="89d292599822e7b8d11aa65f20e18e778bfb89530c8167cb57aeae6263656188575478ad2d11ed53f127ce22e4b26e3a45b4ad0be13ca6ea66a121f23357cecde874bb8b22dc482390d9c7c06b46dfce1d4158f128319be4e8f0b346ccbe8bf45c8e058b214c6ca97d98331ea1f3231b669904bce4967c95f66af53ec2d83fc6fec7af437ee5ae74d5b2c74e18106a330c32562222afe30f079bd8efe082682a14a88c4d3c041f2e6d7b738a5e435fc183", 0xf, 0x0, &(0x7f0000000180)="53d9ebdedefaae601d49f96426c62d"}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1935.731304] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5092kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1935.899221] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1935.979020] Node 0 DMA32 free:35752kB min:36272kB low:45340kB high:54408kB active_anon:744692kB inactive_anon:1015880kB active_file:8kB inactive_file:12kB unevictable:111432kB writepending:0kB present:3129332kB managed:2621260kB mlocked:111432kB kernel_stack:12352kB pagetables:28388kB bounce:0kB free_pcp:224kB local_pcp:44kB free_cma:0kB [ 1936.265944] lowmem_reserve[]: 0 0 0 0 0 [ 1936.300074] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.348881] lowmem_reserve[]: 0 0 0 0 0 [ 1936.352991] Node 1 Normal free:54744kB min:53612kB low:67012kB high:80412kB active_anon:70628kB inactive_anon:3360628kB active_file:3304kB inactive_file:3576kB unevictable:65228kB writepending:0kB present:3932160kB managed:3870192kB mlocked:65292kB kernel_stack:14624kB pagetables:44736kB bounce:0kB free_pcp:852kB local_pcp:700kB free_cma:0kB [ 1936.391305] lowmem_reserve[]: 0 0 0 0 0 [ 1936.395462] Node 0 DMA: 6*4kB (UME) 7*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1936.412231] Node 0 DMA32: 35*4kB (UM) 382*8kB (UM) 848*16kB (UE) 595*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35804kB [ 1936.426772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1936.439198] Node 1 Normal: 69*4kB (UME) 46*8kB (ME) 83*16kB (ME) 95*32kB (UME) 86*64kB (ME) 64*128kB (UME) 34*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 54036kB [ 1936.496274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.566590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1936.584421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.594125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1936.608054] 19935 total pagecache pages [ 1936.612716] 0 pages in swap cache [ 1936.616181] Swap cache stats: add 0, delete 0, find 0/0 [ 1936.624804] Free swap = 0kB [ 1936.627923] Total swap = 0kB [ 1936.630996] 1965979 pages RAM [ 1936.634098] 0 pages HighMem/MovableOnly [ 1936.639771] 339053 pages reserved [ 1936.643312] 0 pages cma reserved [ 1936.649253] Out of memory: Kill process 27524 (syz-executor.2) score 1008 or sacrifice child [ 1936.659425] Killed process 27526 (syz-executor.2) total-vm:75104kB, anon-rss:18036kB, file-rss:43372kB, shmem-rss:0kB [ 1937.435047] syz-executor.5 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 1937.488661] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1937.493967] CPU: 0 PID: 27538 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1937.501863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1937.511217] Call Trace: [ 1937.513819] dump_stack+0x13e/0x194 [ 1937.517447] dump_header+0x178/0x6d4 [ 1937.521155] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1937.526169] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1937.531272] ? ___ratelimit+0x50/0x519 [ 1937.535159] oom_kill_process.cold+0x10/0xae3 [ 1937.539672] ? lock_acquire+0x170/0x3f0 [ 1937.543643] ? lock_downgrade+0x6e0/0x6e0 [ 1937.547792] out_of_memory+0x2d5/0x1110 [ 1937.551768] ? oom_killer_disable+0x1c0/0x1c0 [ 1937.556262] ? mutex_trylock+0x152/0x1a0 [ 1937.560323] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1937.565178] ? warn_alloc+0xf0/0xf0 [ 1937.568814] __alloc_pages_nodemask+0x5d3/0x700 [ 1937.573482] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1937.578516] alloc_pages_vma+0xc2/0x4a0 [ 1937.582492] wp_page_copy+0x1f1/0x1300 [ 1937.586386] ? follow_pfn+0x200/0x200 [ 1937.590188] do_wp_page+0x244/0x11d0 [ 1937.593899] ? finish_mkwrite_fault+0x640/0x640 [ 1937.598569] __handle_mm_fault+0x1c0e/0x3280 [ 1937.602975] ? copy_page_range+0x1d70/0x1d70 [ 1937.607385] ? find_held_lock+0x2d/0x110 [ 1937.611460] handle_mm_fault+0x288/0x7a0 [ 1937.615552] __get_user_pages+0x44d/0x11e0 [ 1937.621615] ? follow_page_mask+0x1580/0x1580 [ 1937.626121] ? memset+0x20/0x40 [ 1937.629402] populate_vma_page_range+0x17b/0x210 [ 1937.634161] __mm_populate+0x195/0x2c0 [ 1937.638047] ? populate_vma_page_range+0x210/0x210 [ 1937.642972] ? security_capable+0x88/0xb0 [ 1937.647123] SyS_mlockall+0x3f5/0x520 [ 1937.650920] ? SyS_munlock+0xf0/0xf0 [ 1937.654634] do_syscall_64+0x1d5/0x640 [ 1937.658528] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1937.663714] RIP: 0033:0x45ca29 [ 1937.666896] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1937.674613] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1937.681879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1937.689152] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1937.696513] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1937.703774] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 07:51:22 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0xffffff77) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:22 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:22 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60900686cca801dc846c1527af793ac0300000000000200000002000000004000007a4000008000000000000000", 0x3a, 0x400}], 0x1006071, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000600", @ANYRES16=r3, @ANYBLOB="0103000000000000000004000000"], 0x14}, 0x1, 0xec0}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x20000, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x8882, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000640)={0x2, 0xc, 0x4, 0x800, 0x9, {}, {0x4, 0x0, 0x3, 0x6, 0x8, 0xff, "46d2dcab"}, 0x8, 0x1, @planes=&(0x7f00000005c0)={0x2, 0x0, @fd, 0x401}, 0x7c}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x1315, 0xffff, 0x4, 0x0, 0x6, 0x1000, 0x431, 0x25, r7}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000004c0)=r7, 0x4) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000440)={0x1, 0x4, 0x1000}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 07:51:22 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/470], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:22 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/ip_tables_matches\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x80) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getegid() sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)={0x3, 'veth1_macvtap\x00', {0x7}, 0xea7e}) [ 1938.320823] print_req_error: I/O error, dev loop1, sector 0 [ 1938.551461] Mem-Info: [ 1938.558068] active_anon:203957 inactive_anon:1095458 isolated_anon:0 [ 1938.558068] active_file:31 inactive_file:0 isolated_file:0 [ 1938.558068] unevictable:46175 dirty:0 writeback:0 unstable:0 [ 1938.558068] slab_reclaimable:19137 slab_unreclaimable:113664 [ 1938.558068] mapped:68931 shmem:12406 pagetables:18300 bounce:0 [ 1938.558068] free:25372 free_pcp:255 free_cma:0 [ 1938.729500] Node 0 active_anon:744932kB inactive_anon:1021072kB active_file:80kB inactive_file:0kB unevictable:109708kB isolated(anon):0kB isolated(file):0kB mapped:232288kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1938.901269] Node 1 active_anon:70868kB inactive_anon:3360700kB active_file:60kB inactive_file:0kB unevictable:77440kB isolated(anon):0kB isolated(file):0kB mapped:43388kB dirty:40kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1939.088467] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1939.296042] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1939.337506] Node 0 DMA32 free:36188kB min:36272kB low:45340kB high:54408kB active_anon:744868kB inactive_anon:1015868kB active_file:4kB inactive_file:0kB unevictable:109812kB writepending:0kB present:3129332kB managed:2621260kB mlocked:109812kB kernel_stack:12320kB pagetables:28380kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1939.420133] lowmem_reserve[]: 0 0 0 0 0 [ 1939.424200] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1939.462174] lowmem_reserve[]: 0 0 0 0 0 [ 1939.466205] Node 1 Normal free:52940kB min:53612kB low:67012kB high:80412kB active_anon:70840kB inactive_anon:3360636kB active_file:0kB inactive_file:48kB unevictable:77556kB writepending:0kB present:3932160kB managed:3870192kB mlocked:77556kB kernel_stack:14688kB pagetables:44980kB bounce:0kB free_pcp:340kB local_pcp:236kB free_cma:0kB [ 1939.502407] lowmem_reserve[]: 0 0 0 0 0 [ 1939.506431] Node 0 DMA: 6*4kB (UME) 7*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1939.529385] Node 0 DMA32: 159*4kB (UM) 392*8kB (UME) 853*16kB (UE) 589*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36268kB [ 1939.550051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1939.567885] Node 1 Normal: 87*4kB (UM) 40*8kB (UE) 5*16kB (UME) 127*32kB (UME) 46*64kB (UME) 67*128kB (UME) 39*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 52940kB [ 1939.594417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.608049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.626073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.637453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.653573] 21947 total pagecache pages [ 1939.657747] 0 pages in swap cache [ 1939.666224] Swap cache stats: add 0, delete 0, find 0/0 [ 1939.676686] Free swap = 0kB [ 1939.684680] Total swap = 0kB [ 1939.687839] 1965979 pages RAM [ 1939.696023] 0 pages HighMem/MovableOnly [ 1939.704969] 339053 pages reserved [ 1939.708594] 0 pages cma reserved [ 1939.717123] Out of memory: Kill process 27537 (syz-executor.5) score 1010 or sacrifice child [ 1939.736544] Killed process 27538 (syz-executor.5) total-vm:75104kB, anon-rss:18384kB, file-rss:56564kB, shmem-rss:0kB [ 1939.770319] oom_reaper: reaped process 27538 (syz-executor.5), now anon-rss:18384kB, file-rss:21740kB, shmem-rss:0kB [ 1939.798226] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1939.895261] systemd-journal cpuset=/ mems_allowed=0-1 [ 1939.922927] CPU: 1 PID: 3636 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1939.930868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.940220] Call Trace: [ 1939.942811] dump_stack+0x13e/0x194 [ 1939.946443] dump_header+0x178/0x6d4 [ 1939.950188] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1939.955220] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1939.960322] ? ___ratelimit+0x50/0x519 [ 1939.964215] oom_kill_process.cold+0x10/0xae3 [ 1939.968711] ? lock_acquire+0x170/0x3f0 [ 1939.972686] ? lock_downgrade+0x6e0/0x6e0 [ 1939.976839] out_of_memory+0x2d5/0x1110 [ 1939.980818] ? oom_killer_disable+0x1c0/0x1c0 [ 1939.985309] ? mutex_trylock+0x152/0x1a0 [ 1939.989368] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1939.994242] ? warn_alloc+0xf0/0xf0 [ 1939.997875] __alloc_pages_nodemask+0x5d3/0x700 [ 1940.002552] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1940.007578] ? lock_downgrade+0x6e0/0x6e0 [ 1940.011737] alloc_pages_current+0xe7/0x1e0 [ 1940.016060] __page_cache_alloc+0x245/0x3d0 [ 1940.020403] filemap_fault+0xc18/0x1c50 [ 1940.024389] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1940.029063] ? lock_acquire+0x170/0x3f0 [ 1940.033039] ? ext4_filemap_fault+0x7c/0xb0 [ 1940.037372] ext4_filemap_fault+0x84/0xb0 [ 1940.041540] __do_fault+0xfa/0x380 [ 1940.045082] __handle_mm_fault+0x22e9/0x3280 [ 1940.049489] ? copy_page_range+0x1d70/0x1d70 [ 1940.053913] ? find_held_lock+0x2d/0x110 [ 1940.058219] handle_mm_fault+0x288/0x7a0 [ 1940.062283] __do_page_fault+0x4bc/0xb40 [ 1940.066347] ? vmalloc_fault+0xdf0/0xdf0 [ 1940.070404] ? do_page_fault+0x60/0x4f2 [ 1940.074373] ? page_fault+0x2f/0x50 [ 1940.078000] page_fault+0x45/0x50 [ 1940.081450] RIP: 0001:0xffffffffffffffff [ 1940.085517] RSP: 11488200:00007fffd0f91e50 EFLAGS: 7fffd0f91c60 [ 1940.948571] Mem-Info: [ 1940.965908] active_anon:203887 inactive_anon:1095396 isolated_anon:0 [ 1940.965908] active_file:112 inactive_file:76 isolated_file:32 [ 1940.965908] unevictable:47483 dirty:0 writeback:0 unstable:0 [ 1940.965908] slab_reclaimable:19175 slab_unreclaimable:113001 [ 1940.965908] mapped:66734 shmem:12407 pagetables:18297 bounce:0 [ 1940.965908] free:24900 free_pcp:98 free_cma:0 [ 1941.005044] Node 0 active_anon:744832kB inactive_anon:1020944kB active_file:36kB inactive_file:0kB unevictable:111804kB isolated(anon):0kB isolated(file):36kB mapped:229704kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1941.038043] Node 1 active_anon:70716kB inactive_anon:3360640kB active_file:44kB inactive_file:32kB unevictable:78128kB isolated(anon):0kB isolated(file):0kB mapped:36732kB dirty:0kB writeback:0kB shmem:20548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1941.066513] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1941.107382] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1941.123539] Node 0 DMA32 free:36072kB min:36272kB low:45340kB high:54408kB active_anon:744772kB inactive_anon:1015868kB active_file:32kB inactive_file:104kB unevictable:111792kB writepending:0kB present:3129332kB managed:2621260kB mlocked:111792kB kernel_stack:12320kB pagetables:28404kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1941.289508] lowmem_reserve[]: 0 0 0 0 0 07:51:25 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200)=0x5) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1941.350811] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1941.446397] lowmem_reserve[]: 0 0 0 0 0 07:51:25 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0542c7b344c081958e0922c0eac1cc4839ce86d0ce54683b68ba3f029c49439fb185a31fde3f528fb4ed4744d6ee6498afd1d0df77da7179b214a1", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r4, 0x601, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x58, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendto$rxrpc(r0, &(0x7f0000000380)="70308a0af0bf8ac8546566c32c1f4272817858a0aae16572df24c5a361544bdb405144c4734589bdaf19e8862051db2cf6abceac893f103a99ff3e5fda045c862877906ca5e2eed830a09cda4c7e3a35bdcc9cbc8bb8c59976a3f5b18bf20e59da82f5192c5138b940855edc55438c87448246d805de3b", 0x77, 0x20000000, &(0x7f0000000400)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x80000000, @private2={0xfc, 0x2, [], 0x7f}, 0xffff}}, 0x24) 07:51:25 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1941.489638] Node 1 Normal free:75028kB min:53612kB low:67012kB high:80412kB active_anon:70716kB inactive_anon:3369712kB active_file:11816kB inactive_file:12136kB unevictable:21704kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21100kB kernel_stack:14464kB pagetables:44776kB bounce:0kB free_pcp:784kB local_pcp:164kB free_cma:0kB 07:51:25 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) 07:51:25 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/470], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1941.670305] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1941.704325] lowmem_reserve[]: 0 0 0 0 0 [ 1941.724560] Node 0 DMA: 6*4kB (UME) 10*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10456kB [ 1941.807269] Node 0 DMA32: 180*4kB (U) 504*8kB (UE) 866*16kB (UE) 587*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37392kB [ 1941.859263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1941.927569] Node 1 Normal: 16*4kB (ME) 454*8kB (UME) 143*16kB (UM) 156*32kB (UME) 37*64kB (UE) 54*128kB (UME) 39*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 56864kB 07:51:26 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1942.070342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1942.121409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1942.165170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1942.177413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1942.186463] 17445 total pagecache pages [ 1942.191173] 0 pages in swap cache [ 1942.194732] Swap cache stats: add 0, delete 0, find 0/0 [ 1942.201954] Free swap = 0kB [ 1942.205043] Total swap = 0kB [ 1942.208112] 1965979 pages RAM [ 1942.212791] 0 pages HighMem/MovableOnly [ 1942.216822] 339053 pages reserved [ 1942.223381] 0 pages cma reserved [ 1942.226833] Out of memory: Kill process 14650 (syz-executor.1) score 1007 or sacrifice child [ 1942.237220] Killed process 14650 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1942.928238] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1942.978612] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1943.028125] CPU: 1 PID: 27584 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1943.036060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1943.045410] Call Trace: [ 1943.048000] dump_stack+0x13e/0x194 [ 1943.051626] dump_header+0x178/0x6d4 [ 1943.055335] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1943.060343] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1943.065587] ? ___ratelimit+0x50/0x519 [ 1943.069523] oom_kill_process.cold+0x10/0xae3 [ 1943.074007] ? lock_downgrade+0x6e0/0x6e0 [ 1943.078137] out_of_memory+0x2d5/0x1110 [ 1943.082094] ? oom_killer_disable+0x1c0/0x1c0 [ 1943.086579] ? mutex_trylock+0x152/0x1a0 [ 1943.090627] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1943.095461] ? warn_alloc+0xf0/0xf0 [ 1943.099081] __alloc_pages_nodemask+0x5d3/0x700 [ 1943.103728] ? __anon_vma_prepare+0x172/0x370 [ 1943.108209] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1943.113208] ? anon_vma_interval_tree_insert+0x211/0x3e0 [ 1943.118646] alloc_pages_vma+0xc2/0x4a0 [ 1943.122613] __handle_mm_fault+0x17b6/0x3280 [ 1943.127012] ? copy_page_range+0x1d70/0x1d70 [ 1943.131414] ? find_held_lock+0x2d/0x110 [ 1943.135458] handle_mm_fault+0x288/0x7a0 [ 1943.139498] __do_page_fault+0x4bc/0xb40 [ 1943.143547] ? vmalloc_fault+0xdf0/0xdf0 [ 1943.147582] ? do_page_fault+0x60/0x4f2 [ 1943.151546] ? page_fault+0x2f/0x50 [ 1943.155161] page_fault+0x45/0x50 [ 1943.158595] RIP: ee3aa700:0x78a [ 1943.161859] RSP: 20000:00007fff55de2ae0 EFLAGS: 7fff55de2be0 [ 1943.174685] Mem-Info: [ 1943.185341] active_anon:203932 inactive_anon:1090876 isolated_anon:0 [ 1943.185341] active_file:47 inactive_file:0 isolated_file:0 [ 1943.185341] unevictable:51922 dirty:0 writeback:0 unstable:0 [ 1943.185341] slab_reclaimable:19074 slab_unreclaimable:113227 [ 1943.185341] mapped:68069 shmem:12406 pagetables:18412 bounce:0 [ 1943.185341] free:25001 free_pcp:0 free_cma:0 [ 1943.229548] Node 0 active_anon:744896kB inactive_anon:1020944kB active_file:60kB inactive_file:0kB unevictable:107808kB isolated(anon):0kB isolated(file):0kB mapped:227196kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1943.268151] Node 1 active_anon:70832kB inactive_anon:3342560kB active_file:140kB inactive_file:0kB unevictable:99880kB isolated(anon):0kB isolated(file):0kB mapped:45080kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1943.306912] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.354370] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1943.361936] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:744836kB inactive_anon:1015868kB active_file:56kB inactive_file:28kB unevictable:107688kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107684kB kernel_stack:12384kB pagetables:28376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.399641] lowmem_reserve[]: 0 0 0 0 0 [ 1943.403669] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.434489] lowmem_reserve[]: 0 0 0 0 0 [ 1943.438585] Node 1 Normal free:53344kB min:53612kB low:67012kB high:80412kB active_anon:70832kB inactive_anon:3342560kB active_file:24kB inactive_file:68kB unevictable:99880kB writepending:0kB present:3932160kB managed:3870192kB mlocked:99880kB kernel_stack:14976kB pagetables:45264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.473668] lowmem_reserve[]: 0 0 0 0 0 [ 1943.477763] Node 0 DMA: 3*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1943.505255] Node 0 DMA32: 4*4kB (UM) 414*8kB (UM) 869*16kB (UE) 586*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35984kB [ 1943.533915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1943.564263] Node 1 Normal: 34*4kB (UE) 189*8kB (UME) 183*16kB (U) 132*32kB (UME) 38*64kB (UME) 37*128kB (UME) 42*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 53344kB [ 1943.598886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1943.607973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.662313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1943.677760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.735813] 21140 total pagecache pages [ 1943.742661] 0 pages in swap cache [ 1943.746337] Swap cache stats: add 0, delete 0, find 0/0 [ 1943.779055] Free swap = 0kB [ 1943.823298] Total swap = 0kB [ 1943.826629] 1965979 pages RAM [ 1943.832595] 0 pages HighMem/MovableOnly [ 1943.836688] 339053 pages reserved [ 1943.852985] 0 pages cma reserved [ 1943.856379] Out of memory: Kill process 27587 (syz-executor.4) score 1008 or sacrifice child [ 1943.877557] Killed process 27587 (syz-executor.4) total-vm:74972kB, anon-rss:18012kB, file-rss:42348kB, shmem-rss:0kB [ 1944.103800] EXT4-fs (loop1): unsupported inode size: 31091 [ 1944.126146] EXT4-fs (loop1): blocksize: 4096 07:51:28 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='loginuid\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='wchan\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f7365300000fff1000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000747d94f9eb4cef83d5ea2981570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9f790eeb0a3db44222dc883de2cb9c20dd88adca62d2e03e634e4903b7799318b1226597bef45df9fcdca358069af6c9556f1ae307388fd5e0736993f623ecd3420ca69d692c179d8ee1bbb1376994a67c2c0940a06df9858cb"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x400002, 0x0) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000200)) 07:51:29 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:29 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0xcd, 0x21250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x1, &(0x7f0000000240)=[{&(0x7f0000000380)="2aff7c728003b0e6345724f9956bcc45a66076fc2c0c08078a7c66084cd79fd3ea0b437cc1dff923c58035e601d8fdc73bed25b86b92cab59821c77aa6cd7537a3511e701b7e7d", 0x47, 0x2}], 0x40, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000180)={0x0, 0x7f, 0x4}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) 07:51:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="054e38", @ANYRES32=r1, @ANYBLOB="6ffe000000300000000003000000580001800d0001007564"], 0x3}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_to_batadv\x00', &(0x7f0000000140)=@ethtool_cmd={0x70, 0x6, 0x5, 0xff, 0x3, 0x4, 0x1, 0x80, 0x80, 0x40, 0x3, 0xfffff800, 0x6, 0x0, 0x2c, 0xff, [0x10000, 0x4]}}) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x4, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000400)=0x9, 0x4) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) r5 = msgget$private(0x0, 0x20) msgsnd(r5, &(0x7f0000000340)={0x3, "26d899cafeb1c2992fde26bb925187b6dbb3231be7c7c669d50867dc4e436021cce6d551ce1f384ba045704d33e133f19634a9580e9e3206e0c96dc3d370e2dceb186b2c3a7eb1ba1f3738038ebf38cf4150f307700b457e43572617debd2c166aafa6526766e9a1f9e39794b19ee3320b10aa4ffc1b7cae50c466c96496d856afa9135648df484baa56be8950c28097ff84b7ca795c"}, 0x9e, 0x0) 07:51:29 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/470], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1945.107687] EXT4-fs (loop1): bad geometry: block count 3298534884408 exceeds size of device (33024 blocks) [ 1946.008991] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1946.028260] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1946.045258] CPU: 0 PID: 3642 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1946.053007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1946.062510] Call Trace: [ 1946.065306] dump_stack+0x13e/0x194 [ 1946.068925] dump_header+0x178/0x6d4 [ 1946.072651] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1946.077825] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1946.082942] ? ___ratelimit+0x50/0x519 [ 1946.086825] oom_kill_process.cold+0x10/0xae3 [ 1946.091315] ? lock_downgrade+0x6e0/0x6e0 [ 1946.095463] out_of_memory+0x2d5/0x1110 [ 1946.099441] ? oom_killer_disable+0x1c0/0x1c0 [ 1946.103930] ? mutex_trylock+0x152/0x1a0 [ 1946.107985] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1946.112835] ? warn_alloc+0xf0/0xf0 [ 1946.116469] __alloc_pages_nodemask+0x5d3/0x700 [ 1946.121143] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1946.126158] ? lock_downgrade+0x6e0/0x6e0 [ 1946.130307] alloc_pages_current+0xe7/0x1e0 [ 1946.134624] __page_cache_alloc+0x245/0x3d0 [ 1946.138934] filemap_fault+0xc18/0x1c50 [ 1946.142912] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1946.147581] ? lock_acquire+0x170/0x3f0 [ 1946.151546] ? ext4_filemap_fault+0x7c/0xb0 [ 1946.155875] ext4_filemap_fault+0x84/0xb0 [ 1946.160020] __do_fault+0xfa/0x380 [ 1946.163553] __handle_mm_fault+0x22e9/0x3280 [ 1946.167984] ? copy_page_range+0x1d70/0x1d70 [ 1946.172391] ? find_held_lock+0x2d/0x110 [ 1946.176457] handle_mm_fault+0x288/0x7a0 [ 1946.180513] __do_page_fault+0x4bc/0xb40 [ 1946.184568] ? vmalloc_fault+0xdf0/0xdf0 [ 1946.188622] ? do_page_fault+0x60/0x4f2 [ 1946.192591] ? page_fault+0x2f/0x50 [ 1946.196209] page_fault+0x45/0x50 [ 1946.199654] RIP: 0000:0x55e425f22be0 [ 1946.203355] RSP: 25f22a40:000055e425f22a58 EFLAGS: 55e425f22f10 [ 1946.225879] Mem-Info: [ 1946.251760] active_anon:203475 inactive_anon:1090877 isolated_anon:0 [ 1946.251760] active_file:25 inactive_file:27 isolated_file:0 [ 1946.251760] unevictable:52550 dirty:0 writeback:27 unstable:0 [ 1946.251760] slab_reclaimable:19063 slab_unreclaimable:113373 [ 1946.251760] mapped:68876 shmem:12406 pagetables:18255 bounce:0 [ 1946.251760] free:24992 free_pcp:0 free_cma:0 [ 1946.303212] Node 0 active_anon:744916kB inactive_anon:1020944kB active_file:12kB inactive_file:72kB unevictable:107944kB isolated(anon):0kB isolated(file):0kB mapped:227868kB dirty:0kB writeback:28kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1946.347144] Node 1 active_anon:68984kB inactive_anon:3342564kB active_file:88kB inactive_file:36kB unevictable:102256kB isolated(anon):0kB isolated(file):0kB mapped:47636kB dirty:0kB writeback:80kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1946.387635] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.426592] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1946.434134] Node 0 DMA32 free:35960kB min:36272kB low:45340kB high:54408kB active_anon:744856kB inactive_anon:1015868kB active_file:0kB inactive_file:52kB unevictable:107944kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107944kB kernel_stack:12288kB pagetables:28320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.477075] lowmem_reserve[]: 0 0 0 0 0 [ 1946.497402] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.537642] lowmem_reserve[]: 0 0 0 0 0 [ 1946.546519] Node 1 Normal free:53604kB min:53612kB low:67012kB high:80412kB active_anon:68984kB inactive_anon:3342564kB active_file:92kB inactive_file:44kB unevictable:102256kB writepending:40kB present:3932160kB managed:3870192kB mlocked:102260kB kernel_stack:14720kB pagetables:44692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.588338] lowmem_reserve[]: 0 0 0 0 0 [ 1946.594823] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1946.623429] Node 0 DMA32: 29*4kB (UM) 385*8kB (UH) 884*16kB (UE) 584*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36092kB [ 1946.646943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1946.657722] Node 1 Normal: 289*4kB (UME) 42*8kB (UME) 27*16kB (UME) 204*32kB (UME) 50*64kB (UME) 35*128kB (UME) 42*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 53508kB [ 1946.686551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.695483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.713407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.727051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.745402] 21928 total pagecache pages [ 1946.752511] 0 pages in swap cache [ 1946.755989] Swap cache stats: add 0, delete 0, find 0/0 [ 1946.768316] Free swap = 0kB [ 1946.773990] Total swap = 0kB [ 1946.777053] 1965979 pages RAM [ 1946.787472] 0 pages HighMem/MovableOnly [ 1946.793943] 339053 pages reserved [ 1946.797533] 0 pages cma reserved [ 1946.808470] Out of memory: Kill process 27620 (syz-executor.4) score 1009 or sacrifice child [ 1946.826792] Killed process 27620 (syz-executor.4) total-vm:74972kB, anon-rss:18012kB, file-rss:46504kB, shmem-rss:0kB [ 1946.913604] oom_reaper: reaped process 27620 (syz-executor.4), now anon-rss:18024kB, file-rss:12976kB, shmem-rss:0kB [ 1946.968836] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1947.034209] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1947.046667] CPU: 1 PID: 27631 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1947.054583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1947.063944] Call Trace: [ 1947.066550] dump_stack+0x13e/0x194 [ 1947.070312] dump_header+0x178/0x6d4 [ 1947.074034] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1947.079061] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1947.084170] ? ___ratelimit+0x50/0x519 [ 1947.088082] oom_kill_process.cold+0x10/0xae3 [ 1947.092594] ? lock_downgrade+0x6e0/0x6e0 [ 1947.096763] out_of_memory+0x2d5/0x1110 [ 1947.100757] ? oom_killer_disable+0x1c0/0x1c0 [ 1947.105269] ? mutex_trylock+0x152/0x1a0 [ 1947.109348] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1947.114242] ? warn_alloc+0xf0/0xf0 [ 1947.117899] __alloc_pages_nodemask+0x5d3/0x700 [ 1947.122593] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1947.127657] ? lock_downgrade+0x6e0/0x6e0 [ 1947.131825] alloc_pages_current+0xe7/0x1e0 [ 1947.137046] __page_cache_alloc+0x245/0x3d0 [ 1947.141385] filemap_fault+0xc18/0x1c50 [ 1947.145383] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1947.150064] ? lock_acquire+0x170/0x3f0 [ 1947.154227] ? ext4_filemap_fault+0x7c/0xb0 [ 1947.158567] ext4_filemap_fault+0x84/0xb0 [ 1947.162732] __do_fault+0xfa/0x380 [ 1947.166289] __handle_mm_fault+0x22e9/0x3280 [ 1947.170734] ? copy_page_range+0x1d70/0x1d70 [ 1947.175161] ? find_held_lock+0x2d/0x110 [ 1947.179240] handle_mm_fault+0x288/0x7a0 [ 1947.183314] __get_user_pages+0x44d/0x11e0 [ 1947.187599] ? follow_page_mask+0x1580/0x1580 [ 1947.192114] ? lock_acquire+0x170/0x3f0 [ 1947.196109] ? __mm_populate+0x1e3/0x2c0 [ 1947.200186] populate_vma_page_range+0x17b/0x210 [ 1947.205067] __mm_populate+0x195/0x2c0 [ 1947.208982] ? populate_vma_page_range+0x210/0x210 [ 1947.213921] ? security_capable+0x88/0xb0 [ 1947.218085] SyS_mlockall+0x3f5/0x520 [ 1947.221892] ? SyS_munlock+0xf0/0xf0 [ 1947.225617] do_syscall_64+0x1d5/0x640 [ 1947.229521] entry_SYSCALL_64_after_hwframe+0x42/0xb7 07:51:31 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:31 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:31 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a59", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000140)) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @local}, {0x6, @local}, 0x8c, {0x2, 0x4e24, @private=0xa010102}, 'ip6gre0\x00'}) socket$kcm(0x29, 0x7, 0x0) [ 1947.234744] RIP: 0033:0x45ca29 [ 1947.237980] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1947.245700] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1947.252977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1947.260252] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1947.267528] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1947.274803] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 1947.308495] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1947.374394] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1947.423557] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1947.465344] EXT4-fs (loop1): failed to open journal device unknown-block(0,0): -6 [ 1947.514681] Mem-Info: [ 1947.517365] active_anon:203714 inactive_anon:1090877 isolated_anon:0 [ 1947.517365] active_file:128 inactive_file:90 isolated_file:0 [ 1947.517365] unevictable:50694 dirty:0 writeback:0 unstable:0 [ 1947.517365] slab_reclaimable:19059 slab_unreclaimable:113397 [ 1947.517365] mapped:71566 shmem:12406 pagetables:18191 bounce:0 [ 1947.517365] free:25600 free_pcp:446 free_cma:0 [ 1947.558411] Node 0 active_anon:745316kB inactive_anon:1020944kB active_file:44kB inactive_file:8kB unevictable:108448kB isolated(anon):0kB isolated(file):0kB mapped:231576kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.597477] Node 1 active_anon:69540kB inactive_anon:3342564kB active_file:1072kB inactive_file:1912kB unevictable:94328kB isolated(anon):0kB isolated(file):128kB mapped:56488kB dirty:100kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1947.646462] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.729062] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) [ 1947.754926] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1947.780447] Node 0 DMA32 free:36392kB min:36272kB low:45340kB high:54408kB active_anon:745256kB inactive_anon:1015868kB active_file:300kB inactive_file:180kB unevictable:109076kB writepending:0kB present:3129332kB managed:2621260kB mlocked:109060kB kernel_stack:12288kB pagetables:28320kB bounce:0kB free_pcp:812kB local_pcp:640kB free_cma:0kB [ 1947.906976] lowmem_reserve[]: 0 0 0 0 0 [ 1947.915828] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.946848] lowmem_reserve[]: 0 0 0 0 0 [ 1947.953355] Node 1 Normal free:53620kB min:53612kB low:67012kB high:80412kB active_anon:69480kB inactive_anon:3342624kB active_file:40kB inactive_file:88kB unevictable:99380kB writepending:36kB present:3932160kB managed:3870192kB mlocked:99380kB kernel_stack:14816kB pagetables:44824kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1947.990259] lowmem_reserve[]: 0 0 0 0 0 [ 1947.994282] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1948.205063] Node 0 DMA32: 12*4kB (U) 264*8kB (UMH) 955*16kB (UE) 585*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36160kB [ 1948.319718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1948.381016] Node 1 Normal: 170*4kB (UME) 183*8kB (UME) 88*16kB (UME) 173*32kB (UME) 56*64kB (UME) 30*128kB (UME) 42*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 53888kB [ 1948.469142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1948.478013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1948.598315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1948.669752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1948.678363] 25357 total pagecache pages [ 1948.782523] 0 pages in swap cache [ 1948.786020] Swap cache stats: add 0, delete 0, find 0/0 [ 1948.867990] Free swap = 0kB [ 1948.894386] Total swap = 0kB [ 1948.897438] 1965979 pages RAM [ 1948.944445] 0 pages HighMem/MovableOnly [ 1948.948451] 339053 pages reserved [ 1949.031885] 0 pages cma reserved [ 1949.035301] Out of memory: Kill process 27622 (syz-executor.5) score 1008 or sacrifice child 07:51:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f200000000000001000001000000f9e9728c33c57fdd"], 0x14}}, 0x4c000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3}}, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:51:33 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x3, {0x4, 0x4ac, 0x9, 0x9, 0x7, 0x3f}}) sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:33 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000180)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:51:33 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/486], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1949.468336] EXT4-fs (loop1): invalid first ino: 2356341241 [ 1950.645642] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1950.775636] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1950.805086] CPU: 0 PID: 27690 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1950.812935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.822294] Call Trace: [ 1950.824979] dump_stack+0x13e/0x194 [ 1950.828647] dump_header+0x178/0x6d4 [ 1950.832369] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1950.837397] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1950.842523] ? ___ratelimit+0x50/0x519 [ 1950.846420] oom_kill_process.cold+0x10/0xae3 [ 1950.850924] ? lock_acquire+0x170/0x3f0 [ 1950.854919] ? lock_downgrade+0x6e0/0x6e0 [ 1950.859080] out_of_memory+0x2d5/0x1110 [ 1950.863066] ? oom_killer_disable+0x1c0/0x1c0 [ 1950.867597] ? mutex_trylock+0x152/0x1a0 [ 1950.871671] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1950.876530] ? warn_alloc+0xf0/0xf0 [ 1950.880156] ? find_held_lock+0x2d/0x110 [ 1950.884335] ? fs_reclaim_acquire+0x10/0x10 [ 1950.888690] __alloc_pages_nodemask+0x5d3/0x700 [ 1950.893364] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1950.898394] cache_grow_begin+0x7b/0x410 [ 1950.902464] fallback_alloc+0x205/0x2b0 [ 1950.906454] kmem_cache_alloc+0x1ea/0x770 [ 1950.910634] ? trace_hardirqs_on+0x10/0x10 [ 1950.914881] getname_flags+0xc8/0x560 [ 1950.918688] ? __seccomp_filter+0xb9/0xda0 [ 1950.922939] user_path_at_empty+0x2a/0x50 [ 1950.927876] vfs_statx+0xd1/0x160 [ 1950.931338] ? vfs_statx_fd+0x90/0x90 [ 1950.935144] ? find_held_lock+0x2d/0x110 [ 1950.939227] ? task_work_run+0xf1/0x190 [ 1950.943287] SYSC_newstat+0x83/0xe0 [ 1950.946914] ? cp_new_stat+0x580/0x580 [ 1950.951069] ? __secure_computing+0xe5/0x3e0 [ 1950.955484] ? syscall_trace_enter+0x486/0xc20 [ 1950.960099] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1950.965149] ? syscall_get_arguments.part.0+0x10/0x10 [ 1950.970347] ? do_syscall_64+0x4c/0x640 [ 1950.974325] ? SyS_fstat+0x20/0x20 [ 1950.977863] do_syscall_64+0x1d5/0x640 [ 1950.981760] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1950.986953] RIP: 0033:0x7f189aed7295 [ 1950.990658] RSP: 002b:00007ffc16227df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1950.998463] RAX: ffffffffffffffda RBX: 000055e425f21210 RCX: 00007f189aed7295 [ 1951.005743] RDX: 00007ffc16228270 RSI: 00007ffc16228270 RDI: 00007ffc16227e70 [ 1951.013105] RBP: 000055e425357dfc R08: fffc000000000000 R09: 0000000000000000 [ 1951.020382] R10: 6f7a763de8c6ad56 R11: 0000000000000246 R12: 000055e425f2cee0 [ 1951.027650] R13: 00007ffc16228270 R14: 00007ffc16227e70 R15: 000055e425f188c0 [ 1951.089156] Mem-Info: [ 1951.091701] active_anon:204363 inactive_anon:1091298 isolated_anon:0 [ 1951.091701] active_file:46 inactive_file:32 isolated_file:0 [ 1951.091701] unevictable:51854 dirty:0 writeback:0 unstable:0 [ 1951.091701] slab_reclaimable:19130 slab_unreclaimable:112584 [ 1951.091701] mapped:69409 shmem:12407 pagetables:18276 bounce:0 [ 1951.091701] free:24913 free_pcp:0 free_cma:0 [ 1951.131935] Node 0 active_anon:745676kB inactive_anon:1021276kB active_file:0kB inactive_file:4kB unevictable:106812kB isolated(anon):0kB isolated(file):0kB mapped:229528kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1951.163398] Node 1 active_anon:71776kB inactive_anon:3343916kB active_file:84kB inactive_file:0kB unevictable:100700kB isolated(anon):0kB isolated(file):0kB mapped:47952kB dirty:4kB writeback:4kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1951.328683] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1951.355929] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1951.361436] Node 0 DMA32 free:36248kB min:36272kB low:45340kB high:54408kB active_anon:745616kB inactive_anon:1015900kB active_file:0kB inactive_file:8kB unevictable:106812kB writepending:0kB present:3129332kB managed:2621260kB mlocked:106812kB kernel_stack:12352kB pagetables:28328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1951.432156] lowmem_reserve[]: 0 0 0 0 0 [ 1951.506337] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1951.771369] lowmem_reserve[]: 0 0 0 0 0 [ 1951.804026] Node 1 Normal free:63976kB min:53612kB low:67012kB high:80412kB active_anon:71776kB inactive_anon:3347948kB active_file:2156kB inactive_file:11500kB unevictable:68912kB writepending:8kB present:3932160kB managed:3870192kB mlocked:68720kB kernel_stack:14592kB pagetables:44776kB bounce:0kB free_pcp:988kB local_pcp:304kB free_cma:0kB 07:51:35 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:35 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="054a38210a9b790f3b9f4227a88825b988a3bb91a229ae55f2dd905c79780a48853121c8a7ab7a942dda41eadcc55bda936e33218ef30902b67cbfc0c000f6ce72d500fb71554f4523b1603b7b7510ac00", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1952.064488] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1952.073467] lowmem_reserve[]: 0 0 0 0 0 [ 1952.112995] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1952.223225] Node 0 DMA32: 135*4kB (UM) 136*8kB (UME) 994*16kB (UE) 586*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36284kB [ 1952.245746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1952.262201] Node 1 Normal: 8*4kB (UE) 81*8kB (U) 423*16kB (UME) 163*32kB (UME) 48*64kB (UE) 13*128kB (UE) 35*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 52984kB [ 1952.283724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1952.293177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1952.306614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1952.375782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1952.453265] 24874 total pagecache pages [ 1952.496902] 0 pages in swap cache [ 1952.544483] Swap cache stats: add 0, delete 0, find 0/0 [ 1952.598878] Free swap = 0kB [ 1952.629793] Total swap = 0kB [ 1952.664980] 1965979 pages RAM [ 1952.696132] 0 pages HighMem/MovableOnly [ 1952.725971] 339053 pages reserved [ 1952.774958] 0 pages cma reserved [ 1952.795140] Out of memory: Kill process 27652 (syz-executor.4) score 1010 or sacrifice child [ 1953.027890] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1953.183038] systemd-journal cpuset=/ mems_allowed=0-1 [ 1953.188285] CPU: 1 PID: 3636 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1953.196338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.205695] Call Trace: [ 1953.208434] dump_stack+0x13e/0x194 [ 1953.212074] dump_header+0x178/0x6d4 [ 1953.215795] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1953.220829] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1953.225936] ? ___ratelimit+0x50/0x519 [ 1953.229828] oom_kill_process.cold+0x10/0xae3 [ 1953.234326] ? lock_acquire+0x170/0x3f0 [ 1953.238312] ? lock_downgrade+0x6e0/0x6e0 [ 1953.242649] out_of_memory+0x2d5/0x1110 [ 1953.246835] ? oom_killer_disable+0x1c0/0x1c0 [ 1953.251335] ? mutex_trylock+0x152/0x1a0 [ 1953.255404] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1953.260266] ? warn_alloc+0xf0/0xf0 [ 1953.263902] __alloc_pages_nodemask+0x5d3/0x700 [ 1953.268572] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1953.273591] ? lock_downgrade+0x6e0/0x6e0 [ 1953.277748] alloc_pages_current+0xe7/0x1e0 [ 1953.282073] __page_cache_alloc+0x245/0x3d0 [ 1953.286429] filemap_fault+0xc18/0x1c50 [ 1953.290418] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1953.295100] ? lock_acquire+0x170/0x3f0 [ 1953.299076] ? ext4_filemap_fault+0x7c/0xb0 [ 1953.303415] ext4_filemap_fault+0x84/0xb0 [ 1953.307569] __do_fault+0xfa/0x380 [ 1953.311108] __handle_mm_fault+0x22e9/0x3280 [ 1953.315528] ? copy_page_range+0x1d70/0x1d70 [ 1953.319939] ? find_held_lock+0x2d/0x110 [ 1953.324010] handle_mm_fault+0x288/0x7a0 [ 1953.328073] __do_page_fault+0x4bc/0xb40 [ 1953.332402] ? vmalloc_fault+0xdf0/0xdf0 [ 1953.336480] ? do_page_fault+0x60/0x4f2 [ 1953.340658] ? page_fault+0x2f/0x50 [ 1953.344308] page_fault+0x45/0x50 [ 1953.347784] RIP: 0001:0x7fffd0f91c6c 07:51:38 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) set_robust_list(&(0x7f00000001c0)={0x0, 0x7fffffff, &(0x7f0000000140)={&(0x7f00000000c0)}}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4807, 0x0) 07:51:38 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:38 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/486], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1953.351492] RSP: 114887a0:0000000000000001 EFLAGS: 5627114887a0 [ 1954.311816] EXT4-fs (loop1): Can't read superblock on 2nd try [ 1954.376462] Mem-Info: [ 1954.391783] active_anon:204747 inactive_anon:1090993 isolated_anon:0 [ 1954.391783] active_file:7568 inactive_file:3221 isolated_file:0 [ 1954.391783] unevictable:33840 dirty:0 writeback:0 unstable:0 [ 1954.391783] slab_reclaimable:19208 slab_unreclaimable:111774 [ 1954.391783] mapped:65902 shmem:12406 pagetables:18273 bounce:0 [ 1954.391783] free:32717 free_pcp:494 free_cma:0 07:51:38 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ubi_ctrl\x00', 0xd1601, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x48004, 0x0, 0x0, 0xf, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x354, 0x29, 0x100, 0x70bd26, 0x25dfdbfb, {0x19}, [@generic="8d7757f220b3cfa8a6a23987e1bc910e369148778ce18f7a60aa31e5fad32187eb413030730f66c19ec618b97d5cc5ff09abc1817acabefb4e91ed03ee1d2452b6ce1edc9999f457baf1a07606a6da1f4f6dfb602bcf9fae592c903ec40d9f15a19092e9a4168e699502f13e64c3d29de4ffc1d577620cee53f6febdc75cdb47bfb2144aa2d98107bbf7e54b4c9800d4423ba260d0fd287842358b643d07b2da97bcd5164583f92d6a962cb08d362fa50f3da1fa964769711cab4244b78f9f16a87b0f3f58a50599688e44e1013eb2844be6aa5c", @typed={0x8, 0x4b, 0x0, 0x0, @uid=r4}, @nested={0xed, 0x79, 0x0, 0x1, [@generic="ecfbcd0b5323a425e6199df2228a7e672817cc3cca60e4e27f4ecdc1c1ee1826299297e963a60d2263069d6fe89ed94dfbc8cf9ae546c3f780a5a1132d592a0720938bdefc20d4754d5c1a68a4ffb948d5e4709208efaf46ea9c91b043a5799336fcd924f2d02f8667317fdfd36be4120184222a78524343cd7d44d4d5c443c71a568483b6bd53587019b35c5f1c0fc031347cb9705370f9684db434894d6767a342fdac3b6b3a255dbda36de1b8c97f104a9854b7dc76990119ecd297d5a790bd0c3a09d98212e3c210eb37025b16daf609351a78240f68e29071acb15e42d272326a0271", @typed={0x4, 0x1a}]}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x3}, @generic="16c124913ac1bec797e0a0e1486a4bd7f979d97fed5f0d65293c5686f9d646afd3a17b61ad31b452a33304b1770bf6a65b1e9544add02e6b1f2ee2ddbff3181965c55e8ac1c81a1647e1c83eb60978c7824f62976978fdf14e134f7dfb6a25185cb5da2c46ed25441d845cb5cf2fd2967286134019c9dd1e917496542e11dfe5154e5e875f9dd86955d87aa7156c037b06b3e2a0d40e499bbf468ce0710bb54f8e57349b8177f1de5e2045c62776b2b1bca251d7532349dbac986536cf508f92b1fd88f9ff65b9181da825e41cd0955f525dd81b0e8c1a1b553ce073a5f718b64f1bf457ac045c698d31", @typed={0x8, 0x61, 0x0, 0x0, @fd=r1}, @generic="1aa3c4163d6f65bf9ecf45604735e362be959b89ae44bf358dcc9a243e2b1c66e237016bcf44e2bd8b03a7dbbe7a90887a3a23525356122fcdbc6655eea63aaf3755ad76a78ec710df2ce41527f1cd3510e7b968ab0dab4b868ed36d39ec07af5753fb9b5200b78bae35b5c75233f6cfccc92ce7"]}, 0x354}, 0x1, 0x0, 0x0, 0x20040}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:51:38 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baad7c62caa1c8378d2ded37aa0ea259cab34da3df9330976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea024104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59f", 0xd1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010000000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000900", @ANYRES32=0x0, @ANYBLOB="040004000000000008000700", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000060000000000"], 0x7c, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1954.640590] Node 0 active_anon:746812kB inactive_anon:1021048kB active_file:96kB inactive_file:84kB unevictable:102960kB isolated(anon):0kB isolated(file):0kB mapped:226864kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1954.815708] Node 1 active_anon:72176kB inactive_anon:3342924kB active_file:4000kB inactive_file:3472kB unevictable:96700kB isolated(anon):0kB isolated(file):128kB mapped:60744kB dirty:100kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1954.939216] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1954.968423] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1954.984690] Node 0 DMA32 free:36152kB min:36272kB low:45340kB high:54408kB active_anon:746816kB inactive_anon:1015872kB active_file:8kB inactive_file:100kB unevictable:104204kB writepending:4kB present:3129332kB managed:2621260kB mlocked:104204kB kernel_stack:12288kB pagetables:28312kB bounce:0kB free_pcp:184kB local_pcp:120kB free_cma:0kB [ 1955.016776] lowmem_reserve[]: 0 0 0 0 0 [ 1955.020948] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1955.046554] lowmem_reserve[]: 0 0 0 0 0 [ 1955.050619] Node 1 Normal free:53128kB min:53612kB low:67012kB high:80412kB active_anon:72208kB inactive_anon:3342840kB active_file:240kB inactive_file:364kB unevictable:103900kB writepending:216kB present:3932160kB managed:3870192kB mlocked:103900kB kernel_stack:14816kB pagetables:45084kB bounce:0kB free_pcp:824kB local_pcp:704kB free_cma:0kB [ 1955.083330] lowmem_reserve[]: 0 0 0 0 0 [ 1955.087345] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1955.103304] Node 0 DMA32: 0*4kB 232*8kB (U) 981*16kB (UE) 582*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36176kB [ 1955.116281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1955.127157] Node 1 Normal: 68*4kB (UME) 57*8kB (UME) 393*16kB (UME) 223*32kB (UME) 54*64kB (UE) 13*128kB (UE) 29*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 53320kB [ 1955.144146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1955.153070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1955.161722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1955.170625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1955.179244] 24140 total pagecache pages [ 1955.183223] 0 pages in swap cache [ 1955.186672] Swap cache stats: add 0, delete 0, find 0/0 [ 1955.192160] Free swap = 0kB [ 1955.195344] Total swap = 0kB [ 1955.198364] 1965979 pages RAM [ 1955.202055] 0 pages HighMem/MovableOnly [ 1955.206018] 339053 pages reserved [ 1955.210174] 0 pages cma reserved [ 1955.213557] Out of memory: Kill process 27685 (syz-executor.2) score 1010 or sacrifice child [ 1955.738800] EXT4-fs (loop1): Can't read superblock on 2nd try [ 1956.273761] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1956.359560] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1956.364869] CPU: 1 PID: 27659 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 1956.372668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.382023] Call Trace: [ 1956.384619] dump_stack+0x13e/0x194 [ 1956.388262] dump_header+0x178/0x6d4 [ 1956.392001] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1956.397026] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1956.402139] ? ___ratelimit+0x50/0x519 [ 1956.406030] oom_kill_process.cold+0x10/0xae3 [ 1956.410533] ? lock_downgrade+0x6e0/0x6e0 [ 1956.414690] out_of_memory+0x2d5/0x1110 [ 1956.418677] ? oom_killer_disable+0x1c0/0x1c0 [ 1956.423519] ? mutex_trylock+0x152/0x1a0 [ 1956.427585] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1956.432443] ? warn_alloc+0xf0/0xf0 [ 1956.436083] __alloc_pages_nodemask+0x5d3/0x700 [ 1956.440757] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1956.445782] ? lock_downgrade+0x6e0/0x6e0 [ 1956.449941] alloc_pages_current+0xe7/0x1e0 [ 1956.454270] __page_cache_alloc+0x245/0x3d0 [ 1956.458597] filemap_fault+0xc18/0x1c50 [ 1956.462638] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1956.467400] ? lock_acquire+0x170/0x3f0 [ 1956.471379] ? ext4_filemap_fault+0x7c/0xb0 [ 1956.475733] ext4_filemap_fault+0x84/0xb0 [ 1956.479881] __do_fault+0xfa/0x380 [ 1956.483434] __handle_mm_fault+0x22e9/0x3280 [ 1956.487866] ? copy_page_range+0x1d70/0x1d70 [ 1956.492281] ? find_held_lock+0x2d/0x110 [ 1956.496358] handle_mm_fault+0x288/0x7a0 [ 1956.500422] __do_page_fault+0x4bc/0xb40 [ 1956.504489] ? vmalloc_fault+0xdf0/0xdf0 [ 1956.508547] ? do_page_fault+0x60/0x4f2 [ 1956.512693] ? page_fault+0x2f/0x50 [ 1956.516322] page_fault+0x45/0x50 [ 1956.519769] RIP: 0000: (null) 07:51:40 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:40 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/486], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="056c38", @ANYRES16, @ANYRES16=r1], 0x3}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x8000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x22e8277b8613e58e, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4807, 0x0) [ 1956.523661] RSP: 000f:00007ffc162271a8 EFLAGS: 00000000 [ 1956.966466] Mem-Info: [ 1956.974786] active_anon:204986 inactive_anon:1091113 isolated_anon:0 [ 1956.974786] active_file:1 inactive_file:27 isolated_file:7 [ 1956.974786] unevictable:52017 dirty:3 writeback:0 unstable:0 [ 1956.974786] slab_reclaimable:19227 slab_unreclaimable:111426 [ 1956.974786] mapped:72519 shmem:12407 pagetables:18418 bounce:0 [ 1956.974786] free:24946 free_pcp:0 free_cma:0 [ 1957.019218] Node 0 active_anon:746888kB inactive_anon:1020948kB active_file:12kB inactive_file:40kB unevictable:106372kB isolated(anon):0kB isolated(file):0kB mapped:229712kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.051759] Node 1 active_anon:73052kB inactive_anon:3343504kB active_file:36kB inactive_file:40kB unevictable:101780kB isolated(anon):0kB isolated(file):0kB mapped:60364kB dirty:44kB writeback:0kB shmem:20548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.069304] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1957.115124] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.317786] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1957.365831] Node 0 DMA32 free:36064kB min:36272kB low:45340kB high:54408kB active_anon:746828kB inactive_anon:1015872kB active_file:4kB inactive_file:20kB unevictable:106372kB writepending:0kB present:3129332kB managed:2621260kB mlocked:106372kB kernel_stack:12320kB pagetables:28328kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1957.541691] EXT4-fs (loop1): Can't read superblock on 2nd try [ 1957.592905] lowmem_reserve[]: 0 0 0 0 0 [ 1957.597073] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.637854] lowmem_reserve[]: 0 0 0 0 0 [ 1957.645619] Node 1 Normal free:52904kB min:53612kB low:67012kB high:80412kB active_anon:73032kB inactive_anon:3344152kB active_file:0kB inactive_file:4kB unevictable:102672kB writepending:0kB present:3932160kB managed:3870192kB mlocked:102672kB kernel_stack:15008kB pagetables:45216kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1957.691138] lowmem_reserve[]: 0 0 0 0 0 [ 1957.695191] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1957.727696] Node 0 DMA32: 30*4kB (UM) 230*8kB (UME) 980*16kB (UE) 578*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36136kB [ 1957.755958] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1957.766834] Node 1 Normal: 87*4kB (UM) 269*8kB (UM) 182*16kB (UM) 304*32kB (UME) 70*64kB (UME) 14*128kB (UME) 26*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 54692kB [ 1957.787636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1957.796592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1957.809306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1957.818168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1957.831012] 24594 total pagecache pages [ 1957.835016] 0 pages in swap cache [ 1957.851531] Swap cache stats: add 0, delete 0, find 0/0 [ 1957.856929] Free swap = 0kB [ 1957.861376] Total swap = 0kB [ 1957.864396] 1965979 pages RAM [ 1957.867487] 0 pages HighMem/MovableOnly [ 1957.915547] 339053 pages reserved [ 1957.947445] 0 pages cma reserved [ 1957.968967] Out of memory: Kill process 27723 (syz-executor.5) score 1010 or sacrifice child 07:51:42 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:42 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f00000004c0)) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x11, 0x4, "14750ae30e7904738b97e04e1b"}, @NL80211_KEY_SEQ={0xe, 0x4, "2d1d844339725cfdd966"}, @NL80211_KEY_SEQ={0x14, 0x4, "b8aab3698adc2ab4e3bf53676c1f524b"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "930580814a"}]}, 0x68}, 0x1, 0x0, 0x0, 0x6898e26be352cc68}, 0x4) select(0x40, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x5, 0x61f}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="800000840000000019000300e60100686cca8000000000000200000002000000004000007a4000008000000000000100bf68c657a599956d5ebe5a0000ffff53ef", 0x41, 0x400}], 0x2105813, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 07:51:42 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000180)="f59a696140c3444aa6be9fea4f4022530df2d48920df273a9894a32e4c0b706b4a1d33adde7f292acb398dec2bdfec957c1ca270e993d2ce3afed99d48e2a05b9025064c22e2e7824abccb6814c20b1446bda1357c943521f312c7f27da033688cff5296b5a79b23ebc8f9bdf81a0d67", 0x70) sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:51:42 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1959.347923] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1959.448602] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1959.489782] CPU: 0 PID: 6348 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1959.497609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.506962] Call Trace: [ 1959.509567] dump_stack+0x13e/0x194 [ 1959.513224] dump_header+0x178/0x6d4 [ 1959.516936] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1959.521950] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1959.527054] ? ___ratelimit+0x50/0x519 [ 1959.531120] oom_kill_process.cold+0x10/0xae3 [ 1959.535620] ? lock_downgrade+0x6e0/0x6e0 [ 1959.539779] out_of_memory+0x2d5/0x1110 [ 1959.543761] ? oom_killer_disable+0x1c0/0x1c0 [ 1959.548255] ? mutex_trylock+0x152/0x1a0 [ 1959.552319] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1959.557175] ? warn_alloc+0xf0/0xf0 [ 1959.560800] ? find_held_lock+0x2d/0x110 [ 1959.564869] ? fs_reclaim_acquire+0x10/0x10 [ 1959.569197] __alloc_pages_nodemask+0x5d3/0x700 [ 1959.573866] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1959.578703] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1959.583800] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1959.589018] ? cache_grow_begin+0x32d/0x410 [ 1959.593347] cache_grow_begin+0x7b/0x410 [ 1959.597411] fallback_alloc+0x205/0x2b0 [ 1959.601388] kmem_cache_alloc+0x1ea/0x770 [ 1959.605535] ? lock_acquire+0x170/0x3f0 [ 1959.609508] getname_flags+0xc8/0x560 [ 1959.613310] do_sys_open+0x1c4/0x3f0 [ 1959.617044] ? filp_open+0x60/0x60 [ 1959.620599] ? __do_page_fault+0x35b/0xb40 [ 1959.624831] ? do_syscall_64+0x4c/0x640 [ 1959.628888] ? do_sys_open+0x3f0/0x3f0 [ 1959.632772] do_syscall_64+0x1d5/0x640 [ 1959.636668] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1959.641864] RIP: 0033:0x45aa00 [ 1959.645048] RSP: 002b:00007fff55de1b10 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 1959.652758] RAX: ffffffffffffffda RBX: 00000000001de4dd RCX: 000000000045aa00 [ 1959.660026] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007fff55de2cf0 [ 1959.667290] RBP: 00000000000006b2 R08: 0000000000000001 R09: 00000000011e9940 [ 1959.674558] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff55de2cf0 [ 1959.681845] R13: 00007fff55de2ce0 R14: 0000000000000000 R15: 00007fff55de2cf0 [ 1959.717247] Mem-Info: [ 1959.738392] active_anon:205316 inactive_anon:1095508 isolated_anon:0 [ 1959.738392] active_file:38 inactive_file:0 isolated_file:0 [ 1959.738392] unevictable:47364 dirty:0 writeback:0 unstable:0 [ 1959.738392] slab_reclaimable:19305 slab_unreclaimable:111756 [ 1959.738392] mapped:68602 shmem:12408 pagetables:18324 bounce:0 [ 1959.738392] free:24970 free_pcp:0 free_cma:0 [ 1959.877200] Node 0 active_anon:746904kB inactive_anon:1022632kB active_file:4kB inactive_file:4kB unevictable:107752kB isolated(anon):0kB isolated(file):0kB mapped:229112kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1960.049560] Node 1 active_anon:74360kB inactive_anon:3359400kB active_file:52kB inactive_file:52kB unevictable:81708kB isolated(anon):0kB isolated(file):0kB mapped:45300kB dirty:0kB writeback:0kB shmem:20548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1960.198098] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1960.334992] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1960.340659] Node 0 DMA32 free:36136kB min:36272kB low:45340kB high:54408kB active_anon:746844kB inactive_anon:1017556kB active_file:0kB inactive_file:20kB unevictable:107752kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107752kB kernel_stack:12320kB pagetables:28340kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1960.387340] lowmem_reserve[]: 0 0 0 0 0 [ 1960.396258] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1960.429124] lowmem_reserve[]: 0 0 0 0 0 [ 1960.433152] Node 1 Normal free:53380kB min:53612kB low:67012kB high:80412kB active_anon:74360kB inactive_anon:3359400kB active_file:44kB inactive_file:20kB unevictable:81708kB writepending:0kB present:3932160kB managed:3870192kB mlocked:81708kB kernel_stack:14688kB pagetables:44948kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1960.466022] lowmem_reserve[]: 0 0 0 0 0 [ 1960.487670] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1960.518258] Node 0 DMA32: 31*4kB (U) 237*8kB (UM) 988*16kB (UME) 576*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36260kB [ 1960.544581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1960.557831] Node 1 Normal: 49*4kB (UME) 58*8kB (UME) 80*16kB (UM) 316*32kB (UME) 94*64kB (UME) 16*128kB (UME) 26*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 53396kB [ 1960.584735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1960.593644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1960.612326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1960.626161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1960.637477] 21618 total pagecache pages [ 1960.646458] 0 pages in swap cache [ 1960.652532] Swap cache stats: add 0, delete 0, find 0/0 [ 1960.657928] Free swap = 0kB [ 1960.665901] Total swap = 0kB [ 1960.671545] 1965979 pages RAM [ 1960.674663] 0 pages HighMem/MovableOnly [ 1960.683548] 339053 pages reserved [ 1960.687033] 0 pages cma reserved [ 1960.693188] Out of memory: Kill process 27757 (syz-executor.2) score 1009 or sacrifice child [ 1960.706729] Killed process 27758 (syz-executor.2) total-vm:74972kB, anon-rss:18024kB, file-rss:52140kB, shmem-rss:0kB [ 1960.735401] oom_reaper: reaped process 27758 (syz-executor.2), now anon-rss:18020kB, file-rss:18800kB, shmem-rss:0kB [ 1960.765850] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1960.793636] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1960.859511] CPU: 0 PID: 6345 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1960.867341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.877912] Call Trace: [ 1960.880504] dump_stack+0x13e/0x194 [ 1960.884143] dump_header+0x178/0x6d4 [ 1960.887858] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1960.892877] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1960.897982] ? ___ratelimit+0x50/0x519 [ 1960.901874] oom_kill_process.cold+0x10/0xae3 [ 1960.906375] ? lock_acquire+0x170/0x3f0 [ 1960.910348] ? lock_downgrade+0x6e0/0x6e0 [ 1960.914503] out_of_memory+0x2d5/0x1110 [ 1960.918483] ? oom_killer_disable+0x1c0/0x1c0 [ 1960.922977] ? mutex_trylock+0x152/0x1a0 [ 1960.927043] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1960.931890] ? warn_alloc+0xf0/0xf0 [ 1960.935500] ? find_held_lock+0x2d/0x110 [ 1960.939540] ? fs_reclaim_acquire+0x10/0x10 [ 1960.943855] __alloc_pages_nodemask+0x5d3/0x700 [ 1960.948516] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1960.953352] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1960.958362] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1960.963364] ? cache_grow_begin+0x32d/0x410 [ 1960.967664] cache_grow_begin+0x7b/0x410 [ 1960.971706] fallback_alloc+0x205/0x2b0 [ 1960.975660] kmem_cache_alloc+0x1ea/0x770 [ 1960.979804] ? nanosleep_copyout+0x100/0x100 [ 1960.984192] getname_flags+0xc8/0x560 [ 1960.987970] ? enqueue_hrtimer+0x3b0/0x3b0 [ 1960.992195] do_sys_open+0x1c4/0x3f0 [ 1960.995889] ? filp_open+0x60/0x60 [ 1960.999425] ? hrtimer_nanosleep+0x460/0x460 [ 1961.003829] ? do_syscall_64+0x4c/0x640 [ 1961.008568] ? do_sys_open+0x3f0/0x3f0 [ 1961.012441] do_syscall_64+0x1d5/0x640 [ 1961.016326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1961.021584] RIP: 0033:0x45aa00 [ 1961.024755] RSP: 002b:00007ffdb2748880 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 1961.032548] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045aa00 [ 1961.039822] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004c15bb [ 1961.047074] RBP: 000000000000077c R08: 0000000000000001 R09: 000000000152c940 [ 1961.054343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1961.061696] R13: 00007ffdb2748960 R14: 00000000001ddc2e R15: 00007ffdb2748970 07:51:45 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:45 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1961.441451] EXT4-fs (loop1): invalid first ino: 0 07:51:45 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200001802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000008000000000000000000000000005001686173686c696d697400000000000000000085037c358219eb6456000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) 07:51:45 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1962.180886] Mem-Info: [ 1962.204953] active_anon:204947 inactive_anon:1095523 isolated_anon:0 [ 1962.204953] active_file:31 inactive_file:4 isolated_file:27 [ 1962.204953] unevictable:47471 dirty:0 writeback:0 unstable:0 [ 1962.204953] slab_reclaimable:19335 slab_unreclaimable:111839 [ 1962.204953] mapped:69333 shmem:12406 pagetables:18317 bounce:0 [ 1962.204953] free:24971 free_pcp:0 free_cma:0 [ 1962.242861] Node 0 active_anon:746756kB inactive_anon:1022628kB active_file:4kB inactive_file:4kB unevictable:105056kB isolated(anon):0kB isolated(file):0kB mapped:227816kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1962.289816] Node 1 active_anon:73032kB inactive_anon:3359464kB active_file:104kB inactive_file:52kB unevictable:84828kB isolated(anon):0kB isolated(file):100kB mapped:49516kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1962.322868] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.349511] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1962.354553] Node 0 DMA32 free:36124kB min:36272kB low:45340kB high:54408kB active_anon:746696kB inactive_anon:1017552kB active_file:4kB inactive_file:104kB unevictable:105056kB writepending:0kB present:3129332kB managed:2621260kB mlocked:105056kB kernel_stack:12320kB pagetables:28324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.384483] lowmem_reserve[]: 0 0 0 0 0 [ 1962.388582] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.431234] lowmem_reserve[]: 0 0 0 0 0 [ 1962.435279] Node 1 Normal free:53524kB min:53612kB low:67012kB high:80412kB active_anon:73420kB inactive_anon:3359464kB active_file:44kB inactive_file:92kB unevictable:84620kB writepending:312kB present:3932160kB managed:3870192kB mlocked:84620kB kernel_stack:14752kB pagetables:44964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.649732] lowmem_reserve[]: 0 0 0 0 0 [ 1962.653886] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1962.772844] Node 0 DMA32: 47*4kB (UM) 248*8kB (UME) 990*16kB (UME) 574*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36380kB [ 1962.803326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1962.814222] Node 1 Normal: 264*4kB (UME) 73*8kB (UME) 42*16kB (UME) 246*32kB (UME) 127*64kB (UME) 19*128kB (UME) 26*256kB (UME) 26*512kB (ME) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 54024kB [ 1962.839873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.848825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1962.857424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.866427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1962.875200] 22360 total pagecache pages [ 1962.879243] 0 pages in swap cache [ 1962.882698] Swap cache stats: add 0, delete 0, find 0/0 [ 1962.888565] Free swap = 0kB [ 1962.891573] Total swap = 0kB [ 1962.894593] 1965979 pages RAM [ 1962.897689] 0 pages HighMem/MovableOnly [ 1962.901714] 339053 pages reserved [ 1962.905188] 0 pages cma reserved [ 1962.908618] Out of memory: Kill process 27766 (syz-executor.5) score 1008 or sacrifice child [ 1963.155197] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1963.261580] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1963.266749] CPU: 1 PID: 27810 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1963.274629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.283986] Call Trace: [ 1963.287366] dump_stack+0x13e/0x194 [ 1963.291007] dump_header+0x178/0x6d4 [ 1963.294725] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1963.299750] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1963.304942] ? ___ratelimit+0x50/0x519 [ 1963.308868] oom_kill_process.cold+0x10/0xae3 [ 1963.313367] ? lock_downgrade+0x6e0/0x6e0 [ 1963.317527] out_of_memory+0x2d5/0x1110 [ 1963.321510] ? oom_killer_disable+0x1c0/0x1c0 [ 1963.326011] ? mutex_trylock+0x152/0x1a0 [ 1963.330076] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1963.334942] ? warn_alloc+0xf0/0xf0 [ 1963.338585] __alloc_pages_nodemask+0x5d3/0x700 [ 1963.343257] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1963.348270] ? find_held_lock+0x2d/0x110 [ 1963.352338] alloc_pages_vma+0xc2/0x4a0 [ 1963.356313] __handle_mm_fault+0x17b6/0x3280 [ 1963.360722] ? copy_page_range+0x1d70/0x1d70 [ 1963.365139] ? find_held_lock+0x2d/0x110 [ 1963.369211] handle_mm_fault+0x288/0x7a0 [ 1963.373309] __get_user_pages+0x44d/0x11e0 [ 1963.377548] ? follow_page_mask+0x1580/0x1580 [ 1963.382046] ? lock_acquire+0x170/0x3f0 [ 1963.386049] ? __mm_populate+0x1e3/0x2c0 [ 1963.390115] populate_vma_page_range+0x17b/0x210 [ 1963.394879] __mm_populate+0x195/0x2c0 [ 1963.398781] ? populate_vma_page_range+0x210/0x210 [ 1963.403710] ? security_capable+0x88/0xb0 [ 1963.407865] SyS_mlockall+0x3f5/0x520 [ 1963.411666] ? SyS_munlock+0xf0/0xf0 [ 1963.415386] do_syscall_64+0x1d5/0x640 [ 1963.419456] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1963.424645] RIP: 0033:0x45ca29 [ 1963.427917] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1963.435633] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1963.442901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1963.450202] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1963.457470] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1963.465101] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 07:51:48 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/494], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:48 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x3f, &(0x7f0000000140)={[0x2]}, 0x8) 07:51:48 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1964.697480] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1964.756906] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1964.771166] Mem-Info: [ 1964.773723] active_anon:205260 inactive_anon:1096328 isolated_anon:0 [ 1964.773723] active_file:2846 inactive_file:2869 isolated_file:0 [ 1964.773723] unevictable:35223 dirty:0 writeback:0 unstable:0 [ 1964.773723] slab_reclaimable:19392 slab_unreclaimable:112230 [ 1964.773723] mapped:66493 shmem:12581 pagetables:18233 bounce:0 [ 1964.773723] free:29347 free_pcp:595 free_cma:0 07:51:48 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1964.851051] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1964.908383] EXT4-fs (loop1): journal inode is deleted [ 1965.028751] Node 0 active_anon:746832kB inactive_anon:1022728kB active_file:228kB inactive_file:128kB unevictable:102572kB isolated(anon):0kB isolated(file):56kB mapped:228264kB dirty:0kB writeback:0kB shmem:29128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:51:49 executing program 3: mlockall(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x14, r1, 0x105, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="8800000048caf82ac1b182aae9fa21ac1ac5176b0cb9a7b8e69ed46cbfa79d4c6b730b2acef6abdeda69266e9e19bfce83b3e9ad3941dcfce61c21a822a6672c1f05000000e64b846128f88b89b7307d9e6b6c17c999ac5bd347de5aaf7fbd2e53413cad591f83aa75bdfe565a5d12ea20391e8803b669ca16f60080a255fb47bb1f1918654819b754e37281e87c6eb9632b901fa9a9c46a42b65ffb011c68c5b6f91a28f8eba0230d202e717e2c55deac87b4d41d0974219327fd1c993062f920d7c015669c92f07236e3e6812e6b0df368b1fc348d0975735bb9ba2a6308df751f104b6efa1f9f3b3ef59d7a2693371b8c73c6", @ANYRES16=r1, @ANYBLOB="00082abd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x88}, 0x1, 0x0, 0x0, 0x2c000}, 0x800) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x20a00, 0x0) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r7, 0x0, 0x100000080000000) [ 1965.189597] Node 1 active_anon:75588kB inactive_anon:3359508kB active_file:6336kB inactive_file:9920kB unevictable:61884kB isolated(anon):0kB isolated(file):128kB mapped:38348kB dirty:168kB writeback:0kB shmem:20632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1965.321252] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.402853] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1965.431414] Node 0 DMA32 free:36036kB min:36272kB low:45340kB high:54408kB active_anon:746772kB inactive_anon:1017552kB active_file:228kB inactive_file:260kB unevictable:103476kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103428kB kernel_stack:12384kB pagetables:28552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.485580] lowmem_reserve[]: 0 0 0 0 0 [ 1965.491031] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.532368] lowmem_reserve[]: 0 0 0 0 0 [ 1965.536515] Node 1 Normal free:53540kB min:53612kB low:67012kB high:80412kB active_anon:75092kB inactive_anon:3360204kB active_file:688kB inactive_file:644kB unevictable:80176kB writepending:168kB present:3932160kB managed:3870192kB mlocked:80280kB kernel_stack:14816kB pagetables:44468kB bounce:0kB free_pcp:692kB local_pcp:368kB free_cma:0kB [ 1965.606513] lowmem_reserve[]: 0 0 0 0 0 [ 1965.611345] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1965.631309] Node 0 DMA32: 1*4kB (U) 286*8kB (UM) 994*16kB (UE) 570*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36436kB [ 1965.735110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1965.784406] Node 1 Normal: 264*4kB (UME) 123*8kB (UME) 52*16kB (UME) 148*32kB (UME) 140*64kB (UME) 23*128kB (UME) 27*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 54072kB [ 1965.803503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.812557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.822976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.832425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.857993] 20234 total pagecache pages [ 1965.861997] 0 pages in swap cache [ 1965.865438] Swap cache stats: add 0, delete 0, find 0/0 [ 1965.915520] Free swap = 0kB [ 1965.947982] Total swap = 0kB [ 1965.951058] 1965979 pages RAM [ 1965.954156] 0 pages HighMem/MovableOnly [ 1966.064974] 339053 pages reserved [ 1966.100665] 0 pages cma reserved [ 1966.143394] Out of memory: Kill process 27781 (syz-executor.4) score 1010 or sacrifice child [ 1966.284553] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1966.457956] systemd-journal cpuset=/ mems_allowed=0-1 [ 1966.463210] CPU: 0 PID: 3636 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0 [ 1966.471088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.480440] Call Trace: [ 1966.483039] dump_stack+0x13e/0x194 [ 1966.486670] dump_header+0x178/0x6d4 [ 1966.490383] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1966.495402] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1966.500506] ? ___ratelimit+0x50/0x519 [ 1966.504397] oom_kill_process.cold+0x10/0xae3 [ 1966.508897] ? lock_acquire+0x170/0x3f0 [ 1966.512872] ? lock_downgrade+0x6e0/0x6e0 [ 1966.517046] out_of_memory+0x2d5/0x1110 [ 1966.521025] ? oom_killer_disable+0x1c0/0x1c0 [ 1966.525521] ? mutex_trylock+0x152/0x1a0 [ 1966.529581] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1966.534435] ? warn_alloc+0xf0/0xf0 [ 1966.538073] __alloc_pages_nodemask+0x5d3/0x700 [ 1966.542747] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1966.547759] ? lock_downgrade+0x6e0/0x6e0 [ 1966.551913] alloc_pages_current+0xe7/0x1e0 [ 1966.556238] __page_cache_alloc+0x245/0x3d0 [ 1966.560565] filemap_fault+0xc18/0x1c50 [ 1966.564550] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1966.569222] ? lock_acquire+0x170/0x3f0 [ 1966.573193] ? ext4_filemap_fault+0x7c/0xb0 [ 1966.577520] ext4_filemap_fault+0x84/0xb0 [ 1966.581666] __do_fault+0xfa/0x380 [ 1966.585202] __handle_mm_fault+0x22e9/0x3280 [ 1966.589607] ? copy_page_range+0x1d70/0x1d70 [ 1966.594013] ? find_held_lock+0x2d/0x110 [ 1966.598126] handle_mm_fault+0x288/0x7a0 [ 1966.602190] __do_page_fault+0x4bc/0xb40 [ 1966.606252] ? vmalloc_fault+0xdf0/0xdf0 [ 1966.610306] ? do_page_fault+0x60/0x4f2 [ 1966.614276] ? page_fault+0x2f/0x50 [ 1966.617897] page_fault+0x45/0x50 [ 1966.621343] RIP: 0000:0x7fffd0f91f90 [ 1966.625045] RSP: d0f91f90:00007fffd0f8f0b0 EFLAGS: 00000000 [ 1967.943484] Mem-Info: [ 1967.967933] active_anon:205664 inactive_anon:1101219 isolated_anon:0 [ 1967.967933] active_file:2381 inactive_file:1730 isolated_file:32 [ 1967.967933] unevictable:36525 dirty:0 writeback:0 unstable:0 [ 1967.967933] slab_reclaimable:19314 slab_unreclaimable:111810 [ 1967.967933] mapped:64595 shmem:12406 pagetables:18346 bounce:0 [ 1967.967933] free:25185 free_pcp:511 free_cma:0 07:51:52 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/494], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:52 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x100000080000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) lseek(r1, 0x0, 0x2) 07:51:52 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYRESHEX], 0x3}}, 0x44001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00001400007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/500], 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0xfffffff, 0x61a7, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a79, 0x6085, [], @p_u32=&(0x7f0000000340)=0x40b4}}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)={0x100000, 0xd000, 0x2, 0x5, 0xa7}) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:51:52 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sctp\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0x4) [ 1968.215445] Node 0 active_anon:746928kB inactive_anon:1022624kB active_file:24kB inactive_file:128kB unevictable:102088kB isolated(anon):0kB isolated(file):0kB mapped:227636kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1968.360066] EXT4-fs (loop1): unsupported inode size: 0 [ 1968.365429] EXT4-fs (loop1): blocksize: 4096 [ 1968.387851] Node 1 active_anon:77028kB inactive_anon:3377052kB active_file:7504kB inactive_file:17620kB unevictable:27312kB isolated(anon):0kB isolated(file):128kB mapped:38444kB dirty:100kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:51:52 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x70, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x800, 0x2, 0x7fffffff]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x800, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x4e7, 0x7]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000180)=0x6, 0x4) 07:51:52 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1968.506995] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.684893] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1968.709755] Node 0 DMA32 free:36320kB min:36272kB low:45340kB high:54408kB active_anon:746868kB inactive_anon:1018112kB active_file:280kB inactive_file:112kB unevictable:102576kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102544kB kernel_stack:12320kB pagetables:28488kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.815913] lowmem_reserve[]: 0 0 0 0 0 [ 1968.821787] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.848520] lowmem_reserve[]: 0 0 0 0 0 [ 1968.852986] Node 1 Normal free:56440kB min:53612kB low:67012kB high:80412kB active_anon:77048kB inactive_anon:3359476kB active_file:136kB inactive_file:0kB unevictable:80416kB writepending:256kB present:3932160kB managed:3870192kB mlocked:80400kB kernel_stack:14880kB pagetables:45032kB bounce:0kB free_pcp:956kB local_pcp:660kB free_cma:0kB [ 1968.902904] lowmem_reserve[]: 0 0 0 0 0 [ 1968.914074] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1968.996715] Node 0 DMA32: 263*4kB (UME) 194*8kB (UE) 988*16kB (UE) 571*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36684kB [ 1969.113363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1969.200692] Node 1 Normal: 191*4kB (UME) 151*8kB (UME) 100*16kB (UME) 130*32kB (UME) 130*64kB (UME) 26*128kB (UME) 28*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 54196kB [ 1969.316886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.345486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.413491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.486838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.550486] 18926 total pagecache pages [ 1969.577097] 0 pages in swap cache [ 1969.604763] Swap cache stats: add 0, delete 0, find 0/0 [ 1969.637009] Free swap = 0kB [ 1969.667097] Total swap = 0kB [ 1969.690642] 1965979 pages RAM [ 1969.701531] 0 pages HighMem/MovableOnly [ 1969.706742] 339053 pages reserved [ 1969.713751] 0 pages cma reserved [ 1969.717189] Out of memory: Kill process 27814 (syz-executor.2) score 1008 or sacrifice child [ 1969.785725] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1969.902738] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1969.910289] CPU: 1 PID: 27849 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1969.918297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.927661] Call Trace: [ 1969.930257] dump_stack+0x13e/0x194 [ 1969.933902] dump_header+0x178/0x6d4 [ 1969.937624] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1969.942643] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1969.947753] ? ___ratelimit+0x50/0x519 [ 1969.951650] oom_kill_process.cold+0x10/0xae3 [ 1969.956154] ? lock_downgrade+0x6e0/0x6e0 [ 1969.960399] out_of_memory+0x2d5/0x1110 [ 1969.964385] ? oom_killer_disable+0x1c0/0x1c0 [ 1969.968891] ? mutex_trylock+0x152/0x1a0 [ 1969.972958] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1969.977818] ? warn_alloc+0xf0/0xf0 [ 1969.981462] __alloc_pages_nodemask+0x5d3/0x700 [ 1969.986140] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1969.991161] ? lock_downgrade+0x6e0/0x6e0 [ 1969.995316] alloc_pages_current+0xe7/0x1e0 [ 1969.999645] __page_cache_alloc+0x245/0x3d0 [ 1970.003971] filemap_fault+0xc18/0x1c50 [ 1970.007957] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1970.012627] ? lock_acquire+0x170/0x3f0 [ 1970.016603] ? ext4_filemap_fault+0x7c/0xb0 [ 1970.020935] ext4_filemap_fault+0x84/0xb0 [ 1970.025081] __do_fault+0xfa/0x380 [ 1970.028626] __handle_mm_fault+0x22e9/0x3280 [ 1970.033125] ? copy_page_range+0x1d70/0x1d70 [ 1970.037541] ? find_held_lock+0x2d/0x110 [ 1970.041614] handle_mm_fault+0x288/0x7a0 [ 1970.045760] __get_user_pages+0x44d/0x11e0 [ 1970.049996] ? follow_page_mask+0x1580/0x1580 [ 1970.054498] ? lock_acquire+0x170/0x3f0 [ 1970.058474] ? __mm_populate+0x1e3/0x2c0 [ 1970.062552] populate_vma_page_range+0x17b/0x210 [ 1970.067392] __mm_populate+0x195/0x2c0 [ 1970.071286] ? populate_vma_page_range+0x210/0x210 [ 1970.076213] ? security_capable+0x88/0xb0 [ 1970.080365] SyS_mlockall+0x3f5/0x520 [ 1970.084194] ? SyS_munlock+0xf0/0xf0 [ 1970.087934] do_syscall_64+0x1d5/0x640 [ 1970.091825] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1970.097008] RIP: 0033:0x45ca29 [ 1970.100191] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1970.108006] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1970.115273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1970.122540] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1970.129811] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1970.137086] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 1970.157280] Mem-Info: [ 1970.162377] active_anon:205971 inactive_anon:1095507 isolated_anon:0 [ 1970.162377] active_file:30 inactive_file:0 isolated_file:0 [ 1970.162377] unevictable:46891 dirty:0 writeback:0 unstable:0 [ 1970.162377] slab_reclaimable:19402 slab_unreclaimable:111337 [ 1970.162377] mapped:66109 shmem:12406 pagetables:18376 bounce:0 [ 1970.162377] free:25029 free_pcp:30 free_cma:0 [ 1970.208094] Node 0 active_anon:746916kB inactive_anon:1022628kB active_file:20kB inactive_file:0kB unevictable:102996kB isolated(anon):0kB isolated(file):0kB mapped:227916kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1970.246610] Node 1 active_anon:76968kB inactive_anon:3359400kB active_file:84kB inactive_file:24kB unevictable:84568kB isolated(anon):0kB isolated(file):0kB mapped:36520kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1970.285028] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.321595] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1970.326671] Node 0 DMA32 free:36184kB min:36272kB low:45340kB high:54408kB active_anon:746856kB inactive_anon:1017552kB active_file:8kB inactive_file:4kB unevictable:102996kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102996kB kernel_stack:12288kB pagetables:28372kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1970.367010] lowmem_reserve[]: 0 0 0 0 0 [ 1970.371103] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.406471] lowmem_reserve[]: 0 0 0 0 0 [ 1970.410551] Node 1 Normal free:53500kB min:53612kB low:67012kB high:80412kB active_anon:76968kB inactive_anon:3359400kB active_file:36kB inactive_file:72kB unevictable:84568kB writepending:0kB present:3932160kB managed:3870192kB mlocked:84568kB kernel_stack:14880kB pagetables:45124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.450212] lowmem_reserve[]: 0 0 0 0 0 [ 1970.454250] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1970.479958] Node 0 DMA32: 136*4kB (U) 193*8kB (UE) 987*16kB (UE) 572*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 1970.503111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1970.516469] Node 1 Normal: 47*4kB (UME) 150*8kB (UME) 99*16kB (UME) 129*32kB (UME) 129*64kB (UE) 26*128kB (UME) 28*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53500kB [ 1970.543296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1970.554683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1970.573208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1970.584641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1970.603145] 19104 total pagecache pages [ 1970.607160] 0 pages in swap cache [ 1970.615679] Swap cache stats: add 0, delete 0, find 0/0 [ 1970.627938] Free swap = 0kB [ 1970.631125] Total swap = 0kB [ 1970.634298] 1965979 pages RAM [ 1970.637507] 0 pages HighMem/MovableOnly [ 1970.650559] 339053 pages reserved [ 1970.654112] 0 pages cma reserved [ 1970.657550] Out of memory: Kill process 27853 (syz-executor.4) score 1008 or sacrifice child [ 1970.672767] Killed process 27853 (syz-executor.4) total-vm:74972kB, anon-rss:18012kB, file-rss:41836kB, shmem-rss:0kB [ 1970.777060] oom_reaper: reaped process 27853 (syz-executor.4), now anon-rss:18024kB, file-rss:7920kB, shmem-rss:0kB [ 1971.029548] EXT4-fs (loop1): unsupported inode size: 0 [ 1971.100677] EXT4-fs (loop1): blocksize: 4096 07:51:55 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x80, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000880)=""/206, 0xd1}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000200)}, {&(0x7f0000000380)=""/118, 0x6d}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000800)=""/125, 0x7d}], 0x1000028f, 0xf5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:51:55 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/494], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1972.082534] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1972.258407] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1972.316001] CPU: 1 PID: 27888 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1972.323922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.333274] Call Trace: [ 1972.335869] dump_stack+0x13e/0x194 [ 1972.339502] dump_header+0x178/0x6d4 [ 1972.343212] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1972.348225] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1972.353335] ? ___ratelimit+0x50/0x519 [ 1972.357224] oom_kill_process.cold+0x10/0xae3 [ 1972.362350] ? lock_downgrade+0x6e0/0x6e0 [ 1972.366588] out_of_memory+0x2d5/0x1110 [ 1972.370568] ? oom_killer_disable+0x1c0/0x1c0 [ 1972.375060] ? mutex_trylock+0x152/0x1a0 [ 1972.379122] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1972.383979] ? warn_alloc+0xf0/0xf0 [ 1972.387709] __alloc_pages_nodemask+0x5d3/0x700 [ 1972.392377] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1972.397393] ? lock_downgrade+0x6e0/0x6e0 [ 1972.401547] alloc_pages_current+0xe7/0x1e0 [ 1972.405870] __page_cache_alloc+0x245/0x3d0 [ 1972.410192] filemap_fault+0xc18/0x1c50 [ 1972.414171] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1972.418860] ? lock_acquire+0x170/0x3f0 [ 1972.422834] ? ext4_filemap_fault+0x7c/0xb0 [ 1972.427162] ext4_filemap_fault+0x84/0xb0 [ 1972.431314] __do_fault+0xfa/0x380 [ 1972.434857] __handle_mm_fault+0x22e9/0x3280 [ 1972.439263] ? copy_page_range+0x1d70/0x1d70 [ 1972.443670] ? find_held_lock+0x2d/0x110 [ 1972.447737] handle_mm_fault+0x288/0x7a0 [ 1972.451799] __get_user_pages+0x44d/0x11e0 [ 1972.456039] ? follow_page_mask+0x1580/0x1580 [ 1972.460536] ? lock_acquire+0x170/0x3f0 [ 1972.464507] ? __mm_populate+0x1e3/0x2c0 [ 1972.468569] populate_vma_page_range+0x17b/0x210 [ 1972.473337] __mm_populate+0x195/0x2c0 [ 1972.477228] ? populate_vma_page_range+0x210/0x210 [ 1972.482155] ? security_capable+0x88/0xb0 [ 1972.486407] SyS_mlockall+0x3f5/0x520 [ 1972.490225] ? SyS_munlock+0xf0/0xf0 [ 1972.495675] do_syscall_64+0x1d5/0x640 [ 1972.499587] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1972.504772] RIP: 0033:0x45ca29 [ 1972.507953] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1972.515658] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1972.523008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1972.530305] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1972.537680] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1972.544969] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 1972.940776] Mem-Info: [ 1972.943369] active_anon:206422 inactive_anon:1099981 isolated_anon:0 [ 1972.943369] active_file:332 inactive_file:1820 isolated_file:0 [ 1972.943369] unevictable:39755 dirty:5 writeback:0 unstable:0 [ 1972.943369] slab_reclaimable:19424 slab_unreclaimable:110899 [ 1972.943369] mapped:66935 shmem:12406 pagetables:18317 bounce:0 [ 1972.943369] free:25424 free_pcp:144 free_cma:0 07:51:57 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe00feaf000000000003000000580001800d0001007564"], 0x3}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x3, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48884}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5b) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x3, 0x3, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x7ff, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080)='syzkaller1\x00', 0x401, 0x1, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f00000000c0)=0x9b) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f5, 0x8, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc055}, 0x4000000) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) 07:51:57 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1973.149794] Node 0 active_anon:746908kB inactive_anon:1022848kB active_file:708kB inactive_file:1160kB unevictable:100604kB isolated(anon):0kB isolated(file):0kB mapped:228088kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 07:51:57 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) fchdir(0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000000000000000bd00000000007465616d5f736c6176655f3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000007607000000000000000000000007000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d1f897f104bae2c0000000000000000000000000000000000000000000000000000000000007b8c03f997ae843d201c4cbee9739d4b19a37100d83e403e0c9d20a2888d704a70d00f44ae2bab42500a42458f95cd6887f33c75ff1a4e6cb6bf22188948b281011747db686126920368bd4c7bcf4bf34cb5b4bdccf0693dea20381276f8f0b710eb755486e0eca12ebb5776c0d9503bcbf407963247411ff36647b9e91b9f5027448eb5a1822e09518a77515e4b6bfc228e386d3a40a9d709d429b29878f38fbf42"], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 07:51:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) [ 1973.336711] Node 1 active_anon:80680kB inactive_anon:3359476kB active_file:13732kB inactive_file:11324kB unevictable:22016kB isolated(anon):0kB isolated(file):0kB mapped:30652kB dirty:120kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1973.473912] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.625372] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1973.652403] Node 0 DMA32 free:36268kB min:36272kB low:45340kB high:54408kB active_anon:746748kB inactive_anon:1017572kB active_file:428kB inactive_file:260kB unevictable:104016kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103980kB kernel_stack:12288kB pagetables:28380kB bounce:0kB free_pcp:496kB local_pcp:240kB free_cma:0kB [ 1973.759460] lowmem_reserve[]: 0 0 0 0 0 [ 1973.769866] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.797473] lowmem_reserve[]: 0 0 0 0 0 [ 1973.803060] Node 1 Normal free:53928kB min:53612kB low:67012kB high:80412kB active_anon:79256kB inactive_anon:3359460kB active_file:340kB inactive_file:392kB unevictable:76748kB writepending:20kB present:3932160kB managed:3870192kB mlocked:76652kB kernel_stack:14720kB pagetables:44880kB bounce:0kB free_pcp:556kB local_pcp:108kB free_cma:0kB [ 1973.834918] lowmem_reserve[]: 0 0 0 0 0 [ 1973.840518] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1973.862759] Node 0 DMA32: 39*4kB (UM) 275*8kB (UM) 1002*16kB (UE) 572*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36692kB [ 1973.877123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1973.888521] Node 1 Normal: 407*4kB (UME) 235*8kB (UME) 54*16kB (UME) 111*32kB (UM) 153*64kB (UME) 30*128kB (UE) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 54836kB [ 1973.906409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1973.915821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1973.925386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1973.934750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1973.944337] 19851 total pagecache pages [ 1973.948813] 0 pages in swap cache [ 1973.952669] Swap cache stats: add 0, delete 0, find 0/0 [ 1973.958592] Free swap = 0kB [ 1973.961933] Total swap = 0kB [ 1973.965284] 1965979 pages RAM [ 1973.968765] 0 pages HighMem/MovableOnly [ 1973.973083] 339053 pages reserved [ 1973.976885] 0 pages cma reserved [ 1973.988674] Out of memory: Kill process 27851 (syz-executor.5) score 1009 or sacrifice child [ 1974.378251] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1974.486132] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1974.525876] CPU: 0 PID: 6318 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1974.533360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.542712] Call Trace: [ 1974.545301] dump_stack+0x13e/0x194 [ 1974.548929] dump_header+0x178/0x6d4 [ 1974.552816] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1974.557849] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1974.562945] ? ___ratelimit+0x50/0x519 [ 1974.566833] oom_kill_process.cold+0x10/0xae3 [ 1974.571905] ? lock_downgrade+0x6e0/0x6e0 [ 1974.576054] out_of_memory+0x2d5/0x1110 [ 1974.580030] ? oom_killer_disable+0x1c0/0x1c0 [ 1974.584522] ? mutex_trylock+0x152/0x1a0 [ 1974.588584] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1974.593444] ? warn_alloc+0xf0/0xf0 [ 1974.597077] __alloc_pages_nodemask+0x5d3/0x700 [ 1974.601748] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1974.606761] ? lock_downgrade+0x6e0/0x6e0 [ 1974.610915] alloc_pages_current+0xe7/0x1e0 [ 1974.615236] __page_cache_alloc+0x245/0x3d0 [ 1974.619582] filemap_fault+0xc18/0x1c50 [ 1974.623759] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1974.628429] ? lock_acquire+0x170/0x3f0 [ 1974.632398] ? ext4_filemap_fault+0x7c/0xb0 [ 1974.636723] ext4_filemap_fault+0x84/0xb0 [ 1974.640867] __do_fault+0xfa/0x380 [ 1974.644404] __handle_mm_fault+0x22e9/0x3280 [ 1974.648810] ? copy_page_range+0x1d70/0x1d70 [ 1974.653217] ? find_held_lock+0x2d/0x110 [ 1974.657286] handle_mm_fault+0x288/0x7a0 [ 1974.661352] __do_page_fault+0x4bc/0xb40 [ 1974.665414] ? vmalloc_fault+0xdf0/0xdf0 [ 1974.669474] ? do_page_fault+0x60/0x4f2 [ 1974.673878] ? page_fault+0x2f/0x50 [ 1974.677522] page_fault+0x45/0x50 [ 1974.680968] RIP: 00f1:0x11 [ 1974.683809] RSP: 000c:000000c42004ff18 EFLAGS: 0042f0a0 [ 1975.823435] Mem-Info: [ 1975.872423] active_anon:206440 inactive_anon:1095503 isolated_anon:0 [ 1975.872423] active_file:23 inactive_file:3 isolated_file:0 [ 1975.872423] unevictable:46236 dirty:0 writeback:0 unstable:0 [ 1975.872423] slab_reclaimable:19384 slab_unreclaimable:111599 [ 1975.872423] mapped:67130 shmem:12406 pagetables:18254 bounce:0 [ 1975.872423] free:25043 free_pcp:0 free_cma:0 07:52:00 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/498], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1976.100008] Node 0 active_anon:746756kB inactive_anon:1022628kB active_file:104kB inactive_file:20kB unevictable:104168kB isolated(anon):0kB isolated(file):0kB mapped:227372kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:52:00 executing program 1: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="27cee89880672033ce0fe10d4a18", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x5, {{0xa, 0x4e22, 0x8, @mcast2, 0x20000000}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 07:52:00 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1976.370420] Node 1 active_anon:79020kB inactive_anon:3359384kB active_file:4096kB inactive_file:3948kB unevictable:69276kB isolated(anon):0kB isolated(file):128kB mapped:40648kB dirty:100kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1976.584806] EXT4-fs (loop1): Can't read superblock on 2nd try [ 1976.627016] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:00 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:00 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:00 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x20ae, 0x220080, 0x0, 0x8, 0x4, 0x10000}}, 0x50) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000240)={@mcast2, 0x1c, r3}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) [ 1976.867496] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1976.908990] Node 0 DMA32 free:35952kB min:36272kB low:45340kB high:54408kB active_anon:746780kB inactive_anon:1017552kB active_file:0kB inactive_file:0kB unevictable:104368kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104320kB kernel_stack:12384kB pagetables:28316kB bounce:0kB free_pcp:972kB local_pcp:276kB free_cma:0kB [ 1977.099617] lowmem_reserve[]: 0 0 0 0 0 [ 1977.103764] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.198658] EXT4-fs (loop1): Can't read superblock on 2nd try [ 1977.265204] lowmem_reserve[]: 0 0 0 0 0 [ 1977.348913] Node 1 Normal free:53316kB min:53612kB low:67012kB high:80412kB active_anon:80000kB inactive_anon:3359380kB active_file:704kB inactive_file:304kB unevictable:76972kB writepending:204kB present:3932160kB managed:3870192kB mlocked:76972kB kernel_stack:14656kB pagetables:44700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.613353] lowmem_reserve[]: 0 0 0 0 0 [ 1977.645161] Node 0 DMA: 1*4kB (M) 10*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1977.794766] Node 0 DMA32: 73*4kB (UM) 247*8kB (UM) 1008*16kB (UE) 566*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36508kB [ 1977.921695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1977.945656] Node 1 Normal: 143*4kB (UM) 256*8kB (UE) 74*16kB (UE) 124*32kB (UM) 125*64kB (UME) 32*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53148kB [ 1977.980172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.994009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.002694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.016329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.024977] 19842 total pagecache pages [ 1978.033694] 0 pages in swap cache [ 1978.037267] Swap cache stats: add 0, delete 0, find 0/0 [ 1978.042623] Free swap = 0kB [ 1978.045631] Total swap = 0kB [ 1978.053348] 1965979 pages RAM [ 1978.056504] 0 pages HighMem/MovableOnly [ 1978.060523] 339053 pages reserved [ 1978.063974] 0 pages cma reserved [ 1978.072159] Out of memory: Kill process 27884 (syz-executor.4) score 1008 or sacrifice child [ 1978.104408] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1978.129399] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1978.134561] CPU: 1 PID: 6348 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 1978.142353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.151712] Call Trace: [ 1978.154313] dump_stack+0x13e/0x194 [ 1978.157962] dump_header+0x178/0x6d4 [ 1978.161682] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1978.166698] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1978.171813] ? ___ratelimit+0x50/0x519 [ 1978.175728] oom_kill_process.cold+0x10/0xae3 [ 1978.180228] ? lock_acquire+0x170/0x3f0 [ 1978.184389] ? lock_downgrade+0x6e0/0x6e0 [ 1978.188541] out_of_memory+0x2d5/0x1110 [ 1978.192622] ? oom_killer_disable+0x1c0/0x1c0 [ 1978.197126] ? mutex_trylock+0x152/0x1a0 [ 1978.201214] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1978.206073] ? warn_alloc+0xf0/0xf0 [ 1978.209716] __alloc_pages_nodemask+0x5d3/0x700 [ 1978.214411] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1978.219436] ? lock_downgrade+0x6e0/0x6e0 [ 1978.223600] alloc_pages_current+0xe7/0x1e0 [ 1978.227931] __page_cache_alloc+0x245/0x3d0 [ 1978.232258] filemap_fault+0xc18/0x1c50 [ 1978.236240] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1978.240921] ? lock_acquire+0x170/0x3f0 [ 1978.244904] ? ext4_filemap_fault+0x7c/0xb0 [ 1978.249234] ext4_filemap_fault+0x84/0xb0 [ 1978.253384] __do_fault+0xfa/0x380 [ 1978.257018] __handle_mm_fault+0x22e9/0x3280 [ 1978.261434] ? copy_page_range+0x1d70/0x1d70 [ 1978.265926] ? find_held_lock+0x2d/0x110 [ 1978.270092] handle_mm_fault+0x288/0x7a0 [ 1978.274159] __do_page_fault+0x4bc/0xb40 [ 1978.278224] ? vmalloc_fault+0xdf0/0xdf0 [ 1978.282284] ? do_page_fault+0x60/0x4f2 [ 1978.286264] ? page_fault+0x2f/0x50 [ 1978.289906] page_fault+0x45/0x50 [ 1978.293351] RIP: 55de2ce0:0x1e287b [ 1978.296881] RSP: 1e2bef:00000000000006c9 EFLAGS: 00000005 [ 1978.310225] Mem-Info: [ 1978.327603] active_anon:206737 inactive_anon:1095503 isolated_anon:0 [ 1978.327603] active_file:3 inactive_file:2 isolated_file:0 [ 1978.327603] unevictable:46063 dirty:0 writeback:0 unstable:0 [ 1978.327603] slab_reclaimable:19313 slab_unreclaimable:111613 [ 1978.327603] mapped:66898 shmem:12406 pagetables:18297 bounce:0 [ 1978.327603] free:24947 free_pcp:101 free_cma:0 [ 1978.383349] Node 0 active_anon:746980kB inactive_anon:1022628kB active_file:0kB inactive_file:4kB unevictable:106140kB isolated(anon):0kB isolated(file):0kB mapped:228980kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1978.424681] Node 1 active_anon:79968kB inactive_anon:3359384kB active_file:0kB inactive_file:16kB unevictable:78112kB isolated(anon):0kB isolated(file):0kB mapped:38612kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1978.470385] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.512157] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1978.532224] Node 0 DMA32 free:36188kB min:36272kB low:45340kB high:54408kB active_anon:746920kB inactive_anon:1017552kB active_file:12kB inactive_file:0kB unevictable:106120kB writepending:0kB present:3129332kB managed:2621260kB mlocked:106120kB kernel_stack:12416kB pagetables:28408kB bounce:0kB free_pcp:144kB local_pcp:120kB free_cma:0kB [ 1978.580871] lowmem_reserve[]: 0 0 0 0 0 [ 1978.585161] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.626324] lowmem_reserve[]: 0 0 0 0 0 [ 1978.635689] Node 1 Normal free:53148kB min:53612kB low:67012kB high:80412kB active_anon:79968kB inactive_anon:3359384kB active_file:0kB inactive_file:16kB unevictable:78112kB writepending:0kB present:3932160kB managed:3870192kB mlocked:78112kB kernel_stack:14784kB pagetables:44772kB bounce:0kB free_pcp:260kB local_pcp:120kB free_cma:0kB [ 1978.679851] lowmem_reserve[]: 0 0 0 0 0 [ 1978.684081] Node 0 DMA: 1*4kB (M) 10*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1978.714672] Node 0 DMA32: 29*4kB (U) 233*8kB (U) 1008*16kB (UE) 565*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36188kB [ 1978.742652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1978.770785] Node 1 Normal: 143*4kB (UM) 256*8kB (UE) 74*16kB (UE) 124*32kB (UM) 125*64kB (UME) 32*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53148kB [ 1978.802281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.826360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.847755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.856841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.875351] 19833 total pagecache pages [ 1978.882101] 0 pages in swap cache [ 1978.885713] Swap cache stats: add 0, delete 0, find 0/0 [ 1978.903286] Free swap = 0kB [ 1978.906421] Total swap = 0kB [ 1978.912437] 1965979 pages RAM [ 1978.915688] 0 pages HighMem/MovableOnly [ 1978.944486] 339053 pages reserved [ 1978.954928] 0 pages cma reserved [ 1978.964294] Out of memory: Kill process 27906 (syz-executor.2) score 1009 or sacrifice child [ 1978.991971] Killed process 27906 (syz-executor.2) total-vm:74972kB, anon-rss:18008kB, file-rss:46440kB, shmem-rss:0kB [ 1979.043222] oom_reaper: reaped process 27906 (syz-executor.2), now anon-rss:18020kB, file-rss:13292kB, shmem-rss:0kB 07:52:03 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/498], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1979.650559] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1979.726319] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1979.731952] CPU: 1 PID: 6317 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1979.739418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.748794] Call Trace: [ 1979.751385] dump_stack+0x13e/0x194 [ 1979.754995] dump_header+0x178/0x6d4 [ 1979.758705] ? _raw_spin_unlock_irqrestore+0xb7/0xe0 [ 1979.763787] ? ___ratelimit+0x50/0x519 [ 1979.767657] oom_kill_process.cold+0x10/0xae3 [ 1979.772134] ? lock_downgrade+0x6e0/0x6e0 [ 1979.776267] out_of_memory+0x2d5/0x1110 [ 1979.780238] ? oom_killer_disable+0x1c0/0x1c0 [ 1979.784713] ? mutex_trylock+0x152/0x1a0 [ 1979.788755] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1979.793690] ? warn_alloc+0xf0/0xf0 [ 1979.797312] __alloc_pages_nodemask+0x5d3/0x700 [ 1979.801968] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1979.806971] ? lock_downgrade+0x6e0/0x6e0 [ 1979.811127] alloc_pages_current+0xe7/0x1e0 [ 1979.815432] __page_cache_alloc+0x245/0x3d0 [ 1979.819832] filemap_fault+0xc18/0x1c50 [ 1979.823789] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1979.828469] ? lock_acquire+0x170/0x3f0 [ 1979.832434] ? ext4_filemap_fault+0x7c/0xb0 [ 1979.836762] ext4_filemap_fault+0x84/0xb0 [ 1979.840891] __do_fault+0xfa/0x380 [ 1979.844413] __handle_mm_fault+0x22e9/0x3280 [ 1979.848802] ? copy_page_range+0x1d70/0x1d70 [ 1979.853190] ? find_held_lock+0x2d/0x110 [ 1979.857260] handle_mm_fault+0x288/0x7a0 [ 1979.861320] __do_page_fault+0x4bc/0xb40 [ 1979.865536] ? vmalloc_fault+0xdf0/0xdf0 [ 1979.869577] ? do_page_fault+0x60/0x4f2 [ 1979.873544] ? page_fault+0x2f/0x50 [ 1979.877152] page_fault+0x45/0x50 [ 1979.880600] RIP: 00f1:0x11 [ 1979.883769] RSP: 40000:00007ffd8880f698 EFLAGS: 00000000 [ 1979.899820] Mem-Info: [ 1979.921677] active_anon:206728 inactive_anon:1095523 isolated_anon:0 [ 1979.921677] active_file:37 inactive_file:61 isolated_file:0 [ 1979.921677] unevictable:46007 dirty:0 writeback:0 unstable:0 [ 1979.921677] slab_reclaimable:19377 slab_unreclaimable:111292 [ 1979.921677] mapped:65716 shmem:12406 pagetables:18305 bounce:0 [ 1979.921677] free:25248 free_pcp:75 free_cma:0 [ 1979.963584] Node 0 active_anon:747012kB inactive_anon:1022640kB active_file:60kB inactive_file:36kB unevictable:105632kB isolated(anon):0kB isolated(file):0kB mapped:228448kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1979.997432] Node 1 active_anon:79900kB inactive_anon:3359452kB active_file:72kB inactive_file:72kB unevictable:78396kB isolated(anon):0kB isolated(file):0kB mapped:34316kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1980.277415] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1980.397058] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1980.403782] Node 0 DMA32 free:37936kB min:36272kB low:45340kB high:54408kB active_anon:746952kB inactive_anon:1017564kB active_file:76kB inactive_file:4kB unevictable:104100kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103984kB kernel_stack:12384kB pagetables:28488kB bounce:0kB free_pcp:988kB local_pcp:652kB free_cma:0kB [ 1980.514207] lowmem_reserve[]: 0 0 0 0 0 [ 1980.537679] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1980.645630] lowmem_reserve[]: 0 0 0 0 0 [ 1980.664549] Node 1 Normal free:74628kB min:53612kB low:67012kB high:80412kB active_anon:79900kB inactive_anon:3368732kB active_file:8496kB inactive_file:7848kB unevictable:23896kB writepending:0kB present:3932160kB managed:3870192kB mlocked:23452kB kernel_stack:14400kB pagetables:44724kB bounce:0kB free_pcp:672kB local_pcp:612kB free_cma:0kB [ 1980.775141] lowmem_reserve[]: 0 0 0 0 0 [ 1980.790354] Node 0 DMA: 4*4kB (M) 11*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10456kB [ 1980.856009] Node 0 DMA32: 378*4kB (UME) 418*8kB (UMEH) 1020*16kB (UMEH) 570*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39416kB [ 1980.891164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1980.915493] Node 1 Normal: 843*4kB (UME) 2041*8kB (UME) 824*16kB (UME) 151*32kB (ME) 48*64kB (ME) 29*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 77780kB [ 1980.993151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1981.023450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1981.063077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1981.087323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1981.116267] 19305 total pagecache pages [ 1981.120342] 0 pages in swap cache [ 1981.136588] Swap cache stats: add 0, delete 0, find 0/0 [ 1981.146712] Free swap = 0kB [ 1981.167042] Total swap = 0kB [ 1981.170222] 1965979 pages RAM [ 1981.173345] 0 pages HighMem/MovableOnly [ 1981.197192] 339053 pages reserved [ 1981.207120] 0 pages cma reserved [ 1981.210861] Out of memory: Kill process 27910 (syz-executor.4) score 1008 or sacrifice child 07:52:05 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:05 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:05 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/498], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:05 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000380)=""/71, 0x47}, {&(0x7f0000002000)=""/4109, 0x100d}], 0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x80, 0x2, 0x3}, 0x1}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:05 executing program 3: mlockall(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0)=0x3, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x1) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b50400"/501], 0x1) [ 1982.010023] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1982.189161] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1982.234798] CPU: 0 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1982.242290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.251819] Call Trace: [ 1982.254409] dump_stack+0x13e/0x194 [ 1982.258036] dump_header+0x178/0x6d4 [ 1982.261742] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1982.266749] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1982.271842] ? ___ratelimit+0x50/0x519 [ 1982.275730] oom_kill_process.cold+0x10/0xae3 [ 1982.280217] ? lock_acquire+0x170/0x3f0 [ 1982.284208] ? lock_downgrade+0x6e0/0x6e0 [ 1982.288353] out_of_memory+0x2d5/0x1110 [ 1982.292324] ? oom_killer_disable+0x1c0/0x1c0 [ 1982.296810] ? mutex_trylock+0x152/0x1a0 [ 1982.300867] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1982.305712] ? warn_alloc+0xf0/0xf0 [ 1982.309337] __alloc_pages_nodemask+0x5d3/0x700 [ 1982.313997] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1982.319015] ? lock_downgrade+0x6e0/0x6e0 [ 1982.323163] alloc_pages_current+0xe7/0x1e0 [ 1982.327564] __page_cache_alloc+0x245/0x3d0 [ 1982.331883] filemap_fault+0xc18/0x1c50 [ 1982.335862] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1982.340522] ? lock_acquire+0x170/0x3f0 [ 1982.344486] ? ext4_filemap_fault+0x7c/0xb0 [ 1982.348806] ext4_filemap_fault+0x84/0xb0 [ 1982.352965] __do_fault+0xfa/0x380 [ 1982.356499] __handle_mm_fault+0x22e9/0x3280 [ 1982.360903] ? copy_page_range+0x1d70/0x1d70 [ 1982.365323] ? find_held_lock+0x2d/0x110 [ 1982.369388] handle_mm_fault+0x288/0x7a0 [ 1982.373444] __do_page_fault+0x4bc/0xb40 [ 1982.377498] ? vmalloc_fault+0xdf0/0xdf0 [ 1982.381546] ? do_page_fault+0x60/0x4f2 [ 1982.385513] ? page_fault+0x2f/0x50 [ 1982.389133] page_fault+0x45/0x50 [ 1982.392574] RIP: 0001:0xc433338960 [ 1982.396101] RSP: 104574:000000c4203f1f28 EFLAGS: c43a074f50 [ 1982.927650] Mem-Info: [ 1982.935940] active_anon:207196 inactive_anon:1100021 isolated_anon:0 [ 1982.935940] active_file:12 inactive_file:14 isolated_file:0 [ 1982.935940] unevictable:40396 dirty:0 writeback:0 unstable:0 [ 1982.935940] slab_reclaimable:19136 slab_unreclaimable:112653 [ 1982.935940] mapped:64599 shmem:12406 pagetables:18280 bounce:0 [ 1982.935940] free:24921 free_pcp:40 free_cma:0 [ 1982.979131] Node 0 active_anon:746900kB inactive_anon:1023828kB active_file:4kB inactive_file:16kB unevictable:107648kB isolated(anon):0kB isolated(file):0kB mapped:228312kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1983.012745] Node 1 active_anon:81884kB inactive_anon:3376256kB active_file:48kB inactive_file:36kB unevictable:53936kB isolated(anon):0kB isolated(file):0kB mapped:30084kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1983.076070] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1983.122354] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1983.144385] Node 0 DMA32 free:35740kB min:36272kB low:45340kB high:54408kB active_anon:746840kB inactive_anon:1018752kB active_file:8kB inactive_file:12kB unevictable:107648kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107648kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 1983.194216] lowmem_reserve[]: 0 0 0 0 0 [ 1983.203890] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1983.235878] lowmem_reserve[]: 0 0 0 0 0 [ 1983.253400] Node 1 Normal free:53512kB min:53612kB low:67012kB high:80412kB active_anon:81884kB inactive_anon:3376256kB active_file:20kB inactive_file:64kB unevictable:53936kB writepending:0kB present:3932160kB managed:3870192kB mlocked:53936kB kernel_stack:14656kB pagetables:44824kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1983.292194] lowmem_reserve[]: 0 0 0 0 0 [ 1983.296233] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1983.321500] Node 0 DMA32: 7*4kB (UM) 109*8kB (UM) 1041*16kB (UME) 568*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35732kB [ 1983.344450] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1983.364833] Node 1 Normal: 180*4kB (UME) 293*8kB (UME) 313*16kB (UME) 166*32kB (UME) 49*64kB (UME) 29*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53512kB [ 1983.386464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1983.415934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1983.443411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1983.455232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1983.485764] 17541 total pagecache pages [ 1983.506102] 0 pages in swap cache [ 1983.514444] Swap cache stats: add 0, delete 0, find 0/0 [ 1983.535967] Free swap = 0kB [ 1983.545495] Total swap = 0kB [ 1983.574193] 1965979 pages RAM [ 1983.582349] 0 pages HighMem/MovableOnly [ 1983.586341] 339053 pages reserved [ 1983.601828] 0 pages cma reserved [ 1983.605220] Out of memory: Kill process 27955 (syz-executor.0) score 1007 or sacrifice child [ 1983.625861] Killed process 27966 (syz-executor.0) total-vm:74972kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1983.723674] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1983.796559] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1983.835112] CPU: 0 PID: 27962 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1983.843046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.852398] Call Trace: [ 1983.855010] dump_stack+0x13e/0x194 [ 1983.858730] dump_header+0x178/0x6d4 [ 1983.862442] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1983.867457] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1983.872556] ? ___ratelimit+0x50/0x519 [ 1983.876441] oom_kill_process.cold+0x10/0xae3 [ 1983.880936] ? lock_downgrade+0x6e0/0x6e0 [ 1983.885085] out_of_memory+0x2d5/0x1110 [ 1983.889063] ? oom_killer_disable+0x1c0/0x1c0 [ 1983.893555] ? mutex_trylock+0x152/0x1a0 [ 1983.897615] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1983.902469] ? warn_alloc+0xf0/0xf0 [ 1983.906106] __alloc_pages_nodemask+0x5d3/0x700 [ 1983.910771] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1983.915784] ? lock_downgrade+0x6e0/0x6e0 [ 1983.919937] alloc_pages_current+0xe7/0x1e0 [ 1983.924258] __page_cache_alloc+0x245/0x3d0 [ 1983.928575] filemap_fault+0xc18/0x1c50 [ 1983.932662] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1983.937331] ? lock_acquire+0x170/0x3f0 [ 1983.941312] ? ext4_filemap_fault+0x7c/0xb0 [ 1983.945653] ext4_filemap_fault+0x84/0xb0 [ 1983.949899] __do_fault+0xfa/0x380 [ 1983.953492] __handle_mm_fault+0x22e9/0x3280 [ 1983.957912] ? copy_page_range+0x1d70/0x1d70 [ 1983.962331] ? find_held_lock+0x2d/0x110 [ 1983.967468] handle_mm_fault+0x288/0x7a0 [ 1983.971531] __get_user_pages+0x44d/0x11e0 [ 1983.975774] ? follow_page_mask+0x1580/0x1580 [ 1983.980275] ? lock_acquire+0x170/0x3f0 [ 1983.984243] ? __mm_populate+0x1e3/0x2c0 [ 1983.988306] populate_vma_page_range+0x17b/0x210 [ 1983.993063] __mm_populate+0x195/0x2c0 [ 1983.996949] ? populate_vma_page_range+0x210/0x210 [ 1984.001873] ? security_capable+0x88/0xb0 [ 1984.006026] SyS_mlockall+0x3f5/0x520 [ 1984.009824] ? SyS_munlock+0xf0/0xf0 [ 1984.013534] do_syscall_64+0x1d5/0x640 [ 1984.017514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1984.022700] RIP: 0033:0x45ca29 [ 1984.025885] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1984.033615] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1984.040882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1984.048148] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1984.055416] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1984.062693] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 [ 1984.083104] Mem-Info: [ 1984.085814] active_anon:207192 inactive_anon:1100001 isolated_anon:0 [ 1984.085814] active_file:13 inactive_file:13 isolated_file:0 [ 1984.085814] unevictable:40396 dirty:0 writeback:0 unstable:0 [ 1984.085814] slab_reclaimable:19136 slab_unreclaimable:112633 [ 1984.085814] mapped:64599 shmem:12406 pagetables:18249 bounce:0 [ 1984.085814] free:24887 free_pcp:162 free_cma:0 [ 1984.122883] Node 0 active_anon:746892kB inactive_anon:1023828kB active_file:12kB inactive_file:8kB unevictable:107648kB isolated(anon):0kB isolated(file):0kB mapped:228312kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1984.173616] Node 1 active_anon:81876kB inactive_anon:3376176kB active_file:40kB inactive_file:44kB unevictable:53940kB isolated(anon):0kB isolated(file):0kB mapped:30088kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1984.221642] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1984.256347] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1984.261505] Node 0 DMA32 free:35584kB min:36272kB low:45340kB high:54408kB active_anon:746832kB inactive_anon:1018752kB active_file:0kB inactive_file:24kB unevictable:107648kB writepending:0kB present:3129332kB managed:2621260kB mlocked:107648kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:176kB local_pcp:44kB free_cma:0kB [ 1984.316793] lowmem_reserve[]: 0 0 0 0 0 [ 1984.320824] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1984.593070] lowmem_reserve[]: 0 0 0 0 0 [ 1984.631469] Node 1 Normal free:53132kB min:53612kB low:67012kB high:80412kB active_anon:81876kB inactive_anon:3376176kB active_file:100kB inactive_file:76kB unevictable:53940kB writepending:0kB present:3932160kB managed:3870192kB mlocked:53940kB kernel_stack:14592kB pagetables:44700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1984.931792] lowmem_reserve[]: 0 0 0 0 0 [ 1984.935838] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1985.095997] Node 0 DMA32: 13*4kB (UME) 107*8kB (UM) 1041*16kB (UME) 567*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35708kB [ 1985.224057] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1985.326804] Node 1 Normal: 212*4kB (UME) 294*8kB (UME) 316*16kB (UME) 170*32kB (UME) 50*64kB (UME) 29*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53888kB [ 1985.474430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1985.564259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1985.626741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1985.635638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1985.664776] 16825 total pagecache pages [ 1985.668844] 0 pages in swap cache [ 1985.672299] Swap cache stats: add 0, delete 0, find 0/0 [ 1985.677718] Free swap = 0kB [ 1985.680727] Total swap = 0kB [ 1985.683740] 1965979 pages RAM [ 1985.687105] 0 pages HighMem/MovableOnly [ 1985.691103] 339053 pages reserved [ 1985.694548] 0 pages cma reserved [ 1985.697983] Out of memory: Kill process 27955 (syz-executor.0) score 1007 or sacrifice child [ 1985.706586] Killed process 27955 (syz-executor.0) total-vm:75236kB, anon-rss:17976kB, file-rss:39340kB, shmem-rss:0kB [ 1985.741565] oom_reaper: reaped process 27955 (syz-executor.0), now anon-rss:18016kB, file-rss:5580kB, shmem-rss:0kB 07:52:10 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000380)=0x4) 07:52:10 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/500], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:10 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7f}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:10 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1986.755065] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1986.839828] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1986.895059] CPU: 1 PID: 27974 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 1986.902978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.912417] Call Trace: [ 1986.915009] dump_stack+0x13e/0x194 [ 1986.918640] dump_header+0x178/0x6d4 [ 1986.922349] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1986.927363] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1986.932474] ? ___ratelimit+0x50/0x519 [ 1986.936374] oom_kill_process.cold+0x10/0xae3 [ 1986.940882] ? lock_downgrade+0x6e0/0x6e0 [ 1986.945039] out_of_memory+0x2d5/0x1110 [ 1986.949018] ? oom_killer_disable+0x1c0/0x1c0 [ 1986.953534] ? mutex_trylock+0x152/0x1a0 [ 1986.957595] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1986.962455] ? warn_alloc+0xf0/0xf0 [ 1986.966089] __alloc_pages_nodemask+0x5d3/0x700 [ 1986.970758] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1986.975777] ? find_held_lock+0x2d/0x110 [ 1986.979848] alloc_pages_vma+0xc2/0x4a0 [ 1986.983829] __handle_mm_fault+0x17b6/0x3280 [ 1986.988239] ? copy_page_range+0x1d70/0x1d70 [ 1986.992651] ? find_held_lock+0x2d/0x110 [ 1986.996717] handle_mm_fault+0x288/0x7a0 [ 1987.000780] __get_user_pages+0x44d/0x11e0 [ 1987.005025] ? follow_page_mask+0x1580/0x1580 [ 1987.009521] ? lock_acquire+0x170/0x3f0 [ 1987.013487] ? __mm_populate+0x1e3/0x2c0 [ 1987.017546] populate_vma_page_range+0x17b/0x210 [ 1987.022303] __mm_populate+0x195/0x2c0 [ 1987.026219] ? populate_vma_page_range+0x210/0x210 [ 1987.031147] ? security_capable+0x88/0xb0 [ 1987.035304] SyS_mlockall+0x3f5/0x520 [ 1987.039103] ? SyS_munlock+0xf0/0xf0 [ 1987.042816] do_syscall_64+0x1d5/0x640 [ 1987.046715] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1987.051987] RIP: 0033:0x45ca29 [ 1987.055182] RSP: 002b:00007fab877c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1987.062888] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1987.070153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1987.077418] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1987.084693] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1987.091985] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fab877c96d4 [ 1987.362048] Mem-Info: [ 1987.364711] active_anon:207584 inactive_anon:1100001 isolated_anon:0 [ 1987.364711] active_file:44 inactive_file:25 isolated_file:0 [ 1987.364711] unevictable:39306 dirty:0 writeback:0 unstable:0 [ 1987.364711] slab_reclaimable:19133 slab_unreclaimable:113082 [ 1987.364711] mapped:63924 shmem:12406 pagetables:18311 bounce:0 [ 1987.364711] free:24955 free_pcp:0 free_cma:0 [ 1987.436701] Node 0 active_anon:746980kB inactive_anon:1023828kB active_file:60kB inactive_file:56kB unevictable:101304kB isolated(anon):0kB isolated(file):0kB mapped:226832kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1987.598072] Node 1 active_anon:83356kB inactive_anon:3376176kB active_file:100kB inactive_file:0kB unevictable:55920kB isolated(anon):0kB isolated(file):0kB mapped:28864kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1987.757493] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1987.968659] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1988.016079] Node 0 DMA32 free:35936kB min:36272kB low:45340kB high:54408kB active_anon:746920kB inactive_anon:1018752kB active_file:4kB inactive_file:100kB unevictable:101308kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101308kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1988.193014] lowmem_reserve[]: 0 0 0 0 0 [ 1988.256622] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1988.456866] lowmem_reserve[]: 0 0 0 0 0 [ 1988.481069] Node 1 Normal free:53548kB min:53612kB low:67012kB high:80412kB active_anon:83356kB inactive_anon:3376176kB active_file:100kB inactive_file:48kB unevictable:55920kB writepending:0kB present:3932160kB managed:3870192kB mlocked:55920kB kernel_stack:14624kB pagetables:44948kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1988.674652] lowmem_reserve[]: 0 0 0 0 0 [ 1988.686676] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1988.791980] Node 0 DMA32: 454*4kB (UME) 132*8kB (UME) 946*16kB (UME) 566*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 1988.881286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1988.915880] Node 1 Normal: 241*4kB (UME) 618*8kB (UME) 159*16kB (UME) 153*32kB (UME) 54*64kB (UME) 30*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53924kB [ 1988.954473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1988.974604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1989.044560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1989.093301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1989.148716] 16868 total pagecache pages [ 1989.175166] 0 pages in swap cache [ 1989.197150] Swap cache stats: add 0, delete 0, find 0/0 [ 1989.218084] Free swap = 0kB [ 1989.258783] Total swap = 0kB [ 1989.268556] 1965979 pages RAM [ 1989.291622] 0 pages HighMem/MovableOnly [ 1989.318846] 339053 pages reserved [ 1989.341126] 0 pages cma reserved [ 1989.361775] Out of memory: Kill process 27972 (syz-executor.2) score 1007 or sacrifice child [ 1989.423505] Killed process 27976 (syz-executor.2) total-vm:74840kB, anon-rss:16936kB, file-rss:40176kB, shmem-rss:0kB [ 1989.502130] oom_reaper: reaped process 27976 (syz-executor.2), now anon-rss:16972kB, file-rss:5360kB, shmem-rss:0kB 07:52:13 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/500], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:13 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x60}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x1a}, @generic={0x6, 0x7, 0xd, 0x6, 0x9}, @generic={0xff, 0x2, 0x1, 0x5, 0xab5a}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0xf8000000, 0xbd, &(0x7f0000000380)=""/189, 0x41100, 0x8, [], 0x0, 0x9, r0, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x1, 0x17, 0x3}, 0x10, 0xffffffffffffffff, r2}, 0x78) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f800000300000030030000980200000000000000000000000000000000000098020000987b0000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/501], 0x1) 07:52:13 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098060000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f7365300000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056671cdcdf5b16a4e51417a58ef812858c136bfd7d8684b46a598aecbcd99e24bcb367643edb0f24efae23e8353538820dafc9991afdcc2fe509fc7e588374d2d1bbecb0683a3a24cf75e06b9d514c85df1132ba5218d98bca9ccc665d1cb1a267800ea5b527a3d05bd4151966963efc45154c740e1acd3b99ef5cdb35c30f0a88bf272d2460bc3a815a8b467b2cac09c70ff215953e9eae24363337415c43ca9ab93b86765ca9580abde5dafeedc1a37a58cc14973f906d845354ab00538d573bdde4e16746df162af0b0055edce0bb047967d8519c8970a38f157a9679438a4231868da16ef6a64bd5fdbf4cf72ce6bb7174b3a0cbd67cfe58618c95282cfc198dd6e5fcfe465637d9d520bf908d2927a47b4034432f3ead494e6d8d819d241af8811dd1b25314c78da359721546467fe4182b8a215679e01aeeadabecbc087362d1092f4e9d"], 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000380)={0x990000, 0x93, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xa30001, 0x3, [], @p_u16=&(0x7f0000000180)=0x5702}}) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:13 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1, 0x10, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000380)) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:14 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1990.451791] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1990.573184] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1990.610682] CPU: 0 PID: 6318 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1990.618158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.627611] Call Trace: [ 1990.630197] dump_stack+0x13e/0x194 [ 1990.633825] dump_header+0x178/0x6d4 [ 1990.637545] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1990.642554] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1990.647646] ? ___ratelimit+0x50/0x519 [ 1990.651530] oom_kill_process.cold+0x10/0xae3 [ 1990.656022] ? lock_downgrade+0x6e0/0x6e0 [ 1990.660168] out_of_memory+0x2d5/0x1110 [ 1990.664140] ? oom_killer_disable+0x1c0/0x1c0 [ 1990.668624] ? mutex_trylock+0x152/0x1a0 [ 1990.672675] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1990.677519] ? warn_alloc+0xf0/0xf0 [ 1990.681152] __alloc_pages_nodemask+0x5d3/0x700 [ 1990.685901] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1990.690909] ? lock_downgrade+0x6e0/0x6e0 [ 1990.695053] alloc_pages_current+0xe7/0x1e0 [ 1990.699370] __page_cache_alloc+0x245/0x3d0 [ 1990.703686] filemap_fault+0xc18/0x1c50 [ 1990.707660] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1990.712320] ? lock_acquire+0x170/0x3f0 [ 1990.716279] ? ext4_filemap_fault+0x7c/0xb0 [ 1990.720653] ext4_filemap_fault+0x84/0xb0 [ 1990.724821] __do_fault+0xfa/0x380 [ 1990.728337] __handle_mm_fault+0x22e9/0x3280 [ 1990.732758] ? copy_page_range+0x1d70/0x1d70 [ 1990.737181] ? find_held_lock+0x2d/0x110 [ 1990.741220] handle_mm_fault+0x288/0x7a0 [ 1990.745301] __do_page_fault+0x4bc/0xb40 [ 1990.749339] ? vmalloc_fault+0xdf0/0xdf0 [ 1990.753385] ? do_page_fault+0x60/0x4f2 [ 1990.757386] ? page_fault+0x2f/0x50 [ 1990.761024] page_fault+0x45/0x50 [ 1990.764453] RIP: 00f1:0x11 [ 1990.767315] RSP: 000c:000000c42004ff18 EFLAGS: 0042f0a0 [ 1990.813686] Mem-Info: [ 1990.821641] active_anon:207465 inactive_anon:1100001 isolated_anon:0 [ 1990.821641] active_file:40 inactive_file:0 isolated_file:0 [ 1990.821641] unevictable:39054 dirty:3 writeback:0 unstable:0 [ 1990.821641] slab_reclaimable:19043 slab_unreclaimable:113756 [ 1990.821641] mapped:64858 shmem:12406 pagetables:18245 bounce:0 [ 1990.821641] free:25079 free_pcp:30 free_cma:0 [ 1990.876520] Node 0 active_anon:747020kB inactive_anon:1023828kB active_file:0kB inactive_file:16kB unevictable:102400kB isolated(anon):0kB isolated(file):0kB mapped:227204kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1990.931179] Node 1 active_anon:82840kB inactive_anon:3376176kB active_file:48kB inactive_file:72kB unevictable:53920kB isolated(anon):0kB isolated(file):0kB mapped:32292kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1990.972014] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.011143] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1991.016263] Node 0 DMA32 free:36248kB min:36272kB low:45340kB high:54408kB active_anon:746960kB inactive_anon:1018752kB active_file:0kB inactive_file:4kB unevictable:102400kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102400kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.054842] lowmem_reserve[]: 0 0 0 0 0 [ 1991.058978] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.092268] lowmem_reserve[]: 0 0 0 0 0 [ 1991.096368] Node 1 Normal free:53492kB min:53612kB low:67012kB high:80412kB active_anon:82840kB inactive_anon:3376176kB active_file:68kB inactive_file:52kB unevictable:53920kB writepending:0kB present:3932160kB managed:3870192kB mlocked:53920kB kernel_stack:14560kB pagetables:44684kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1991.133848] lowmem_reserve[]: 0 0 0 0 0 [ 1991.137941] Node 0 DMA: 5*4kB (ME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1991.161231] Node 0 DMA32: 374*4kB (UM) 178*8kB (UME) 947*16kB (UE) 568*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36248kB [ 1991.182278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1991.195060] Node 1 Normal: 263*4kB (UME) 239*8kB (UME) 214*16kB (UME) 196*32kB (UME) 58*64kB (UME) 30*128kB (UME) 22*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53492kB [ 1991.220573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1991.233483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1991.254681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1991.266025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1991.284006] 17797 total pagecache pages [ 1991.290776] 0 pages in swap cache [ 1991.294447] Swap cache stats: add 0, delete 0, find 0/0 [ 1991.309635] Free swap = 0kB [ 1991.313704] Total swap = 0kB [ 1991.324588] 1965979 pages RAM [ 1991.333405] 0 pages HighMem/MovableOnly [ 1991.345123] 339053 pages reserved [ 1991.354314] 0 pages cma reserved [ 1991.365500] Out of memory: Kill process 14715 (syz-executor.1) score 1007 or sacrifice child [ 1991.378830] Killed process 14715 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 1991.538934] oom_reaper: reaped process 14715 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1992.085489] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1992.124022] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1992.132281] CPU: 1 PID: 27990 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1992.140186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.149798] Call Trace: [ 1992.152429] dump_stack+0x13e/0x194 [ 1992.156215] dump_header+0x178/0x6d4 [ 1992.159944] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1992.165363] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1992.171417] ? ___ratelimit+0x50/0x519 [ 1992.175318] oom_kill_process.cold+0x10/0xae3 [ 1992.179906] ? lock_acquire+0x170/0x3f0 [ 1992.184345] ? lock_downgrade+0x6e0/0x6e0 [ 1992.188497] out_of_memory+0x2d5/0x1110 [ 1992.192713] ? oom_killer_disable+0x1c0/0x1c0 [ 1992.197463] ? mutex_trylock+0x152/0x1a0 [ 1992.201682] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1992.206729] ? warn_alloc+0xf0/0xf0 [ 1992.210411] __alloc_pages_nodemask+0x5d3/0x700 [ 1992.215090] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1992.220363] ? find_held_lock+0x2d/0x110 [ 1992.224952] alloc_pages_vma+0xc2/0x4a0 [ 1992.229184] __handle_mm_fault+0x17b6/0x3280 [ 1992.233743] ? copy_page_range+0x1d70/0x1d70 [ 1992.238808] ? find_held_lock+0x2d/0x110 [ 1992.243219] handle_mm_fault+0x288/0x7a0 [ 1992.247580] __get_user_pages+0x44d/0x11e0 [ 1992.252215] ? follow_page_mask+0x1580/0x1580 [ 1992.257137] ? lock_acquire+0x170/0x3f0 [ 1992.261541] ? __mm_populate+0x1e3/0x2c0 [ 1992.265736] populate_vma_page_range+0x17b/0x210 [ 1992.270491] __mm_populate+0x195/0x2c0 [ 1992.274522] ? populate_vma_page_range+0x210/0x210 [ 1992.279610] ? security_capable+0x88/0xb0 [ 1992.283792] SyS_mlockall+0x3f5/0x520 [ 1992.287997] ? SyS_munlock+0xf0/0xf0 [ 1992.292248] do_syscall_64+0x1d5/0x640 [ 1992.296655] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1992.302067] RIP: 0033:0x45ca29 [ 1992.305704] RSP: 002b:00007f47d6236c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1992.313426] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1992.320878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1992.328630] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1992.336009] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1992.343476] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f47d62376d4 [ 1992.362077] Mem-Info: [ 1992.364851] active_anon:207456 inactive_anon:1095438 isolated_anon:0 [ 1992.364851] active_file:19 inactive_file:34 isolated_file:0 [ 1992.364851] unevictable:44470 dirty:0 writeback:0 unstable:0 [ 1992.364851] slab_reclaimable:19075 slab_unreclaimable:113043 [ 1992.364851] mapped:64954 shmem:12406 pagetables:18223 bounce:0 [ 1992.364851] free:24902 free_pcp:88 free_cma:0 [ 1992.407694] Node 0 active_anon:747020kB inactive_anon:1023828kB active_file:0kB inactive_file:16kB unevictable:103032kB isolated(anon):0kB isolated(file):0kB mapped:227204kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.440328] Node 1 active_anon:82804kB inactive_anon:3357924kB active_file:72kB inactive_file:28kB unevictable:74976kB isolated(anon):0kB isolated(file):0kB mapped:32612kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.485293] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.529132] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1992.535036] Node 0 DMA32 free:35820kB min:36272kB low:45340kB high:54408kB active_anon:746960kB inactive_anon:1018752kB active_file:0kB inactive_file:4kB unevictable:103032kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103032kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.577955] lowmem_reserve[]: 0 0 0 0 0 [ 1992.582007] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.625254] lowmem_reserve[]: 0 0 0 0 0 [ 1992.639701] Node 1 Normal free:53440kB min:53612kB low:67012kB high:80412kB active_anon:82804kB inactive_anon:3357924kB active_file:180kB inactive_file:0kB unevictable:74976kB writepending:0kB present:3932160kB managed:3870192kB mlocked:74976kB kernel_stack:14528kB pagetables:44596kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1992.680860] lowmem_reserve[]: 0 0 0 0 0 [ 1992.684904] Node 0 DMA: 5*4kB (ME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1992.712176] Node 0 DMA32: 231*4kB (UME) 196*8kB (UE) 945*16kB (UE) 569*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35820kB [ 1992.735975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1992.757493] Node 1 Normal: 222*4kB (UME) 331*8kB (UE) 221*16kB (UE) 27*32kB (UE) 49*64kB (UME) 57*128kB (UME) 29*256kB (UME) 26*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53440kB [ 1992.784601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.793627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.815355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.842286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.854225] 17880 total pagecache pages [ 1992.862534] 0 pages in swap cache [ 1992.879700] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.885352] Free swap = 0kB [ 1992.914525] Total swap = 0kB [ 1992.920454] 1965979 pages RAM [ 1992.931495] 0 pages HighMem/MovableOnly [ 1992.940573] 339053 pages reserved [ 1992.948962] 0 pages cma reserved [ 1992.955903] Out of memory: Kill process 27989 (syz-executor.3) score 1007 or sacrifice child [ 1992.974995] Killed process 27990 (syz-executor.3) total-vm:74840kB, anon-rss:14560kB, file-rss:40176kB, shmem-rss:0kB [ 1993.018362] oom_reaper: reaped process 27990 (syz-executor.3), now anon-rss:14656kB, file-rss:5360kB, shmem-rss:0kB 07:52:17 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:17 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9400, 0xc5de}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) r7 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x80000001, 0xc0) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:17 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/500], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:17 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x5, 0x8}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f7365300000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1994.425456] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1994.553084] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1994.588802] CPU: 1 PID: 28013 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1994.596828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.606188] Call Trace: [ 1994.608790] dump_stack+0x13e/0x194 [ 1994.612546] dump_header+0x178/0x6d4 [ 1994.616298] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1994.621320] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1994.626425] ? ___ratelimit+0x50/0x519 [ 1994.630340] oom_kill_process.cold+0x10/0xae3 [ 1994.634967] ? lock_acquire+0x170/0x3f0 [ 1994.638946] ? lock_downgrade+0x6e0/0x6e0 [ 1994.643106] out_of_memory+0x2d5/0x1110 [ 1994.647186] ? oom_killer_disable+0x1c0/0x1c0 [ 1994.652025] ? mutex_trylock+0x152/0x1a0 [ 1994.656100] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1994.661112] ? warn_alloc+0xf0/0xf0 [ 1994.664777] __alloc_pages_nodemask+0x5d3/0x700 [ 1994.669461] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1994.674629] ? find_held_lock+0x2d/0x110 [ 1994.678964] alloc_pages_vma+0xc2/0x4a0 [ 1994.683041] __handle_mm_fault+0x17b6/0x3280 [ 1994.687460] ? copy_page_range+0x1d70/0x1d70 [ 1994.692043] ? find_held_lock+0x2d/0x110 [ 1994.696533] handle_mm_fault+0x288/0x7a0 [ 1994.700617] __get_user_pages+0x44d/0x11e0 [ 1994.705029] ? follow_page_mask+0x1580/0x1580 [ 1994.709648] ? lock_acquire+0x170/0x3f0 [ 1994.713873] ? __mm_populate+0x1e3/0x2c0 [ 1994.717947] populate_vma_page_range+0x17b/0x210 [ 1994.722745] __mm_populate+0x195/0x2c0 [ 1994.726733] ? populate_vma_page_range+0x210/0x210 [ 1994.731944] ? security_capable+0x88/0xb0 [ 1994.736282] SyS_mlockall+0x3f5/0x520 [ 1994.740195] ? SyS_munlock+0xf0/0xf0 [ 1994.743932] do_syscall_64+0x1d5/0x640 [ 1994.747835] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1994.753031] RIP: 0033:0x45ca29 [ 1994.756235] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1994.764187] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1994.772166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1994.779532] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1994.786807] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1994.794077] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 [ 1994.802856] Mem-Info: [ 1994.805602] active_anon:207642 inactive_anon:1095438 isolated_anon:0 [ 1994.805602] active_file:5 inactive_file:2 isolated_file:0 [ 1994.805602] unevictable:43330 dirty:1 writeback:0 unstable:0 [ 1994.805602] slab_reclaimable:19042 slab_unreclaimable:113676 [ 1994.805602] mapped:64764 shmem:12406 pagetables:18214 bounce:0 [ 1994.805602] free:25098 free_pcp:0 free_cma:0 [ 1994.840581] Node 0 active_anon:746364kB inactive_anon:1023828kB active_file:0kB inactive_file:4kB unevictable:101520kB isolated(anon):0kB isolated(file):0kB mapped:226952kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1994.918518] Node 1 active_anon:84164kB inactive_anon:3357988kB active_file:32kB inactive_file:40kB unevictable:72212kB isolated(anon):0kB isolated(file):0kB mapped:32160kB dirty:24kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1994.948597] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1994.976395] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1994.981695] Node 0 DMA32 free:36344kB min:36272kB low:45340kB high:54408kB active_anon:746304kB inactive_anon:1018752kB active_file:0kB inactive_file:208kB unevictable:101588kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101588kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 1995.012762] lowmem_reserve[]: 0 0 0 0 0 [ 1995.017068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.043041] lowmem_reserve[]: 0 0 0 0 0 [ 1995.047511] Node 1 Normal free:53620kB min:53612kB low:67012kB high:80412kB active_anon:84164kB inactive_anon:3357988kB active_file:52kB inactive_file:152kB unevictable:72212kB writepending:24kB present:3932160kB managed:3870192kB mlocked:72212kB kernel_stack:14528kB pagetables:44620kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1995.128610] lowmem_reserve[]: 0 0 0 0 0 [ 1995.132897] Node 0 DMA: 5*4kB (ME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1995.267007] Node 0 DMA32: 529*4kB (UME) 96*8kB (UME) 955*16kB (UME) 570*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36404kB [ 1995.355294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1995.382615] Node 1 Normal: 261*4kB (UME) 59*8kB (UME) 175*16kB (UME) 85*32kB (UME) 51*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53692kB [ 1995.499072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.550836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.603118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.669015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.730627] 17698 total pagecache pages [ 1995.756446] 0 pages in swap cache [ 1995.779742] Swap cache stats: add 0, delete 0, find 0/0 [ 1995.815713] Free swap = 0kB [ 1995.837897] Total swap = 0kB [ 1995.856803] 1965979 pages RAM [ 1995.874319] 0 pages HighMem/MovableOnly [ 1995.921655] 339053 pages reserved [ 1995.947525] 0 pages cma reserved [ 1995.964831] Out of memory: Kill process 28004 (syz-executor.0) score 1007 or sacrifice child [ 1996.011671] Killed process 28017 (syz-executor.0) total-vm:74972kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 1996.119319] oom_reaper: reaped process 28017 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1996.181342] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1996.271777] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1996.302123] CPU: 0 PID: 6318 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1996.310139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.319992] Call Trace: [ 1996.322684] dump_stack+0x13e/0x194 [ 1996.327636] dump_header+0x178/0x6d4 [ 1996.331560] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1996.336685] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1996.341961] ? ___ratelimit+0x50/0x519 [ 1996.347694] oom_kill_process.cold+0x10/0xae3 [ 1996.352295] ? lock_downgrade+0x6e0/0x6e0 [ 1996.356459] out_of_memory+0x2d5/0x1110 [ 1996.360448] ? oom_killer_disable+0x1c0/0x1c0 [ 1996.364953] ? mutex_trylock+0x152/0x1a0 [ 1996.369031] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1996.373895] ? warn_alloc+0xf0/0xf0 [ 1996.377542] __alloc_pages_nodemask+0x5d3/0x700 [ 1996.382492] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1996.387643] ? lock_downgrade+0x6e0/0x6e0 [ 1996.391810] alloc_pages_current+0xe7/0x1e0 [ 1996.396285] __page_cache_alloc+0x245/0x3d0 [ 1996.400618] filemap_fault+0xc18/0x1c50 [ 1996.404742] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1996.409546] ? lock_acquire+0x170/0x3f0 [ 1996.413691] ? ext4_filemap_fault+0x7c/0xb0 [ 1996.418031] ext4_filemap_fault+0x84/0xb0 [ 1996.422411] __do_fault+0xfa/0x380 [ 1996.426091] __handle_mm_fault+0x22e9/0x3280 [ 1996.430512] ? copy_page_range+0x1d70/0x1d70 [ 1996.435066] ? find_held_lock+0x2d/0x110 [ 1996.439152] handle_mm_fault+0x288/0x7a0 [ 1996.443519] __do_page_fault+0x4bc/0xb40 [ 1996.449023] ? vmalloc_fault+0xdf0/0xdf0 [ 1996.453473] ? do_page_fault+0x60/0x4f2 [ 1996.457464] ? page_fault+0x2f/0x50 [ 1996.461278] page_fault+0x45/0x50 [ 1996.464835] RIP: 00f1:0x11 [ 1996.467843] RSP: 000d:000000c42004ff20 EFLAGS: 0042f0a0 [ 1996.927085] Mem-Info: [ 1996.935169] active_anon:207628 inactive_anon:1095438 isolated_anon:0 [ 1996.935169] active_file:19 inactive_file:1 isolated_file:6 [ 1996.935169] unevictable:43618 dirty:6 writeback:0 unstable:0 [ 1996.935169] slab_reclaimable:19087 slab_unreclaimable:113602 [ 1996.935169] mapped:64859 shmem:12406 pagetables:18196 bounce:0 [ 1996.935169] free:25141 free_pcp:0 free_cma:0 [ 1996.978958] Node 0 active_anon:746364kB inactive_anon:1024328kB active_file:4kB inactive_file:0kB unevictable:101216kB isolated(anon):0kB isolated(file):0kB mapped:227080kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1997.011688] Node 1 active_anon:84148kB inactive_anon:3357924kB active_file:44kB inactive_file:200kB unevictable:52156kB isolated(anon):0kB isolated(file):24kB mapped:28256kB dirty:24kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 07:52:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) statx(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000000380)) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffa4d}, 0x18051, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xac72}, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x100000080000000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="58e9c3450106bd8784fa355bcbe9901d5f66cb080d71c14ce30a09f8fd36982268cd1f7d034f9adf7d4f31b2d9d4bfde51e634d153cb01ed3ba0c658258b6d99f65356b28bf4077dcbc3ffec0f803d74ca37026543b30706a02d917ecd65e42c116938fad741e5aa6306ccfdab8c0a47d2bdb79fb694e84576be30b1638d2adbae442a464b422c7630f0f30ec75346ec739e87bf1408403a0118d80aa10f728d18ed2038ae46d01e82476ed45f3832a296605672801df8600e44839953a9ed33a9bc1f00"], 0x1) [ 1997.182457] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:21 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1997.264489] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1997.311305] Node 0 DMA32 free:36888kB min:36272kB low:45340kB high:54408kB active_anon:746304kB inactive_anon:1018752kB active_file:4kB inactive_file:0kB unevictable:100716kB writepending:0kB present:3129332kB managed:2621260kB mlocked:100696kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:1000kB local_pcp:708kB free_cma:0kB 07:52:21 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000380)={0x6c3e7e61, 0x2, 'client0\x00', 0x0, "0ff09bb14c794c09", "fa3f988355cfff1b71c7a810c0b581e395af0f2fbc1186e8ca06838b010bde02", 0x5, 0x3ff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:21 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000380)=""/164, 0xa4}], 0x2, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/205, 0xcd}], 0x7, 0x0) [ 1997.483100] lowmem_reserve[]: 0 0 0 0 0 07:52:21 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 1997.511312] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.653217] lowmem_reserve[]: 0 0 0 0 0 [ 1997.702363] Node 1 Normal free:54484kB min:53612kB low:67012kB high:80412kB active_anon:84148kB inactive_anon:3357924kB active_file:5704kB inactive_file:6776kB unevictable:57132kB writepending:24kB present:3932160kB managed:3870192kB mlocked:56988kB kernel_stack:14624kB pagetables:44492kB bounce:0kB free_pcp:484kB local_pcp:148kB free_cma:0kB [ 1997.864106] lowmem_reserve[]: 0 0 0 0 0 [ 1997.874712] Node 0 DMA: 5*4kB (ME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1997.908194] Node 0 DMA32: 516*4kB (UME) 77*8kB (UE) 958*16kB (UME) 566*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 1997.922938] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1997.948024] Node 1 Normal: 345*4kB (UME) 210*8kB (UME) 60*16kB (UME) 84*32kB (UE) 62*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 54068kB [ 1997.999412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1998.009387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1998.019281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1998.035306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1998.044520] 19362 total pagecache pages [ 1998.069948] 0 pages in swap cache [ 1998.081978] Swap cache stats: add 0, delete 0, find 0/0 [ 1998.141729] Free swap = 0kB [ 1998.183536] Total swap = 0kB [ 1998.210096] 1965979 pages RAM [ 1998.233231] 0 pages HighMem/MovableOnly [ 1998.265507] 339053 pages reserved [ 1998.290986] 0 pages cma reserved [ 1998.318484] Out of memory: Kill process 28004 (syz-executor.0) score 1008 or sacrifice child [ 1998.475303] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1998.561226] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1998.602165] CPU: 0 PID: 28020 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1998.610098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.619807] Call Trace: [ 1998.622580] dump_stack+0x13e/0x194 [ 1998.626516] dump_header+0x178/0x6d4 [ 1998.630256] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1998.635586] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1998.641056] ? ___ratelimit+0x50/0x519 [ 1998.645144] oom_kill_process.cold+0x10/0xae3 [ 1998.649792] ? lock_downgrade+0x6e0/0x6e0 [ 1998.653965] out_of_memory+0x2d5/0x1110 [ 1998.657983] ? oom_killer_disable+0x1c0/0x1c0 [ 1998.662672] ? mutex_trylock+0x152/0x1a0 [ 1998.666748] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1998.671635] ? warn_alloc+0xf0/0xf0 [ 1998.675290] __alloc_pages_nodemask+0x5d3/0x700 [ 1998.679977] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1998.685486] ? lock_downgrade+0x6e0/0x6e0 [ 1998.689900] alloc_pages_current+0xe7/0x1e0 [ 1998.694583] __page_cache_alloc+0x245/0x3d0 [ 1998.698925] filemap_fault+0xc18/0x1c50 [ 1998.702921] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1998.707849] ? lock_acquire+0x170/0x3f0 [ 1998.711926] ? ext4_filemap_fault+0x7c/0xb0 [ 1998.716266] ext4_filemap_fault+0x84/0xb0 [ 1998.720735] __do_fault+0xfa/0x380 [ 1998.724395] __handle_mm_fault+0x22e9/0x3280 [ 1998.728823] ? copy_page_range+0x1d70/0x1d70 [ 1998.733332] ? find_held_lock+0x2d/0x110 [ 1998.737418] handle_mm_fault+0x288/0x7a0 [ 1998.741515] __get_user_pages+0x44d/0x11e0 [ 1998.745771] ? follow_page_mask+0x1580/0x1580 [ 1998.750281] ? lock_acquire+0x170/0x3f0 [ 1998.754477] ? __mm_populate+0x1e3/0x2c0 [ 1998.758551] populate_vma_page_range+0x17b/0x210 [ 1998.763322] __mm_populate+0x195/0x2c0 [ 1998.767224] ? populate_vma_page_range+0x210/0x210 [ 1998.772431] ? security_capable+0x88/0xb0 [ 1998.776684] SyS_mlockall+0x3f5/0x520 [ 1998.780491] ? SyS_munlock+0xf0/0xf0 [ 1998.784214] do_syscall_64+0x1d5/0x640 [ 1998.788131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1998.793417] RIP: 0033:0x45ca29 [ 1998.796612] RSP: 002b:00007f47d6236c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1998.804686] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 1998.812207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1998.819487] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1998.826952] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1998.834686] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f47d62376d4 [ 1999.577127] Mem-Info: [ 1999.580172] active_anon:207636 inactive_anon:1095454 isolated_anon:0 [ 1999.580172] active_file:14 inactive_file:0 isolated_file:11 [ 1999.580172] unevictable:43629 dirty:0 writeback:0 unstable:0 [ 1999.580172] slab_reclaimable:19168 slab_unreclaimable:113467 [ 1999.580172] mapped:66454 shmem:12406 pagetables:18253 bounce:0 [ 1999.580172] free:25024 free_pcp:32 free_cma:0 [ 1999.618254] Node 0 active_anon:746464kB inactive_anon:1023828kB active_file:0kB inactive_file:16kB unevictable:102120kB isolated(anon):0kB isolated(file):0kB mapped:226892kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1999.652911] Node 1 active_anon:84080kB inactive_anon:3357988kB active_file:60kB inactive_file:0kB unevictable:72396kB isolated(anon):0kB isolated(file):44kB mapped:38924kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1999.681583] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.709869] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1999.715046] Node 0 DMA32 free:36080kB min:36272kB low:45340kB high:54408kB active_anon:746404kB inactive_anon:1018752kB active_file:0kB inactive_file:16kB unevictable:102120kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102120kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 1999.746816] lowmem_reserve[]: 0 0 0 0 0 [ 1999.750972] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.778868] lowmem_reserve[]: 0 0 0 0 0 [ 1999.783133] Node 1 Normal free:53596kB min:53612kB low:67012kB high:80412kB active_anon:84080kB inactive_anon:3357988kB active_file:28kB inactive_file:4kB unevictable:72396kB writepending:0kB present:3932160kB managed:3870192kB mlocked:72396kB kernel_stack:14592kB pagetables:44716kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1999.813676] lowmem_reserve[]: 0 0 0 0 0 [ 1999.817701] Node 0 DMA: 5*4kB (ME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1999.834446] Node 0 DMA32: 516*4kB (UME) 68*8kB (UE) 958*16kB (UME) 567*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36080kB [ 1999.848501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1999.859483] Node 1 Normal: 211*4kB (UME) 272*8kB (UME) 67*16kB (UME) 87*32kB (UME) 52*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53596kB [ 1999.877761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.886835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.895841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.905057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.914408] 19343 total pagecache pages [ 1999.918431] 0 pages in swap cache [ 1999.922253] Swap cache stats: add 0, delete 0, find 0/0 [ 1999.927736] Free swap = 0kB [ 1999.930956] Total swap = 0kB [ 1999.933978] 1965979 pages RAM [ 1999.937201] 0 pages HighMem/MovableOnly [ 1999.941176] 339053 pages reserved [ 1999.944784] 0 pages cma reserved [ 1999.965823] Out of memory: Kill process 28019 (syz-executor.3) score 1008 or sacrifice child [ 1999.974754] Killed process 28036 (syz-executor.3) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 2000.085871] oom_reaper: reaped process 28036 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2000.190328] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2000.297217] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2000.302604] CPU: 0 PID: 28033 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 2000.310495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.320196] Call Trace: [ 2000.322945] dump_stack+0x13e/0x194 [ 2000.326683] dump_header+0x178/0x6d4 [ 2000.330418] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2000.335537] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2000.340699] ? ___ratelimit+0x50/0x519 [ 2000.344693] oom_kill_process.cold+0x10/0xae3 [ 2000.349386] ? lock_acquire+0x170/0x3f0 [ 2000.353377] ? lock_downgrade+0x6e0/0x6e0 [ 2000.357634] out_of_memory+0x2d5/0x1110 [ 2000.361638] ? oom_killer_disable+0x1c0/0x1c0 [ 2000.366342] ? mutex_trylock+0x152/0x1a0 [ 2000.370423] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2000.375651] ? warn_alloc+0xf0/0xf0 [ 2000.379312] __alloc_pages_nodemask+0x5d3/0x700 [ 2000.384143] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2000.389172] ? find_held_lock+0x2d/0x110 [ 2000.393389] alloc_pages_vma+0xc2/0x4a0 [ 2000.397474] __handle_mm_fault+0x17b6/0x3280 [ 2000.401899] ? copy_page_range+0x1d70/0x1d70 [ 2000.406320] ? find_held_lock+0x2d/0x110 [ 2000.410406] handle_mm_fault+0x288/0x7a0 [ 2000.414697] __get_user_pages+0x44d/0x11e0 [ 2000.419038] ? follow_page_mask+0x1580/0x1580 [ 2000.423552] ? lock_acquire+0x170/0x3f0 [ 2000.427543] ? __mm_populate+0x1e3/0x2c0 [ 2000.431711] populate_vma_page_range+0x17b/0x210 [ 2000.436512] __mm_populate+0x195/0x2c0 [ 2000.440417] ? populate_vma_page_range+0x210/0x210 [ 2000.445445] ? security_capable+0x88/0xb0 [ 2000.449756] SyS_mlockall+0x3f5/0x520 [ 2000.453702] ? SyS_munlock+0xf0/0xf0 [ 2000.457433] do_syscall_64+0x1d5/0x640 [ 2000.461337] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2000.466541] RIP: 0033:0x45ca29 [ 2000.469956] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2000.477681] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2000.485328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2000.492789] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2000.500927] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2000.508608] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 2000.535664] Mem-Info: [ 2000.541280] active_anon:207636 inactive_anon:1098754 isolated_anon:0 [ 2000.541280] active_file:220 inactive_file:201 isolated_file:32 [ 2000.541280] unevictable:39205 dirty:0 writeback:0 unstable:0 [ 2000.541280] slab_reclaimable:19168 slab_unreclaimable:113437 [ 2000.541280] mapped:65454 shmem:12406 pagetables:18216 bounce:0 [ 2000.541280] free:25557 free_pcp:338 free_cma:0 [ 2000.593114] Node 0 active_anon:746464kB inactive_anon:1023828kB active_file:8kB inactive_file:4kB unevictable:101420kB isolated(anon):0kB isolated(file):0kB mapped:226892kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2000.633452] Node 1 active_anon:84080kB inactive_anon:3357988kB active_file:440kB inactive_file:1128kB unevictable:55400kB isolated(anon):0kB isolated(file):0kB mapped:35824kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2000.667660] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2000.705457] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2000.711975] Node 0 DMA32 free:36284kB min:36272kB low:45340kB high:54408kB active_anon:746404kB inactive_anon:1019052kB active_file:8kB inactive_file:4kB unevictable:101120kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101064kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:760kB local_pcp:56kB free_cma:0kB [ 2000.744808] lowmem_reserve[]: 0 0 0 0 0 07:52:24 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2000.749651] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:24 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2000.884385] lowmem_reserve[]: 0 0 0 0 0 07:52:25 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x14}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2000.912745] Node 1 Normal free:87484kB min:53612kB low:67012kB high:80412kB active_anon:84080kB inactive_anon:3358392kB active_file:11300kB inactive_file:11496kB unevictable:15080kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14608kB kernel_stack:14400kB pagetables:44568kB bounce:0kB free_pcp:660kB local_pcp:508kB free_cma:0kB 07:52:25 executing program 3: mlockall(0x1) clone(0x20000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) [ 2001.111434] lowmem_reserve[]: 0 0 0 0 0 [ 2001.140720] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2001.254614] Node 0 DMA32: 382*4kB (UM) 139*8kB (UME) 946*16kB (UE) 564*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35824kB [ 2001.368018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2001.396891] Node 1 Normal: 393*4kB (UME) 225*8kB (UME) 67*16kB (UME) 96*32kB (UME) 62*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 54876kB [ 2001.447638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2001.561648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2001.627776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2001.691525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2001.734235] 17952 total pagecache pages [ 2001.754803] 0 pages in swap cache [ 2001.771496] Swap cache stats: add 0, delete 0, find 0/0 [ 2001.790498] Free swap = 0kB [ 2001.794581] Total swap = 0kB [ 2001.820319] 1965979 pages RAM [ 2001.857135] 0 pages HighMem/MovableOnly [ 2001.874572] 339053 pages reserved [ 2001.907310] 0 pages cma reserved [ 2001.931457] Out of memory: Kill process 28019 (syz-executor.3) score 1008 or sacrifice child [ 2002.029112] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2002.099195] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2002.122157] CPU: 1 PID: 28046 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 2002.130069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2002.139419] Call Trace: [ 2002.142012] dump_stack+0x13e/0x194 [ 2002.145646] dump_header+0x178/0x6d4 [ 2002.149353] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2002.154366] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2002.159553] ? ___ratelimit+0x50/0x519 [ 2002.163440] oom_kill_process.cold+0x10/0xae3 [ 2002.167935] ? lock_downgrade+0x6e0/0x6e0 [ 2002.172088] out_of_memory+0x2d5/0x1110 [ 2002.176064] ? oom_killer_disable+0x1c0/0x1c0 [ 2002.180557] ? mutex_trylock+0x152/0x1a0 [ 2002.184613] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2002.189467] ? warn_alloc+0xf0/0xf0 [ 2002.193103] __alloc_pages_nodemask+0x5d3/0x700 [ 2002.197777] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2002.202785] ? find_held_lock+0x2d/0x110 [ 2002.206852] alloc_pages_vma+0xc2/0x4a0 [ 2002.210824] __handle_mm_fault+0x17b6/0x3280 [ 2002.215231] ? copy_page_range+0x1d70/0x1d70 [ 2002.219647] ? find_held_lock+0x2d/0x110 [ 2002.223704] handle_mm_fault+0x288/0x7a0 [ 2002.227830] __get_user_pages+0x44d/0x11e0 [ 2002.232047] ? follow_page_mask+0x1580/0x1580 [ 2002.236522] ? lock_acquire+0x170/0x3f0 [ 2002.240474] ? __mm_populate+0x1e3/0x2c0 [ 2002.244523] populate_vma_page_range+0x17b/0x210 [ 2002.249265] __mm_populate+0x195/0x2c0 [ 2002.253135] ? populate_vma_page_range+0x210/0x210 [ 2002.258067] ? security_capable+0x88/0xb0 [ 2002.262199] SyS_mlockall+0x3f5/0x520 [ 2002.265982] ? SyS_munlock+0xf0/0xf0 [ 2002.269676] do_syscall_64+0x1d5/0x640 [ 2002.273543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2002.278717] RIP: 0033:0x45ca29 [ 2002.281890] RSP: 002b:00007f47d6236c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2002.289636] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2002.296892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2002.304142] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2002.311407] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2002.318656] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f47d62376d4 [ 2002.330417] Mem-Info: [ 2002.332856] active_anon:207740 inactive_anon:1095438 isolated_anon:0 [ 2002.332856] active_file:23 inactive_file:24 isolated_file:0 [ 2002.332856] unevictable:42893 dirty:0 writeback:0 unstable:0 [ 2002.332856] slab_reclaimable:19116 slab_unreclaimable:114121 [ 2002.332856] mapped:64980 shmem:12406 pagetables:18264 bounce:0 [ 2002.332856] free:25041 free_pcp:38 free_cma:0 [ 2002.366944] Node 0 active_anon:746496kB inactive_anon:1023832kB active_file:0kB inactive_file:12kB unevictable:103112kB isolated(anon):0kB isolated(file):0kB mapped:227064kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2002.395436] Node 1 active_anon:84464kB inactive_anon:3357920kB active_file:100kB inactive_file:0kB unevictable:68460kB isolated(anon):0kB isolated(file):0kB mapped:32856kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2002.423527] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2002.450206] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2002.455256] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:746436kB inactive_anon:1018756kB active_file:0kB inactive_file:12kB unevictable:103112kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103112kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2002.485155] lowmem_reserve[]: 0 0 0 0 0 [ 2002.505932] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2002.678640] lowmem_reserve[]: 0 0 0 0 0 [ 2002.706090] Node 1 Normal free:53492kB min:53612kB low:67012kB high:80412kB active_anon:84464kB inactive_anon:3357920kB active_file:124kB inactive_file:168kB unevictable:68460kB writepending:0kB present:3932160kB managed:3870192kB mlocked:68460kB kernel_stack:14560kB pagetables:44764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2002.836885] lowmem_reserve[]: 0 0 0 0 0 [ 2002.840922] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2002.991186] Node 0 DMA32: 350*4kB (UME) 206*8kB (UME) 947*16kB (UE) 565*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36280kB [ 2003.085149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2003.163014] Node 1 Normal: 164*4kB (UME) 153*8kB (UME) 59*16kB (UME) 84*32kB (UME) 62*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 52872kB [ 2003.255854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2003.264874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2003.368132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2003.418278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2003.474884] 17888 total pagecache pages [ 2003.492835] 0 pages in swap cache [ 2003.500706] Swap cache stats: add 0, delete 0, find 0/0 [ 2003.508660] Free swap = 0kB [ 2003.511684] Total swap = 0kB [ 2003.514682] 1965979 pages RAM [ 2003.521664] 0 pages HighMem/MovableOnly [ 2003.533552] 339053 pages reserved [ 2003.539932] 0 pages cma reserved [ 2003.543388] Out of memory: Kill process 28040 (syz-executor.4) score 1007 or sacrifice child [ 2003.560207] Killed process 28040 (syz-executor.4) total-vm:74840kB, anon-rss:17460kB, file-rss:39340kB, shmem-rss:0kB [ 2003.612003] oom_reaper: reaped process 28040 (syz-executor.4), now anon-rss:17624kB, file-rss:5360kB, shmem-rss:0kB [ 2003.634170] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2003.747266] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2003.788434] CPU: 1 PID: 6317 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 2003.795912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.805377] Call Trace: [ 2003.807956] dump_stack+0x13e/0x194 [ 2003.811567] dump_header+0x178/0x6d4 [ 2003.815260] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2003.820252] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2003.825331] ? ___ratelimit+0x50/0x519 [ 2003.829198] oom_kill_process.cold+0x10/0xae3 [ 2003.833681] ? lock_acquire+0x170/0x3f0 [ 2003.837633] ? lock_downgrade+0x6e0/0x6e0 [ 2003.841764] out_of_memory+0x2d5/0x1110 [ 2003.845719] ? oom_killer_disable+0x1c0/0x1c0 [ 2003.850192] ? mutex_trylock+0x152/0x1a0 [ 2003.854232] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2003.859060] ? warn_alloc+0xf0/0xf0 [ 2003.862672] __alloc_pages_nodemask+0x5d3/0x700 [ 2003.867319] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2003.872311] ? lock_downgrade+0x6e0/0x6e0 [ 2003.876441] alloc_pages_current+0xe7/0x1e0 [ 2003.880742] __page_cache_alloc+0x245/0x3d0 [ 2003.885040] filemap_fault+0xc18/0x1c50 [ 2003.888995] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2003.893642] ? lock_acquire+0x170/0x3f0 [ 2003.897595] ? ext4_filemap_fault+0x7c/0xb0 [ 2003.901897] ext4_filemap_fault+0x84/0xb0 [ 2003.906026] __do_fault+0xfa/0x380 [ 2003.909554] __handle_mm_fault+0x22e9/0x3280 [ 2003.913941] ? copy_page_range+0x1d70/0x1d70 [ 2003.918328] ? find_held_lock+0x2d/0x110 [ 2003.922373] handle_mm_fault+0x288/0x7a0 [ 2003.926423] __do_page_fault+0x4bc/0xb40 [ 2003.930463] ? vmalloc_fault+0xdf0/0xdf0 [ 2003.934499] ? do_page_fault+0x60/0x4f2 [ 2003.938452] ? page_fault+0x2f/0x50 [ 2003.942056] page_fault+0x45/0x50 [ 2003.945500] RIP: 0001:0x11 07:52:27 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x110, r3, 0xd2cce000) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:28 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:28 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:28 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000180)={0x1, 0x6}) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) [ 2003.948326] RSP: 3b72a2a8:000000c42003aef0 EFLAGS: 1d28f4c62ae [ 2004.629540] Mem-Info: [ 2004.654441] active_anon:207806 inactive_anon:1095479 isolated_anon:0 [ 2004.654441] active_file:338 inactive_file:584 isolated_file:0 [ 2004.654441] unevictable:42109 dirty:14 writeback:0 unstable:0 [ 2004.654441] slab_reclaimable:19181 slab_unreclaimable:113766 [ 2004.654441] mapped:68168 shmem:12406 pagetables:18311 bounce:0 [ 2004.654441] free:24894 free_pcp:30 free_cma:0 [ 2004.718822] Node 0 active_anon:746628kB inactive_anon:1023832kB active_file:24kB inactive_file:180kB unevictable:102524kB isolated(anon):0kB isolated(file):0kB mapped:227460kB dirty:12kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2004.747692] Node 1 active_anon:84596kB inactive_anon:3358084kB active_file:336kB inactive_file:412kB unevictable:67712kB isolated(anon):0kB isolated(file):144kB mapped:44612kB dirty:44kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2004.790598] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.903515] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2004.913988] Node 0 DMA32 free:35864kB min:36272kB low:45340kB high:54408kB active_anon:746568kB inactive_anon:1019260kB active_file:8kB inactive_file:0kB unevictable:102036kB writepending:24kB present:3129332kB managed:2621260kB mlocked:102020kB kernel_stack:12288kB pagetables:28372kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.136587] lowmem_reserve[]: 0 0 0 0 0 07:52:29 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2005.169677] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.336097] lowmem_reserve[]: 0 0 0 0 0 [ 2005.350595] Node 1 Normal free:53980kB min:53612kB low:67012kB high:80412kB active_anon:84540kB inactive_anon:3357920kB active_file:2424kB inactive_file:2740kB unevictable:64116kB writepending:28kB present:3932160kB managed:3870192kB mlocked:64500kB kernel_stack:14656kB pagetables:44668kB bounce:0kB free_pcp:372kB local_pcp:256kB free_cma:0kB [ 2005.405870] lowmem_reserve[]: 0 0 0 0 0 [ 2005.410134] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2005.427220] Node 0 DMA32: 441*4kB (UME) 139*8kB (UME) 950*16kB (UME) 567*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36220kB [ 2005.528905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2005.540682] Node 1 Normal: 90*4kB (UME) 56*8kB (UME) 211*16kB (UME) 62*32kB (UME) 63*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53592kB [ 2005.557753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2005.566729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2005.575307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2005.584220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2005.592843] 18520 total pagecache pages [ 2005.596899] 0 pages in swap cache [ 2005.600342] Swap cache stats: add 0, delete 0, find 0/0 [ 2005.605785] Free swap = 0kB [ 2005.608796] Total swap = 0kB [ 2005.611806] 1965979 pages RAM [ 2005.614897] 0 pages HighMem/MovableOnly [ 2005.622360] 339053 pages reserved [ 2005.625879] 0 pages cma reserved [ 2005.629236] Out of memory: Kill process 28037 (syz-executor.2) score 1007 or sacrifice child [ 2005.659982] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2005.689367] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2005.694172] CPU: 1 PID: 6317 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 2005.701604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.710951] Call Trace: [ 2005.713547] dump_stack+0x13e/0x194 [ 2005.717181] dump_header+0x178/0x6d4 [ 2005.720887] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2005.725911] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2005.731002] ? ___ratelimit+0x50/0x519 [ 2005.734896] oom_kill_process.cold+0x10/0xae3 [ 2005.739374] ? lock_acquire+0x170/0x3f0 [ 2005.743338] ? lock_downgrade+0x6e0/0x6e0 [ 2005.747473] out_of_memory+0x2d5/0x1110 [ 2005.751431] ? oom_killer_disable+0x1c0/0x1c0 [ 2005.755909] ? mutex_trylock+0x152/0x1a0 [ 2005.759965] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2005.764802] ? warn_alloc+0xf0/0xf0 [ 2005.768413] __alloc_pages_nodemask+0x5d3/0x700 [ 2005.773068] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2005.778083] ? lock_downgrade+0x6e0/0x6e0 [ 2005.782221] alloc_pages_current+0xe7/0x1e0 [ 2005.786534] __page_cache_alloc+0x245/0x3d0 [ 2005.790844] filemap_fault+0xc18/0x1c50 [ 2005.794803] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2005.799451] ? lock_acquire+0x170/0x3f0 [ 2005.803493] ? ext4_filemap_fault+0x7c/0xb0 [ 2005.808233] ext4_filemap_fault+0x84/0xb0 [ 2005.812361] __do_fault+0xfa/0x380 [ 2005.815880] __handle_mm_fault+0x22e9/0x3280 [ 2005.820268] ? copy_page_range+0x1d70/0x1d70 [ 2005.824761] ? find_held_lock+0x2d/0x110 [ 2005.828815] handle_mm_fault+0x288/0x7a0 [ 2005.832865] __do_page_fault+0x4bc/0xb40 [ 2005.836906] ? vmalloc_fault+0xdf0/0xdf0 [ 2005.840948] ? do_page_fault+0x60/0x4f2 [ 2005.844907] ? page_fault+0x2f/0x50 [ 2005.848509] page_fault+0x45/0x50 [ 2005.851947] RIP: 0001:0x11 [ 2005.854773] RSP: 3b72a2a8:000000c42003aef0 EFLAGS: 1d28f4c62ae [ 2005.857761] Mem-Info: [ 2005.866190] active_anon:207811 inactive_anon:1095442 isolated_anon:0 [ 2005.866190] active_file:11 inactive_file:15 isolated_file:0 [ 2005.866190] unevictable:43094 dirty:0 writeback:0 unstable:0 [ 2005.866190] slab_reclaimable:19209 slab_unreclaimable:113745 [ 2005.866190] mapped:65635 shmem:12406 pagetables:18320 bounce:0 [ 2005.866190] free:25023 free_pcp:0 free_cma:0 [ 2005.900175] Node 0 active_anon:746656kB inactive_anon:1023828kB active_file:4kB inactive_file:8kB unevictable:102680kB isolated(anon):0kB isolated(file):0kB mapped:227056kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2005.928538] Node 1 active_anon:84588kB inactive_anon:3357940kB active_file:48kB inactive_file:44kB unevictable:69696kB isolated(anon):0kB isolated(file):0kB mapped:35484kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2005.956638] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.983291] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2005.995504] Node 0 DMA32 free:36188kB min:36272kB low:45340kB high:54408kB active_anon:746596kB inactive_anon:1018752kB active_file:4kB inactive_file:8kB unevictable:102680kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102680kB kernel_stack:12288kB pagetables:28376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.032063] lowmem_reserve[]: 0 0 0 0 0 [ 2006.038003] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.068480] lowmem_reserve[]: 0 0 0 0 0 [ 2006.072501] Node 1 Normal free:53448kB min:53612kB low:67012kB high:80412kB active_anon:84588kB inactive_anon:3357940kB active_file:48kB inactive_file:44kB unevictable:69696kB writepending:0kB present:3932160kB managed:3870192kB mlocked:69696kB kernel_stack:14688kB pagetables:44896kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.106417] lowmem_reserve[]: 0 0 0 0 0 [ 2006.110432] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2006.131395] Node 0 DMA32: 441*4kB (UME) 134*8kB (UME) 950*16kB (UME) 567*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36180kB [ 2006.145175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2006.155999] Node 1 Normal: 122*4kB (UME) 22*8kB (UME) 211*16kB (UME) 62*32kB (UME) 63*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53448kB [ 2006.172980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2006.181893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2006.190569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2006.207007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2006.216662] 18490 total pagecache pages [ 2006.220838] 0 pages in swap cache [ 2006.224355] Swap cache stats: add 0, delete 0, find 0/0 [ 2006.243774] Free swap = 0kB [ 2006.249478] Total swap = 0kB [ 2006.252509] 1965979 pages RAM [ 2006.265198] 0 pages HighMem/MovableOnly [ 2006.271823] 339053 pages reserved [ 2006.275290] 0 pages cma reserved [ 2006.289311] Out of memory: Kill process 28053 (syz-executor.4) score 1008 or sacrifice child [ 2006.302115] Killed process 28064 (syz-executor.4) total-vm:74972kB, anon-rss:18032kB, file-rss:34816kB, shmem-rss:0kB [ 2006.351609] oom_reaper: reaped process 28064 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2006.392871] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2006.411957] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2006.417234] CPU: 1 PID: 28056 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 2006.425114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.434467] Call Trace: [ 2006.437061] dump_stack+0x13e/0x194 [ 2006.440681] dump_header+0x178/0x6d4 [ 2006.444390] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2006.449390] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2006.454480] ? ___ratelimit+0x50/0x519 [ 2006.458359] oom_kill_process.cold+0x10/0xae3 [ 2006.462868] ? lock_acquire+0x170/0x3f0 [ 2006.466851] ? lock_downgrade+0x6e0/0x6e0 [ 2006.470986] out_of_memory+0x2d5/0x1110 [ 2006.474946] ? oom_killer_disable+0x1c0/0x1c0 [ 2006.479442] ? mutex_trylock+0x152/0x1a0 [ 2006.483487] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2006.488326] ? warn_alloc+0xf0/0xf0 [ 2006.491940] __alloc_pages_nodemask+0x5d3/0x700 [ 2006.496589] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2006.501602] ? find_held_lock+0x2d/0x110 [ 2006.505655] alloc_pages_vma+0xc2/0x4a0 [ 2006.509630] __handle_mm_fault+0x17b6/0x3280 [ 2006.514039] ? copy_page_range+0x1d70/0x1d70 [ 2006.518430] ? find_held_lock+0x2d/0x110 [ 2006.522477] handle_mm_fault+0x288/0x7a0 [ 2006.526561] __get_user_pages+0x44d/0x11e0 [ 2006.530787] ? follow_page_mask+0x1580/0x1580 [ 2006.535264] ? lock_acquire+0x170/0x3f0 [ 2006.539226] ? __mm_populate+0x1e3/0x2c0 [ 2006.543275] populate_vma_page_range+0x17b/0x210 [ 2006.548045] __mm_populate+0x195/0x2c0 [ 2006.551914] ? populate_vma_page_range+0x210/0x210 [ 2006.556833] ? security_capable+0x88/0xb0 [ 2006.560974] SyS_mlockall+0x3f5/0x520 [ 2006.564762] ? SyS_munlock+0xf0/0xf0 [ 2006.568461] do_syscall_64+0x1d5/0x640 [ 2006.572354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2006.577528] RIP: 0033:0x45ca29 [ 2006.580724] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2006.588412] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2006.595660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2006.602907] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2006.610174] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2006.617422] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 2006.627504] Mem-Info: [ 2006.629938] active_anon:207811 inactive_anon:1095442 isolated_anon:0 [ 2006.629938] active_file:23 inactive_file:2 isolated_file:0 [ 2006.629938] unevictable:43094 dirty:0 writeback:0 unstable:0 [ 2006.629938] slab_reclaimable:19209 slab_unreclaimable:113749 [ 2006.629938] mapped:65635 shmem:12406 pagetables:18288 bounce:0 [ 2006.629938] free:24949 free_pcp:106 free_cma:0 [ 2006.664297] Node 0 active_anon:746656kB inactive_anon:1023828kB active_file:8kB inactive_file:4kB unevictable:102680kB isolated(anon):0kB isolated(file):0kB mapped:227056kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.692813] Node 1 active_anon:84588kB inactive_anon:3357940kB active_file:84kB inactive_file:4kB unevictable:69696kB isolated(anon):0kB isolated(file):0kB mapped:35484kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.720813] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.748629] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2006.753669] Node 0 DMA32 free:35900kB min:36272kB low:45340kB high:54408kB active_anon:746596kB inactive_anon:1018752kB active_file:8kB inactive_file:4kB unevictable:102680kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102680kB kernel_stack:12288kB pagetables:28372kB bounce:0kB free_pcp:260kB local_pcp:128kB free_cma:0kB [ 2006.786520] lowmem_reserve[]: 0 0 0 0 0 [ 2006.790531] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.911368] lowmem_reserve[]: 0 0 0 0 0 [ 2006.960954] Node 1 Normal free:53544kB min:53612kB low:67012kB high:80412kB active_anon:84584kB inactive_anon:3357924kB active_file:0kB inactive_file:92kB unevictable:69696kB writepending:0kB present:3932160kB managed:3870192kB mlocked:69696kB kernel_stack:14592kB pagetables:44772kB bounce:0kB free_pcp:164kB local_pcp:144kB free_cma:0kB [ 2007.165584] lowmem_reserve[]: 0 0 0 0 0 [ 2007.188694] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2007.309655] Node 0 DMA32: 379*4kB (UME) 133*8kB (UME) 951*16kB (UME) 567*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35940kB [ 2007.420105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2007.493161] Node 1 Normal: 122*4kB (UME) 22*8kB (UME) 211*16kB (UME) 67*32kB (UME) 63*64kB (UME) 61*128kB (UME) 29*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53608kB [ 2007.627411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.702017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.761974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.834348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.912460] 18490 total pagecache pages [ 2007.937362] 0 pages in swap cache [ 2007.966441] Swap cache stats: add 0, delete 0, find 0/0 [ 2007.983141] Free swap = 0kB [ 2007.988983] Total swap = 0kB [ 2007.992603] 1965979 pages RAM [ 2007.996358] 0 pages HighMem/MovableOnly [ 2008.000900] 339053 pages reserved [ 2008.004926] 0 pages cma reserved [ 2008.009366] Out of memory: Kill process 28053 (syz-executor.4) score 1008 or sacrifice child 07:52:32 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:32 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x9646, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8001}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:52:32 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:32 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) 07:52:32 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2008.952423] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2009.007428] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2009.012603] CPU: 0 PID: 28077 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 2009.020498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2009.029845] Call Trace: [ 2009.032439] dump_stack+0x13e/0x194 [ 2009.036099] dump_header+0x178/0x6d4 [ 2009.039898] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2009.044911] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2009.050011] ? ___ratelimit+0x50/0x519 [ 2009.053892] oom_kill_process.cold+0x10/0xae3 [ 2009.058384] ? lock_downgrade+0x6e0/0x6e0 [ 2009.062541] out_of_memory+0x2d5/0x1110 [ 2009.066542] ? oom_killer_disable+0x1c0/0x1c0 [ 2009.071034] ? mutex_trylock+0x152/0x1a0 [ 2009.075093] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2009.079936] ? warn_alloc+0xf0/0xf0 [ 2009.083569] __alloc_pages_nodemask+0x5d3/0x700 [ 2009.088328] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2009.093343] ? preempt_schedule_common+0x4a/0xc0 [ 2009.098103] alloc_pages_vma+0xc2/0x4a0 [ 2009.102072] __handle_mm_fault+0x17b6/0x3280 [ 2009.106472] ? copy_page_range+0x1d70/0x1d70 [ 2009.110877] ? find_held_lock+0x2d/0x110 [ 2009.114935] handle_mm_fault+0x288/0x7a0 [ 2009.118989] __get_user_pages+0x44d/0x11e0 [ 2009.123332] ? follow_page_mask+0x1580/0x1580 [ 2009.127825] ? lock_acquire+0x170/0x3f0 [ 2009.131794] ? __mm_populate+0x1e3/0x2c0 [ 2009.135855] populate_vma_page_range+0x17b/0x210 [ 2009.140603] __mm_populate+0x195/0x2c0 [ 2009.144486] ? populate_vma_page_range+0x210/0x210 [ 2009.149402] ? security_capable+0x88/0xb0 [ 2009.153548] SyS_mlockall+0x3f5/0x520 [ 2009.157338] ? SyS_munlock+0xf0/0xf0 [ 2009.161042] do_syscall_64+0x1d5/0x640 [ 2009.164914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2009.170117] RIP: 0033:0x45ca29 [ 2009.173299] RSP: 002b:00007f18dedc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2009.181091] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2009.188352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2009.195631] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2009.203045] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2009.210353] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f18dedc56d4 [ 2009.227812] Mem-Info: [ 2009.230271] active_anon:207858 inactive_anon:1095438 isolated_anon:0 [ 2009.230271] active_file:26 inactive_file:0 isolated_file:0 [ 2009.230271] unevictable:42927 dirty:0 writeback:0 unstable:0 [ 2009.230271] slab_reclaimable:19151 slab_unreclaimable:114032 [ 2009.230271] mapped:65057 shmem:12406 pagetables:18307 bounce:0 [ 2009.230271] free:24941 free_pcp:0 free_cma:0 [ 2009.273726] Node 0 active_anon:746692kB inactive_anon:1023832kB active_file:8kB inactive_file:0kB unevictable:102820kB isolated(anon):0kB isolated(file):0kB mapped:227284kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.311771] Node 1 active_anon:84740kB inactive_anon:3357920kB active_file:96kB inactive_file:0kB unevictable:68888kB isolated(anon):0kB isolated(file):0kB mapped:32944kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.349513] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.386350] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2009.391424] Node 0 DMA32 free:35780kB min:36272kB low:45340kB high:54408kB active_anon:746632kB inactive_anon:1018756kB active_file:8kB inactive_file:0kB unevictable:102320kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102320kB kernel_stack:12288kB pagetables:28368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.430782] lowmem_reserve[]: 0 0 0 0 0 [ 2009.434807] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.469923] lowmem_reserve[]: 0 0 0 0 0 [ 2009.473953] Node 1 Normal free:53536kB min:53612kB low:67012kB high:80412kB active_anon:84740kB inactive_anon:3357920kB active_file:60kB inactive_file:8kB unevictable:68788kB writepending:0kB present:3932160kB managed:3870192kB mlocked:68784kB kernel_stack:14656kB pagetables:44852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.513312] lowmem_reserve[]: 0 0 0 0 0 [ 2009.517978] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2009.543559] Node 0 DMA32: 425*4kB (UME) 100*8kB (UME) 951*16kB (UE) 569*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35924kB [ 2009.566807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2009.584696] Node 1 Normal: 213*4kB (UME) 92*8kB (UE) 109*16kB (UE) 87*32kB (UME) 58*64kB (ME) 60*128kB (UME) 30*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53348kB [ 2009.611038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2009.622348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.635053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2009.644433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.660903] 17926 total pagecache pages [ 2009.664933] 0 pages in swap cache [ 2009.668435] Swap cache stats: add 0, delete 0, find 0/0 [ 2009.673795] Free swap = 0kB [ 2009.684003] Total swap = 0kB [ 2009.687101] 1965979 pages RAM [ 2009.690201] 0 pages HighMem/MovableOnly [ 2009.694166] 339053 pages reserved [ 2009.704767] 0 pages cma reserved [ 2009.708197] Out of memory: Kill process 28072 (syz-executor.3) score 1007 or sacrifice child [ 2009.723980] Killed process 28072 (syz-executor.3) total-vm:75104kB, anon-rss:17980kB, file-rss:39344kB, shmem-rss:0kB [ 2009.791747] oom_reaper: reaped process 28072 (syz-executor.3), now anon-rss:18020kB, file-rss:5500kB, shmem-rss:0kB [ 2009.812732] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2009.838743] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2009.843899] CPU: 0 PID: 28076 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 2009.851779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2009.861136] Call Trace: [ 2009.863731] dump_stack+0x13e/0x194 [ 2009.867366] dump_header+0x178/0x6d4 [ 2009.871080] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2009.876098] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2009.881195] ? ___ratelimit+0x50/0x519 [ 2009.885089] oom_kill_process.cold+0x10/0xae3 [ 2009.889667] ? lock_acquire+0x170/0x3f0 [ 2009.893650] ? lock_downgrade+0x6e0/0x6e0 [ 2009.897803] out_of_memory+0x2d5/0x1110 [ 2009.901777] ? oom_killer_disable+0x1c0/0x1c0 [ 2009.906446] ? mutex_trylock+0x152/0x1a0 [ 2009.910534] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2009.915389] ? warn_alloc+0xf0/0xf0 [ 2009.919030] __alloc_pages_nodemask+0x5d3/0x700 [ 2009.923718] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2009.928735] ? find_held_lock+0x2d/0x110 [ 2009.932829] alloc_pages_vma+0xc2/0x4a0 [ 2009.936815] __handle_mm_fault+0x17b6/0x3280 [ 2009.941221] ? copy_page_range+0x1d70/0x1d70 [ 2009.945628] ? find_held_lock+0x2d/0x110 [ 2009.949696] handle_mm_fault+0x288/0x7a0 [ 2009.953772] __get_user_pages+0x44d/0x11e0 [ 2009.958017] ? follow_page_mask+0x1580/0x1580 [ 2009.962541] ? lock_acquire+0x170/0x3f0 [ 2009.966513] ? __mm_populate+0x1e3/0x2c0 [ 2009.970576] populate_vma_page_range+0x17b/0x210 [ 2009.975333] __mm_populate+0x195/0x2c0 [ 2009.979218] ? populate_vma_page_range+0x210/0x210 [ 2009.984133] ? security_capable+0x88/0xb0 [ 2009.988275] SyS_mlockall+0x3f5/0x520 [ 2009.992070] ? SyS_munlock+0xf0/0xf0 [ 2009.995782] do_syscall_64+0x1d5/0x640 [ 2009.999670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2010.004846] RIP: 0033:0x45ca29 [ 2010.008019] RSP: 002b:00007fab877c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2010.015726] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2010.022992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2010.030267] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2010.037537] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2010.045762] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fab877c96d4 [ 2010.069800] Mem-Info: [ 2010.072262] active_anon:207858 inactive_anon:1095438 isolated_anon:0 [ 2010.072262] active_file:12 inactive_file:1 isolated_file:13 [ 2010.072262] unevictable:42931 dirty:0 writeback:0 unstable:0 [ 2010.072262] slab_reclaimable:19151 slab_unreclaimable:114036 [ 2010.072262] mapped:65067 shmem:12406 pagetables:18308 bounce:0 [ 2010.072262] free:24849 free_pcp:57 free_cma:0 [ 2010.113721] Node 0 active_anon:746692kB inactive_anon:1023832kB active_file:4kB inactive_file:0kB unevictable:102820kB isolated(anon):0kB isolated(file):0kB mapped:227304kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2010.148698] Node 1 active_anon:84740kB inactive_anon:3357920kB active_file:44kB inactive_file:56kB unevictable:68904kB isolated(anon):0kB isolated(file):0kB mapped:32964kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2010.184270] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2010.219467] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2010.224599] Node 0 DMA32 free:35536kB min:36272kB low:45340kB high:54408kB active_anon:746632kB inactive_anon:1018756kB active_file:0kB inactive_file:24kB unevictable:102820kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102820kB kernel_stack:12288kB pagetables:28372kB bounce:0kB free_pcp:460kB local_pcp:440kB free_cma:0kB [ 2010.262391] lowmem_reserve[]: 0 0 0 0 0 [ 2010.266458] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2010.299172] lowmem_reserve[]: 0 0 0 0 0 [ 2010.303192] Node 1 Normal free:53412kB min:53612kB low:67012kB high:80412kB active_anon:84740kB inactive_anon:3357920kB active_file:44kB inactive_file:56kB unevictable:68904kB writepending:0kB present:3932160kB managed:3870192kB mlocked:68904kB kernel_stack:14624kB pagetables:44852kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2010.340415] lowmem_reserve[]: 0 0 0 0 0 [ 2010.344432] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2010.368186] Node 0 DMA32: 330*4kB (UME) 98*8kB (UME) 951*16kB (UE) 568*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35496kB [ 2010.384245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2010.402330] Node 1 Normal: 213*4kB (UME) 92*8kB (UE) 109*16kB (UE) 89*32kB (UME) 58*64kB (ME) 60*128kB (UME) 30*256kB (UME) 27*512kB (ME) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 53412kB [ 2010.426355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2010.440354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2010.451429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2010.467599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2010.478721] 17907 total pagecache pages [ 2010.482707] 0 pages in swap cache [ 2010.491003] Swap cache stats: add 0, delete 0, find 0/0 [ 2010.499569] Free swap = 0kB [ 2010.502589] Total swap = 0kB [ 2010.510499] 1965979 pages RAM [ 2010.513604] 0 pages HighMem/MovableOnly [ 2010.520125] 339053 pages reserved [ 2010.523572] 0 pages cma reserved [ 2010.531808] Out of memory: Kill process 14771 (syz-executor.1) score 1007 or sacrifice child [ 2010.542936] Killed process 14771 (syz-executor.1) total-vm:74972kB, anon-rss:18260kB, file-rss:34624kB, shmem-rss:0kB [ 2010.698758] oom_reaper: reaped process 14771 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:52:34 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5e, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000000, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) [ 2011.259372] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2011.361918] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2011.390827] CPU: 1 PID: 6346 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 2011.398660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.408010] Call Trace: [ 2011.410600] dump_stack+0x13e/0x194 [ 2011.414230] dump_header+0x178/0x6d4 [ 2011.417936] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2011.422948] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2011.428046] ? ___ratelimit+0x50/0x519 [ 2011.431935] oom_kill_process.cold+0x10/0xae3 [ 2011.436428] ? lock_acquire+0x170/0x3f0 [ 2011.440400] ? lock_downgrade+0x6e0/0x6e0 [ 2011.444547] out_of_memory+0x2d5/0x1110 [ 2011.448520] ? oom_killer_disable+0x1c0/0x1c0 [ 2011.453009] ? mutex_trylock+0x152/0x1a0 [ 2011.457071] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2011.461920] ? warn_alloc+0xf0/0xf0 [ 2011.465556] __alloc_pages_nodemask+0x5d3/0x700 [ 2011.470222] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2011.475232] ? lock_downgrade+0x6e0/0x6e0 [ 2011.479385] alloc_pages_current+0xe7/0x1e0 [ 2011.483728] __page_cache_alloc+0x245/0x3d0 [ 2011.488047] filemap_fault+0xc18/0x1c50 [ 2011.492025] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2011.496693] ? lock_acquire+0x170/0x3f0 [ 2011.500689] ? ext4_filemap_fault+0x7c/0xb0 [ 2011.505013] ext4_filemap_fault+0x84/0xb0 [ 2011.509154] __do_fault+0xfa/0x380 [ 2011.512691] __handle_mm_fault+0x22e9/0x3280 [ 2011.517102] ? copy_page_range+0x1d70/0x1d70 [ 2011.521516] ? find_held_lock+0x2d/0x110 [ 2011.525610] handle_mm_fault+0x288/0x7a0 [ 2011.529668] __do_page_fault+0x4bc/0xb40 [ 2011.533728] ? vmalloc_fault+0xdf0/0xdf0 [ 2011.537785] ? do_page_fault+0x60/0x4f2 [ 2011.541750] ? page_fault+0x2f/0x50 [ 2011.545368] page_fault+0x45/0x50 [ 2011.548812] RIP: ce2b8250:0x1eaf97 [ 2011.552350] RSP: 1eaf97:0000000000000880 EFLAGS: 00000000 [ 2012.000836] Mem-Info: [ 2012.049611] active_anon:207865 inactive_anon:1090875 isolated_anon:0 [ 2012.049611] active_file:33 inactive_file:0 isolated_file:0 [ 2012.049611] unevictable:47142 dirty:0 writeback:0 unstable:0 [ 2012.049611] slab_reclaimable:19131 slab_unreclaimable:114001 [ 2012.049611] mapped:65372 shmem:12406 pagetables:18283 bounce:0 [ 2012.049611] free:24990 free_pcp:0 free_cma:0 [ 2012.252457] Node 0 active_anon:746692kB inactive_anon:1023832kB active_file:0kB inactive_file:28kB unevictable:102932kB isolated(anon):0kB isolated(file):0kB mapped:227320kB dirty:0kB writeback:0kB shmem:29084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2012.500846] Node 1 active_anon:84768kB inactive_anon:3387568kB active_file:7708kB inactive_file:7692kB unevictable:20936kB isolated(anon):0kB isolated(file):128kB mapped:26968kB dirty:0kB writeback:0kB shmem:20540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:52:36 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:36 executing program 4: mlockall(0x1) clone(0x2016000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000200)='virt_wifi0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:36 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2012.680482] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2012.820846] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2012.852330] Node 0 DMA32 free:36476kB min:36272kB low:45340kB high:54408kB active_anon:746640kB inactive_anon:1019368kB active_file:0kB inactive_file:28kB unevictable:100480kB writepending:0kB present:3129332kB managed:2621260kB mlocked:100412kB kernel_stack:12352kB pagetables:28388kB bounce:0kB free_pcp:1328kB local_pcp:624kB free_cma:0kB 07:52:37 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2013.047272] lowmem_reserve[]: 0 0 0 0 0 [ 2013.077171] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2013.210114] lowmem_reserve[]: 0 0 0 0 0 [ 2013.222085] Node 1 Normal free:53260kB min:53612kB low:67012kB high:80412kB active_anon:84832kB inactive_anon:3339976kB active_file:472kB inactive_file:712kB unevictable:84544kB writepending:164kB present:3932160kB managed:3870192kB mlocked:84544kB kernel_stack:14816kB pagetables:44768kB bounce:0kB free_pcp:488kB local_pcp:368kB free_cma:0kB [ 2013.284777] lowmem_reserve[]: 0 0 0 0 0 [ 2013.288841] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2013.457549] Node 0 DMA32: 491*4kB (UME) 96*8kB (UME) 962*16kB (UME) 569*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36332kB [ 2013.487472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2013.502596] Node 1 Normal: 104*4kB (UM) 82*8kB (UM) 126*16kB (UME) 48*32kB (UME) 25*64kB (UME) 54*128kB (UME) 37*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53328kB [ 2013.519938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2013.528917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2013.537675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2013.546920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2013.555551] 19043 total pagecache pages [ 2013.559525] 0 pages in swap cache [ 2013.562969] Swap cache stats: add 0, delete 0, find 0/0 [ 2013.568734] Free swap = 0kB [ 2013.571759] Total swap = 0kB [ 2013.575338] 1965979 pages RAM [ 2013.578444] 0 pages HighMem/MovableOnly [ 2013.582407] 339053 pages reserved [ 2013.585910] 0 pages cma reserved [ 2013.589292] Out of memory: Kill process 28073 (syz-executor.4) score 1008 or sacrifice child [ 2013.771585] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2013.802882] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2013.811404] CPU: 1 PID: 28105 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 2013.819305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2013.829110] Call Trace: [ 2013.831877] dump_stack+0x13e/0x194 [ 2013.835505] dump_header+0x178/0x6d4 [ 2013.839300] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2013.844312] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2013.849421] ? ___ratelimit+0x50/0x519 [ 2013.853418] oom_kill_process.cold+0x10/0xae3 [ 2013.857917] ? lock_downgrade+0x6e0/0x6e0 [ 2013.862066] out_of_memory+0x2d5/0x1110 [ 2013.866066] ? oom_killer_disable+0x1c0/0x1c0 [ 2013.870560] ? mutex_trylock+0x152/0x1a0 [ 2013.874642] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2013.879495] ? warn_alloc+0xf0/0xf0 [ 2013.883654] __alloc_pages_nodemask+0x5d3/0x700 [ 2013.888320] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2013.893329] ? lock_downgrade+0x6e0/0x6e0 [ 2013.897501] alloc_pages_current+0xe7/0x1e0 [ 2013.901824] __page_cache_alloc+0x245/0x3d0 [ 2013.906153] filemap_fault+0xc18/0x1c50 [ 2013.910237] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2013.914897] ? lock_acquire+0x170/0x3f0 [ 2013.918906] ? ext4_filemap_fault+0x7c/0xb0 [ 2013.923353] ext4_filemap_fault+0x84/0xb0 [ 2013.927495] __do_fault+0xfa/0x380 [ 2013.931027] __handle_mm_fault+0x22e9/0x3280 [ 2013.935429] ? copy_page_range+0x1d70/0x1d70 [ 2013.941553] ? find_held_lock+0x2d/0x110 [ 2013.945617] handle_mm_fault+0x288/0x7a0 [ 2013.949750] __get_user_pages+0x44d/0x11e0 [ 2013.953964] ? follow_page_mask+0x1580/0x1580 [ 2013.958564] ? lock_acquire+0x170/0x3f0 [ 2013.962603] ? __mm_populate+0x1e3/0x2c0 [ 2013.967872] populate_vma_page_range+0x17b/0x210 [ 2013.972694] __mm_populate+0x195/0x2c0 [ 2013.976576] ? populate_vma_page_range+0x210/0x210 [ 2013.981524] ? security_capable+0x88/0xb0 [ 2013.985678] SyS_mlockall+0x3f5/0x520 [ 2013.989457] ? SyS_munlock+0xf0/0xf0 [ 2013.993164] do_syscall_64+0x1d5/0x640 [ 2013.997037] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2014.002222] RIP: 0033:0x45ca29 [ 2014.005394] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2014.013113] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2014.020560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2014.027810] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2014.035062] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2014.042309] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 2014.078811] Mem-Info: [ 2014.081291] active_anon:207880 inactive_anon:1090889 isolated_anon:0 [ 2014.081291] active_file:40 inactive_file:0 isolated_file:0 [ 2014.081291] unevictable:47152 dirty:0 writeback:0 unstable:0 [ 2014.081291] slab_reclaimable:19123 slab_unreclaimable:114134 [ 2014.081291] mapped:66201 shmem:12406 pagetables:18309 bounce:0 [ 2014.081291] free:25061 free_pcp:60 free_cma:0 [ 2014.158883] Node 0 active_anon:746856kB inactive_anon:1023836kB active_file:0kB inactive_file:36kB unevictable:101416kB isolated(anon):0kB isolated(file):0kB mapped:227060kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2014.389317] Node 1 active_anon:84664kB inactive_anon:3339720kB active_file:148kB inactive_file:12kB unevictable:87192kB isolated(anon):0kB isolated(file):0kB mapped:37744kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2014.594087] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.645450] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2014.650531] Node 0 DMA32 free:36024kB min:36272kB low:45340kB high:54408kB active_anon:746796kB inactive_anon:1018760kB active_file:4kB inactive_file:8kB unevictable:101416kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101416kB kernel_stack:12352kB pagetables:28388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.680461] lowmem_reserve[]: 0 0 0 0 0 [ 2014.684465] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.710061] lowmem_reserve[]: 0 0 0 0 0 [ 2014.714052] Node 1 Normal free:53540kB min:53612kB low:67012kB high:80412kB active_anon:84664kB inactive_anon:3339720kB active_file:144kB inactive_file:56kB unevictable:87196kB writepending:0kB present:3932160kB managed:3870192kB mlocked:87196kB kernel_stack:14784kB pagetables:44840kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2014.744365] lowmem_reserve[]: 0 0 0 0 0 [ 2014.748417] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2014.835111] Node 0 DMA32: 489*4kB (UME) 94*8kB (ME) 960*16kB (UME) 570*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36308kB [ 2014.931319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2015.017289] Node 1 Normal: 131*4kB (UME) 169*8kB (UME) 121*16kB (UE) 66*32kB (UME) 28*64kB (UME) 48*128kB (UME) 37*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 54052kB [ 2015.157104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.218188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.262477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.349111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.408835] 19067 total pagecache pages [ 2015.412856] 0 pages in swap cache [ 2015.464175] Swap cache stats: add 0, delete 0, find 0/0 [ 2015.512065] Free swap = 0kB [ 2015.533804] Total swap = 0kB [ 2015.554425] 1965979 pages RAM [ 2015.578226] 0 pages HighMem/MovableOnly [ 2015.582235] 339053 pages reserved [ 2015.643650] 0 pages cma reserved [ 2015.676117] Out of memory: Kill process 28088 (syz-executor.3) score 1009 or sacrifice child [ 2015.709927] Killed process 28089 (syz-executor.3) total-vm:75236kB, anon-rss:18040kB, file-rss:46252kB, shmem-rss:0kB [ 2015.780931] oom_reaper: reaped process 28089 (syz-executor.3), now anon-rss:18016kB, file-rss:11436kB, shmem-rss:0kB 07:52:40 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:40 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/233, 0xe9}], 0x1, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000180000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f7365300000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c827766d8a35132763397d9c002a00"/501], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{}, {}]}) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:40 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0xcd, 0x10202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x1010, 0xffffffffffffffff, 0xcbd1a000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000380)=ANY=[@ANYBLOB="72241400", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000bc17ccec6da9b42e1876f48b46c0f05c375d015cd8e4053e238743d7b32f82f30f6563ded6810a9167274d6b59db75a003c08d2c9cc658ec17c93d6c6c353606873a32039eb1ea021c86b4779a6edf057c8bc1f10871e0fcf953b2c500159b5e7cfc4aada74b65f8af9b642c4abbbd7bf9ea1ceb9bcf43368d0f3f94834735c2e2187530c65e1610e72c"], 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r5, r6, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x1) 07:52:40 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/511], 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x33, @dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0x1, 'ovf\x00', 0x11, 0x2, 0x80000045}, {@multicast2, 0x4e21, 0x0, 0x326, 0x7fff, 0x5}}, 0x44) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) 07:52:40 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2016.946135] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2017.057712] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2017.091405] CPU: 0 PID: 28122 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 2017.099332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2017.108862] Call Trace: [ 2017.111459] dump_stack+0x13e/0x194 [ 2017.115093] dump_header+0x178/0x6d4 [ 2017.118812] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2017.123828] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2017.128928] ? ___ratelimit+0x50/0x519 [ 2017.132814] oom_kill_process.cold+0x10/0xae3 [ 2017.137324] ? lock_downgrade+0x6e0/0x6e0 [ 2017.141481] out_of_memory+0x2d5/0x1110 [ 2017.145463] ? oom_killer_disable+0x1c0/0x1c0 [ 2017.149959] ? mutex_trylock+0x152/0x1a0 [ 2017.154928] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2017.159815] ? warn_alloc+0xf0/0xf0 [ 2017.163481] __alloc_pages_nodemask+0x5d3/0x700 [ 2017.168178] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2017.173195] ? find_held_lock+0x2d/0x110 [ 2017.177266] alloc_pages_vma+0xc2/0x4a0 [ 2017.181246] __handle_mm_fault+0x17b6/0x3280 [ 2017.185659] ? copy_page_range+0x1d70/0x1d70 [ 2017.190070] ? find_held_lock+0x2d/0x110 [ 2017.194147] handle_mm_fault+0x288/0x7a0 [ 2017.198218] __get_user_pages+0x44d/0x11e0 [ 2017.202462] ? follow_page_mask+0x1580/0x1580 [ 2017.207135] ? lock_acquire+0x170/0x3f0 [ 2017.211144] ? __mm_populate+0x1e3/0x2c0 [ 2017.215229] populate_vma_page_range+0x17b/0x210 [ 2017.220080] __mm_populate+0x195/0x2c0 [ 2017.223977] ? populate_vma_page_range+0x210/0x210 [ 2017.228911] ? security_capable+0x88/0xb0 [ 2017.233068] SyS_mlockall+0x3f5/0x520 [ 2017.236895] ? SyS_munlock+0xf0/0xf0 [ 2017.240758] do_syscall_64+0x1d5/0x640 [ 2017.244668] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2017.249953] RIP: 0033:0x45ca29 [ 2017.253142] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2017.260856] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2017.268136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2017.275779] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2017.283073] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2017.290372] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 2017.878604] Mem-Info: [ 2017.882184] active_anon:207636 inactive_anon:1090875 isolated_anon:0 [ 2017.882184] active_file:2 inactive_file:25 isolated_file:0 [ 2017.882184] unevictable:47574 dirty:0 writeback:0 unstable:0 [ 2017.882184] slab_reclaimable:19075 slab_unreclaimable:114322 [ 2017.882184] mapped:65898 shmem:12406 pagetables:18193 bounce:0 [ 2017.882184] free:25015 free_pcp:0 free_cma:0 [ 2017.916581] Node 0 active_anon:747032kB inactive_anon:1023828kB active_file:4kB inactive_file:4kB unevictable:101992kB isolated(anon):0kB isolated(file):0kB mapped:226824kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2017.945529] Node 1 active_anon:83512kB inactive_anon:3339672kB active_file:48kB inactive_file:52kB unevictable:88304kB isolated(anon):0kB isolated(file):0kB mapped:36768kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2017.974331] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.140928] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2018.171690] Node 0 DMA32 free:35960kB min:36272kB low:45340kB high:54408kB active_anon:746972kB inactive_anon:1018752kB active_file:4kB inactive_file:4kB unevictable:101992kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101992kB kernel_stack:12320kB pagetables:28284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.364176] lowmem_reserve[]: 0 0 0 0 0 [ 2018.390192] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.631145] lowmem_reserve[]: 0 0 0 0 0 [ 2018.648594] Node 1 Normal free:53528kB min:53612kB low:67012kB high:80412kB active_anon:83512kB inactive_anon:3339672kB active_file:132kB inactive_file:84kB unevictable:88304kB writepending:0kB present:3932160kB managed:3870192kB mlocked:88304kB kernel_stack:14592kB pagetables:44480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.693072] lowmem_reserve[]: 0 0 0 0 0 [ 2018.697289] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2018.716600] Node 0 DMA32: 606*4kB (UME) 72*8kB (UME) 923*16kB (UME) 569*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35976kB [ 2018.731816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2018.756271] Node 1 Normal: 179*4kB (UE) 144*8kB (UME) 74*16kB (UE) 55*32kB (UE) 47*64kB (UME) 39*128kB (UME) 37*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53004kB [ 2018.775120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.787182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2018.796270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.809005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2018.817909] 18707 total pagecache pages [ 2018.821980] 0 pages in swap cache [ 2018.831079] Swap cache stats: add 0, delete 0, find 0/0 [ 2018.837490] Free swap = 0kB [ 2018.840583] Total swap = 0kB [ 2018.843745] 1965979 pages RAM [ 2018.852100] 0 pages HighMem/MovableOnly [ 2018.858894] 339053 pages reserved [ 2018.862421] 0 pages cma reserved [ 2018.873199] Out of memory: Kill process 28108 (syz-executor.2) score 1007 or sacrifice child [ 2018.883871] Killed process 28108 (syz-executor.2) total-vm:74972kB, anon-rss:17980kB, file-rss:39340kB, shmem-rss:0kB [ 2018.952496] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2018.974730] in:imklog cpuset=/ mems_allowed=0-1 [ 2018.979696] CPU: 1 PID: 6033 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 2018.987230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2018.996579] Call Trace: [ 2018.999169] dump_stack+0x13e/0x194 [ 2019.002799] dump_header+0x178/0x6d4 [ 2019.006514] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2019.011632] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2019.016730] ? ___ratelimit+0x50/0x519 [ 2019.020707] oom_kill_process.cold+0x10/0xae3 [ 2019.025201] ? lock_acquire+0x170/0x3f0 [ 2019.029168] ? lock_downgrade+0x6e0/0x6e0 [ 2019.033328] out_of_memory+0x2d5/0x1110 [ 2019.037299] ? oom_killer_disable+0x1c0/0x1c0 [ 2019.041795] ? mutex_trylock+0x152/0x1a0 [ 2019.045856] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2019.050714] ? warn_alloc+0xf0/0xf0 [ 2019.054352] __alloc_pages_nodemask+0x5d3/0x700 [ 2019.059020] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2019.064033] ? lock_downgrade+0x6e0/0x6e0 [ 2019.068182] alloc_pages_current+0xe7/0x1e0 [ 2019.072508] __page_cache_alloc+0x245/0x3d0 [ 2019.076839] filemap_fault+0xc18/0x1c50 [ 2019.080827] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2019.085501] ? lock_acquire+0x170/0x3f0 [ 2019.089484] ? ext4_filemap_fault+0x7c/0xb0 [ 2019.093810] ext4_filemap_fault+0x84/0xb0 [ 2019.097955] __do_fault+0xfa/0x380 [ 2019.101492] __handle_mm_fault+0x22e9/0x3280 [ 2019.105900] ? copy_page_range+0x1d70/0x1d70 [ 2019.110306] ? find_held_lock+0x2d/0x110 [ 2019.114402] handle_mm_fault+0x288/0x7a0 [ 2019.118462] __do_page_fault+0x4bc/0xb40 [ 2019.122520] ? vmalloc_fault+0xdf0/0xdf0 [ 2019.126578] ? do_page_fault+0x60/0x4f2 [ 2019.130554] ? page_fault+0x2f/0x50 [ 2019.134176] page_fault+0x45/0x50 [ 2019.137619] RIP: 1fa0:0x1f9f 07:52:43 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 07:52:43 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:43 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0xcd, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000001000"/501], 0x1) 07:52:43 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f00000000c0)=0xffb6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none}, 0x53) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000480)="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", 0x167) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r1, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/492], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:43 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2019.140627] RSP: 0000:0000559b448b59d0 EFLAGS: 7f7fcd1fbda0 [ 2019.883344] Mem-Info: [ 2019.913933] active_anon:207741 inactive_anon:1090875 isolated_anon:0 [ 2019.913933] active_file:345 inactive_file:394 isolated_file:32 [ 2019.913933] unevictable:46106 dirty:0 writeback:0 unstable:0 [ 2019.913933] slab_reclaimable:19057 slab_unreclaimable:114749 [ 2019.913933] mapped:65694 shmem:12406 pagetables:18235 bounce:0 [ 2019.913933] free:25165 free_pcp:117 free_cma:0 [ 2019.953078] Node 0 active_anon:747232kB inactive_anon:1023828kB active_file:48kB inactive_file:4kB unevictable:101448kB isolated(anon):0kB isolated(file):0kB mapped:226860kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2019.992679] Node 1 active_anon:83732kB inactive_anon:3339672kB active_file:112kB inactive_file:236kB unevictable:85576kB isolated(anon):0kB isolated(file):128kB mapped:33716kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2020.312374] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2020.509723] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2020.548193] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018752kB active_file:48kB inactive_file:4kB unevictable:101448kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101448kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2020.778876] lowmem_reserve[]: 0 0 0 0 0 [ 2020.819884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2020.903513] lowmem_reserve[]: 0 0 0 0 0 [ 2020.907726] Node 1 Normal free:53432kB min:53612kB low:67012kB high:80412kB active_anon:83732kB inactive_anon:3339672kB active_file:80kB inactive_file:4kB unevictable:86040kB writepending:0kB present:3932160kB managed:3870192kB mlocked:86040kB kernel_stack:14560kB pagetables:44652kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2020.988975] lowmem_reserve[]: 0 0 0 0 0 [ 2021.002010] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2021.148901] Node 0 DMA32: 644*4kB (UME) 29*8kB (UE) 936*16kB (UME) 573*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 2021.277494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2021.331472] Node 1 Normal: 236*4kB (UME) 120*8kB (UME) 128*16kB (UME) 16*32kB (UE) 71*64kB (UME) 34*128kB (UME) 37*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53552kB [ 2021.470730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2021.549215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2021.608250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2021.672403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2021.735326] 17899 total pagecache pages [ 2021.767588] 0 pages in swap cache [ 2021.792044] Swap cache stats: add 0, delete 0, find 0/0 [ 2021.857943] Free swap = 0kB [ 2021.861065] Total swap = 0kB [ 2021.914165] 1965979 pages RAM [ 2021.936432] 0 pages HighMem/MovableOnly [ 2021.969056] 339053 pages reserved [ 2021.999272] 0 pages cma reserved [ 2022.027518] Out of memory: Kill process 28112 (syz-executor.3) score 1007 or sacrifice child [ 2022.152798] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2022.273615] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2022.309720] CPU: 0 PID: 28144 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 2022.317637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.326990] Call Trace: [ 2022.329585] dump_stack+0x13e/0x194 [ 2022.333217] dump_header+0x178/0x6d4 [ 2022.336929] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2022.341944] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2022.347045] ? ___ratelimit+0x50/0x519 [ 2022.350933] oom_kill_process.cold+0x10/0xae3 [ 2022.355434] ? lock_downgrade+0x6e0/0x6e0 [ 2022.359586] out_of_memory+0x2d5/0x1110 [ 2022.363565] ? oom_killer_disable+0x1c0/0x1c0 [ 2022.368058] ? mutex_trylock+0x152/0x1a0 [ 2022.372120] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2022.376974] ? warn_alloc+0xf0/0xf0 [ 2022.380597] ? find_held_lock+0x2d/0x110 [ 2022.384658] ? fs_reclaim_acquire+0x10/0x10 [ 2022.388989] __alloc_pages_nodemask+0x5d3/0x700 [ 2022.393659] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2022.398671] ? copy_process.part.0+0x17d5/0x6a50 [ 2022.403425] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2022.408446] ? __lock_acquire+0x5f7/0x4620 [ 2022.412681] ? trace_hardirqs_on+0x10/0x10 [ 2022.416917] copy_process.part.0+0x26a/0x6a50 [ 2022.421412] ? trace_hardirqs_on+0x10/0x10 [ 2022.425646] ? save_trace+0x290/0x290 [ 2022.429447] ? kcov_ioctl+0x4d/0x180 [ 2022.433160] ? find_held_lock+0x2d/0x110 [ 2022.437231] ? __cleanup_sighand+0x40/0x40 [ 2022.441458] ? lock_downgrade+0x6e0/0x6e0 [ 2022.445611] _do_fork+0x180/0xc80 [ 2022.449068] ? put_timespec64+0xaa/0xf0 [ 2022.453039] ? fork_idle+0x270/0x270 [ 2022.456757] ? SyS_clock_gettime+0xf5/0x180 [ 2022.461075] ? SyS_clock_settime+0x1a0/0x1a0 [ 2022.465480] ? fput+0xb/0x140 [ 2022.468586] ? do_syscall_64+0x4c/0x640 [ 2022.472556] ? sys_vfork+0x20/0x20 [ 2022.476114] do_syscall_64+0x1d5/0x640 [ 2022.480005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2022.485187] RIP: 0033:0x45ca29 [ 2022.488368] RSP: 002b:00007f38bfba2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2022.496073] RAX: ffffffffffffffda RBX: 00000000004dabc0 RCX: 000000000045ca29 [ 2022.503339] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2022.510606] RBP: 000000000078bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 2022.517873] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2022.525139] R13: 0000000000000076 R14: 00000000004c331e R15: 00007f38bfba36d4 07:52:46 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:46 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:52:46 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:47 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2023.465331] Mem-Info: [ 2023.492018] active_anon:207800 inactive_anon:1090929 isolated_anon:0 [ 2023.492018] active_file:27 inactive_file:0 isolated_file:0 [ 2023.492018] unevictable:46707 dirty:0 writeback:0 unstable:0 [ 2023.492018] slab_reclaimable:19046 slab_unreclaimable:114928 [ 2023.492018] mapped:65142 shmem:12406 pagetables:18238 bounce:0 [ 2023.492018] free:24941 free_pcp:0 free_cma:0 [ 2023.712331] Node 0 active_anon:747232kB inactive_anon:1023884kB active_file:4kB inactive_file:0kB unevictable:101856kB isolated(anon):0kB isolated(file):0kB mapped:226824kB dirty:4kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2023.941989] Node 1 active_anon:83976kB inactive_anon:3339672kB active_file:36kB inactive_file:0kB unevictable:85072kB isolated(anon):0kB isolated(file):0kB mapped:33644kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.177775] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.382380] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2024.417666] Node 0 DMA32 free:36188kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018752kB active_file:4kB inactive_file:0kB unevictable:101984kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101984kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2024.460698] lowmem_reserve[]: 0 0 0 0 0 [ 2024.467567] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.500858] lowmem_reserve[]: 0 0 0 0 0 [ 2024.510671] Node 1 Normal free:53508kB min:53612kB low:67012kB high:80412kB active_anon:83976kB inactive_anon:3339672kB active_file:44kB inactive_file:0kB unevictable:85072kB writepending:0kB present:3932160kB managed:3870192kB mlocked:85072kB kernel_stack:14592kB pagetables:44736kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 2024.548140] lowmem_reserve[]: 0 0 0 0 0 [ 2024.552422] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2024.578881] Node 0 DMA32: 661*4kB (UME) 45*8kB (UME) 930*16kB (UE) 571*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36156kB [ 2024.730156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2024.828773] Node 1 Normal: 269*4kB (UME) 106*8kB (UME) 60*16kB (UME) 45*32kB (UME) 75*64kB (UME) 33*128kB (UME) 37*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53540kB [ 2024.875219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.903913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.939620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.987101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.058478] 17910 total pagecache pages [ 2025.086993] 0 pages in swap cache [ 2025.118447] Swap cache stats: add 0, delete 0, find 0/0 [ 2025.153336] Free swap = 0kB [ 2025.178709] Total swap = 0kB [ 2025.209177] 1965979 pages RAM [ 2025.243049] 0 pages HighMem/MovableOnly [ 2025.266653] 339053 pages reserved [ 2025.297615] 0 pages cma reserved [ 2025.324053] Out of memory: Kill process 28129 (syz-executor.2) score 1008 or sacrifice child [ 2025.390442] Killed process 28144 (syz-executor.2) total-vm:74972kB, anon-rss:18028kB, file-rss:40304kB, shmem-rss:0kB [ 2025.478894] oom_reaper: reaped process 28144 (syz-executor.2), now anon-rss:18020kB, file-rss:5488kB, shmem-rss:0kB 07:52:49 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2027.119369] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2027.132203] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2027.138664] CPU: 0 PID: 6321 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 2027.146214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2027.155563] Call Trace: [ 2027.158157] dump_stack+0x13e/0x194 [ 2027.161793] dump_header+0x178/0x6d4 [ 2027.165495] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2027.170497] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2027.175601] ? ___ratelimit+0x50/0x519 [ 2027.179490] oom_kill_process.cold+0x10/0xae3 [ 2027.183974] ? lock_downgrade+0x6e0/0x6e0 [ 2027.188112] out_of_memory+0x2d5/0x1110 [ 2027.192076] ? oom_killer_disable+0x1c0/0x1c0 [ 2027.196553] ? mutex_trylock+0x152/0x1a0 [ 2027.200616] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2027.205448] ? warn_alloc+0xf0/0xf0 [ 2027.209135] __alloc_pages_nodemask+0x5d3/0x700 [ 2027.213827] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2027.218945] ? lock_downgrade+0x6e0/0x6e0 [ 2027.223085] alloc_pages_current+0xe7/0x1e0 [ 2027.227403] __page_cache_alloc+0x245/0x3d0 [ 2027.231738] filemap_fault+0xc18/0x1c50 [ 2027.235722] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2027.240377] ? lock_acquire+0x170/0x3f0 [ 2027.244336] ? ext4_filemap_fault+0x7c/0xb0 [ 2027.248642] ext4_filemap_fault+0x84/0xb0 [ 2027.252770] __do_fault+0xfa/0x380 [ 2027.256292] __handle_mm_fault+0x22e9/0x3280 [ 2027.260700] ? copy_page_range+0x1d70/0x1d70 [ 2027.265090] ? find_held_lock+0x2d/0x110 [ 2027.269149] handle_mm_fault+0x288/0x7a0 [ 2027.273193] __do_page_fault+0x4bc/0xb40 [ 2027.277337] ? vmalloc_fault+0xdf0/0xdf0 [ 2027.281479] ? do_page_fault+0x60/0x4f2 [ 2027.285434] ? page_fault+0x2f/0x50 [ 2027.289062] page_fault+0x45/0x50 [ 2027.292514] RIP: 2002db80:0x11 [ 2027.295707] RSP: 2015a400:000000c42016bda0 EFLAGS: c42002e7a0 [ 2027.296844] Mem-Info: [ 2027.305328] active_anon:207692 inactive_anon:1094143 isolated_anon:0 [ 2027.305328] active_file:31 inactive_file:34 isolated_file:15 [ 2027.305328] unevictable:44592 dirty:21 writeback:0 unstable:0 [ 2027.305328] slab_reclaimable:19070 slab_unreclaimable:113825 [ 2027.305328] mapped:70112 shmem:12406 pagetables:18182 bounce:0 [ 2027.305328] free:25030 free_pcp:0 free_cma:0 [ 2027.339440] Node 0 active_anon:747232kB inactive_anon:1023828kB active_file:84kB inactive_file:24kB unevictable:101356kB isolated(anon):0kB isolated(file):0kB mapped:227420kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2027.367951] Node 1 active_anon:83536kB inactive_anon:3352744kB active_file:40kB inactive_file:112kB unevictable:77012kB isolated(anon):0kB isolated(file):60kB mapped:53028kB dirty:84kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2027.396386] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.424425] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2027.429473] Node 0 DMA32 free:36160kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018752kB active_file:84kB inactive_file:4kB unevictable:101356kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101356kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.459306] lowmem_reserve[]: 0 0 0 0 0 [ 2027.463288] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.492757] lowmem_reserve[]: 0 0 0 0 0 [ 2027.496776] Node 1 Normal free:53480kB min:53612kB low:67012kB high:80412kB active_anon:83536kB inactive_anon:3352744kB active_file:0kB inactive_file:0kB unevictable:77012kB writepending:84kB present:3932160kB managed:3870192kB mlocked:77012kB kernel_stack:14528kB pagetables:44436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.526407] lowmem_reserve[]: 0 0 0 0 0 [ 2027.530378] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2027.546873] Node 0 DMA32: 659*4kB (UME) 87*8kB (UME) 935*16kB (UME) 569*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36500kB [ 2027.593799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2027.652659] Node 1 Normal: 513*4kB (UM) 1013*8kB (UM) 360*16kB (UME) 136*32kB (UME) 32*64kB (UME) 19*128kB (ME) 36*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 64684kB 07:52:50 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2027.713446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.733451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.742072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.793516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.802129] 23654 total pagecache pages [ 2027.831357] 0 pages in swap cache [ 2027.834884] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.840248] Free swap = 0kB [ 2027.843260] Total swap = 0kB [ 2027.863524] 1965979 pages RAM [ 2027.866657] 0 pages HighMem/MovableOnly [ 2027.883027] 339053 pages reserved [ 2027.886949] 0 pages cma reserved [ 2027.890692] Out of memory: Kill process 28147 (syz-executor.3) score 1010 or sacrifice child 07:52:52 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000380)=@ng={0x4, 0x11, "9bf8f7a7df7fc4ad7e4733345d7ed95d07f4e5"}, 0x15, 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:52 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:52:52 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2028.768424] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2028.841249] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2028.846145] CPU: 0 PID: 6318 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 2028.853585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.862936] Call Trace: [ 2028.865547] dump_stack+0x13e/0x194 [ 2028.869176] dump_header+0x178/0x6d4 [ 2028.872882] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2028.877886] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2028.883075] ? ___ratelimit+0x50/0x519 [ 2028.886956] oom_kill_process.cold+0x10/0xae3 [ 2028.891441] ? lock_acquire+0x170/0x3f0 [ 2028.895404] ? lock_downgrade+0x6e0/0x6e0 [ 2028.899539] out_of_memory+0x2d5/0x1110 [ 2028.903515] ? oom_killer_disable+0x1c0/0x1c0 [ 2028.908003] ? mutex_trylock+0x152/0x1a0 [ 2028.912049] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2028.916887] ? warn_alloc+0xf0/0xf0 [ 2028.920533] __alloc_pages_nodemask+0x5d3/0x700 [ 2028.925188] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2028.930187] ? lock_downgrade+0x6e0/0x6e0 [ 2028.934333] alloc_pages_current+0xe7/0x1e0 [ 2028.938660] __page_cache_alloc+0x245/0x3d0 [ 2028.942973] filemap_fault+0xc18/0x1c50 [ 2028.946957] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2028.951612] ? lock_acquire+0x170/0x3f0 [ 2028.955578] ? ext4_filemap_fault+0x7c/0xb0 [ 2028.959899] ext4_filemap_fault+0x84/0xb0 [ 2028.964035] __do_fault+0xfa/0x380 [ 2028.967581] __handle_mm_fault+0x22e9/0x3280 [ 2028.971990] ? copy_page_range+0x1d70/0x1d70 [ 2028.976399] ? find_held_lock+0x2d/0x110 [ 2028.980449] handle_mm_fault+0x288/0x7a0 [ 2028.984515] __do_page_fault+0x4bc/0xb40 [ 2028.988564] ? vmalloc_fault+0xdf0/0xdf0 [ 2028.992618] ? do_page_fault+0x60/0x4f2 [ 2028.996593] ? page_fault+0x2f/0x50 [ 2029.000204] page_fault+0x45/0x50 [ 2029.003642] RIP: 00f1:0x11 [ 2029.006476] RSP: 000d:000000c42004ff18 EFLAGS: 0042f0a0 [ 2029.012447] Mem-Info: [ 2029.120748] active_anon:207676 inactive_anon:1095373 isolated_anon:0 [ 2029.120748] active_file:19 inactive_file:21 isolated_file:0 [ 2029.120748] unevictable:43636 dirty:0 writeback:0 unstable:0 [ 2029.120748] slab_reclaimable:19098 slab_unreclaimable:113801 [ 2029.120748] mapped:64256 shmem:12406 pagetables:18195 bounce:0 [ 2029.120748] free:24920 free_pcp:30 free_cma:0 [ 2029.167395] Node 0 active_anon:747232kB inactive_anon:1023828kB active_file:0kB inactive_file:12kB unevictable:101768kB isolated(anon):0kB isolated(file):0kB mapped:226828kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2029.208372] Node 1 active_anon:83472kB inactive_anon:3357664kB active_file:84kB inactive_file:72kB unevictable:72776kB isolated(anon):0kB isolated(file):0kB mapped:30196kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2029.248521] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.287410] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2029.292494] Node 0 DMA32 free:36084kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018752kB active_file:32kB inactive_file:0kB unevictable:101768kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101768kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.332260] lowmem_reserve[]: 0 0 0 0 0 [ 2029.336333] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.371754] lowmem_reserve[]: 0 0 0 0 0 [ 2029.375829] Node 1 Normal free:53116kB min:53612kB low:67012kB high:80412kB active_anon:83472kB inactive_anon:3357664kB active_file:128kB inactive_file:0kB unevictable:72276kB writepending:0kB present:3932160kB managed:3870192kB mlocked:72276kB kernel_stack:14560kB pagetables:44488kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2029.415785] lowmem_reserve[]: 0 0 0 0 0 [ 2029.419809] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2029.445470] Node 0 DMA32: 631*4kB (UME) 57*8kB (UME) 927*16kB (UME) 571*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 2029.469012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2029.482071] Node 1 Normal: 149*4kB (UME) 7*8kB (UME) 157*16kB (UE) 143*32kB (UE) 47*64kB (UE) 19*128kB (UME) 36*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53116kB [ 2029.508421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.519957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.535579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.552532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.571295] 17029 total pagecache pages [ 2029.575600] 0 pages in swap cache [ 2029.579249] Swap cache stats: add 0, delete 0, find 0/0 [ 2029.594637] Free swap = 0kB [ 2029.597821] Total swap = 0kB [ 2029.600984] 1965979 pages RAM [ 2029.611809] 0 pages HighMem/MovableOnly [ 2029.618652] 339053 pages reserved [ 2029.622280] 0 pages cma reserved [ 2029.636223] Out of memory: Kill process 28182 (syz-executor.4) score 1007 or sacrifice child [ 2029.652116] Killed process 28182 (syz-executor.4) total-vm:74972kB, anon-rss:17984kB, file-rss:39340kB, shmem-rss:0kB [ 2029.711566] oom_reaper: reaped process 28182 (syz-executor.4), now anon-rss:18024kB, file-rss:6064kB, shmem-rss:0kB [ 2030.403949] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2030.519760] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2030.531193] CPU: 1 PID: 28186 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 2030.539111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.548745] Call Trace: [ 2030.551332] dump_stack+0x13e/0x194 [ 2030.554959] dump_header+0x178/0x6d4 [ 2030.558676] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2030.563695] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2030.568797] ? ___ratelimit+0x50/0x519 [ 2030.572706] oom_kill_process.cold+0x10/0xae3 [ 2030.577276] ? lock_downgrade+0x6e0/0x6e0 [ 2030.581427] out_of_memory+0x2d5/0x1110 [ 2030.585385] ? oom_killer_disable+0x1c0/0x1c0 [ 2030.590052] ? mutex_trylock+0x152/0x1a0 [ 2030.594103] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2030.598956] ? warn_alloc+0xf0/0xf0 [ 2030.602583] __alloc_pages_nodemask+0x5d3/0x700 [ 2030.607253] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2030.612265] ? mark_held_locks+0xa6/0xf0 [ 2030.616400] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2030.621678] alloc_pages_vma+0xc2/0x4a0 [ 2030.625654] __handle_mm_fault+0x17b6/0x3280 [ 2030.630058] ? copy_page_range+0x1d70/0x1d70 [ 2030.635016] ? find_held_lock+0x2d/0x110 [ 2030.639099] handle_mm_fault+0x288/0x7a0 [ 2030.643178] __get_user_pages+0x44d/0x11e0 [ 2030.647886] ? follow_page_mask+0x1580/0x1580 [ 2030.652398] ? lock_acquire+0x170/0x3f0 [ 2030.656389] ? __mm_populate+0x1e3/0x2c0 [ 2030.660460] populate_vma_page_range+0x17b/0x210 [ 2030.665259] __mm_populate+0x195/0x2c0 [ 2030.669150] ? populate_vma_page_range+0x210/0x210 [ 2030.674075] ? security_capable+0x88/0xb0 [ 2030.678224] SyS_mlockall+0x3f5/0x520 [ 2030.682021] ? SyS_munlock+0xf0/0xf0 [ 2030.685733] do_syscall_64+0x1d5/0x640 [ 2030.689626] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2030.694810] RIP: 0033:0x45ca29 [ 2030.698349] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2030.706165] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2030.713722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2030.720985] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2030.728339] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2030.735610] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f38bfbc46d4 [ 2031.561704] Mem-Info: [ 2031.571159] active_anon:207677 inactive_anon:1099891 isolated_anon:0 [ 2031.571159] active_file:22 inactive_file:10 isolated_file:0 [ 2031.571159] unevictable:39064 dirty:6 writeback:0 unstable:0 [ 2031.571159] slab_reclaimable:19093 slab_unreclaimable:113766 [ 2031.571159] mapped:65000 shmem:12406 pagetables:18204 bounce:0 [ 2031.571159] free:24955 free_pcp:0 free_cma:0 [ 2031.774549] Node 0 active_anon:747232kB inactive_anon:1024072kB active_file:0kB inactive_file:0kB unevictable:102648kB isolated(anon):0kB isolated(file):0kB mapped:228012kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2031.876465] Node 1 active_anon:83460kB inactive_anon:3375412kB active_file:48kB inactive_file:52kB unevictable:53700kB isolated(anon):0kB isolated(file):44kB mapped:31884kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2031.923108] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2031.975312] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2031.980514] Node 0 DMA32 free:36556kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1019296kB active_file:0kB inactive_file:124kB unevictable:101076kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101040kB kernel_stack:12288kB pagetables:28288kB bounce:0kB free_pcp:708kB local_pcp:8kB free_cma:0kB 07:52:56 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:52:56 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@x25={0x9, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/183, 0xb7}], 0x3}, 0x12040) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2032.183528] lowmem_reserve[]: 0 0 0 0 0 07:52:56 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r4, &(0x7f0000006100)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/166, 0xa6}], 0x6, &(0x7f0000000780)=""/119, 0x77}, 0x8000}, {{&(0x7f0000000800)=@ax25={{0x3, @null}, [@remote, @null, @null, @null, @default, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000880)=""/131, 0x83}, {&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x3}, 0x1000}, {{&(0x7f0000000a40)=@can, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/252, 0xfc}], 0x1, &(0x7f0000000c00)}, 0x3f}, {{&(0x7f0000000c40)=@xdp, 0x80, &(0x7f0000004380)=[{&(0x7f0000000cc0)=""/217, 0xd9}, {&(0x7f0000000dc0)=""/37, 0x25}, {&(0x7f0000003000)=""/74, 0x4a}, {&(0x7f0000003080)=""/94, 0x5e}, {&(0x7f0000003100)=""/79, 0x4f}, {&(0x7f0000003180)=""/207, 0xcf}, {&(0x7f0000003280)=""/41, 0x29}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/151, 0x97}], 0x9, &(0x7f0000004440)=""/128, 0x80}, 0x1}, {{&(0x7f00000044c0)=@xdp, 0x80, &(0x7f0000005880)=[{&(0x7f0000004540)=""/62, 0x3e}, {&(0x7f0000004580)}, {&(0x7f00000045c0)=""/224, 0xe0}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/134, 0x86}, {&(0x7f0000005780)=""/233, 0xe9}], 0x6, &(0x7f0000005900)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005a80)=""/131, 0x83}, {&(0x7f0000005b40)=""/18, 0x12}, {&(0x7f0000005b80)=""/16, 0x10}, {&(0x7f0000005bc0)=""/218, 0xda}, {&(0x7f0000005cc0)=""/212, 0xd4}, {&(0x7f0000005dc0)=""/81, 0x51}, {&(0x7f0000005e40)=""/148, 0x94}, {&(0x7f0000005f00)=""/123, 0x7b}], 0x8, &(0x7f0000006000)=""/251, 0xfb}, 0x2}], 0x6, 0x10000, &(0x7f0000006280)={0x77359400}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000062c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007408195c25c4791f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ad30705cfef2a7a668e926f2ee18c8db0402bb6b216e65b233650fa8cbec80a3833c50a67530ddf92c315e643b92ebeee2ef21ebd15cf0c8fbf6470fc22fba70cd42d2c1379b9d92607df5416f3f6c173a3b47941ebf54cfac92ab7fc86ac54b8201cfc083ebe61e381fb19d31ea2f7f5d7e98c7edc250"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) [ 2032.210404] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.289485] lowmem_reserve[]: 0 0 0 0 0 [ 2032.329630] Node 1 Normal free:74528kB min:53612kB low:67012kB high:80412kB active_anon:83460kB inactive_anon:3375876kB active_file:3596kB inactive_file:4224kB unevictable:23920kB writepending:0kB present:3932160kB managed:3870192kB mlocked:23904kB kernel_stack:14304kB pagetables:44396kB bounce:0kB free_pcp:1056kB local_pcp:684kB free_cma:0kB [ 2032.468098] lowmem_reserve[]: 0 0 0 0 0 [ 2032.483570] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2032.575157] Node 0 DMA32: 567*4kB (UME) 67*8kB (UME) 924*16kB (UE) 571*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35860kB [ 2032.627051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2032.681444] Node 1 Normal: 320*4kB (UM) 90*8kB (UME) 139*16kB (UME) 149*32kB (UME) 48*64kB (UME) 18*128kB (UME) 36*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 54304kB [ 2032.722758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2032.751440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2032.808906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2032.863998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2032.950397] 16475 total pagecache pages [ 2032.972512] 0 pages in swap cache [ 2032.992155] Swap cache stats: add 0, delete 0, find 0/0 [ 2033.019123] Free swap = 0kB [ 2033.031313] Total swap = 0kB [ 2033.044830] 1965979 pages RAM [ 2033.058450] 0 pages HighMem/MovableOnly [ 2033.077484] 339053 pages reserved [ 2033.093042] 0 pages cma reserved [ 2033.132163] Out of memory: Kill process 28178 (syz-executor.3) score 1009 or sacrifice child [ 2033.209151] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2033.311562] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2033.338222] CPU: 1 PID: 28201 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 2033.346225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.355582] Call Trace: [ 2033.358184] dump_stack+0x13e/0x194 [ 2033.361905] dump_header+0x178/0x6d4 [ 2033.365621] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2033.370636] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2033.376258] ? ___ratelimit+0x50/0x519 [ 2033.380154] oom_kill_process.cold+0x10/0xae3 [ 2033.384653] ? lock_downgrade+0x6e0/0x6e0 [ 2033.388808] out_of_memory+0x2d5/0x1110 [ 2033.392790] ? oom_killer_disable+0x1c0/0x1c0 [ 2033.397325] ? mutex_trylock+0x152/0x1a0 [ 2033.401389] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2033.406336] ? warn_alloc+0xf0/0xf0 [ 2033.409976] __alloc_pages_nodemask+0x5d3/0x700 [ 2033.414648] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2033.419667] ? lock_downgrade+0x6e0/0x6e0 [ 2033.423827] alloc_pages_current+0xe7/0x1e0 [ 2033.428151] __page_cache_alloc+0x245/0x3d0 [ 2033.432476] filemap_fault+0xc18/0x1c50 [ 2033.436460] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2033.441133] ? lock_acquire+0x170/0x3f0 [ 2033.445110] ? ext4_filemap_fault+0x7c/0xb0 [ 2033.449455] ext4_filemap_fault+0x84/0xb0 [ 2033.453606] __do_fault+0xfa/0x380 [ 2033.457147] __handle_mm_fault+0x22e9/0x3280 [ 2033.461564] ? copy_page_range+0x1d70/0x1d70 [ 2033.465972] ? find_held_lock+0x2d/0x110 [ 2033.470051] handle_mm_fault+0x288/0x7a0 [ 2033.474119] __get_user_pages+0x44d/0x11e0 [ 2033.478373] ? follow_page_mask+0x1580/0x1580 [ 2033.482879] ? lock_acquire+0x170/0x3f0 [ 2033.486939] ? __mm_populate+0x1e3/0x2c0 [ 2033.491182] populate_vma_page_range+0x17b/0x210 [ 2033.495941] __mm_populate+0x195/0x2c0 [ 2033.499840] ? populate_vma_page_range+0x210/0x210 [ 2033.504769] ? security_capable+0x88/0xb0 [ 2033.508921] SyS_mlockall+0x3f5/0x520 [ 2033.512747] ? SyS_munlock+0xf0/0xf0 [ 2033.516463] do_syscall_64+0x1d5/0x640 [ 2033.520353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2033.525541] RIP: 0033:0x45ca29 [ 2033.528726] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2033.536435] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2033.543704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2033.550974] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2033.558255] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2033.565533] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 2033.858186] Mem-Info: [ 2033.860666] active_anon:207768 inactive_anon:1099887 isolated_anon:0 [ 2033.860666] active_file:5 inactive_file:38 isolated_file:0 [ 2033.860666] unevictable:39283 dirty:7 writeback:0 unstable:0 [ 2033.860666] slab_reclaimable:19112 slab_unreclaimable:113323 [ 2033.860666] mapped:63668 shmem:12406 pagetables:18251 bounce:0 [ 2033.860666] free:24921 free_pcp:0 free_cma:0 [ 2033.920920] Node 0 active_anon:747232kB inactive_anon:1024072kB active_file:4kB inactive_file:0kB unevictable:101604kB isolated(anon):0kB isolated(file):0kB mapped:227020kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.133800] Node 1 active_anon:83840kB inactive_anon:3375476kB active_file:80kB inactive_file:68kB unevictable:55760kB isolated(anon):0kB isolated(file):0kB mapped:27812kB dirty:28kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.199329] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.301473] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2034.327282] Node 0 DMA32 free:36124kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018996kB active_file:4kB inactive_file:0kB unevictable:101604kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101604kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.471553] lowmem_reserve[]: 0 0 0 0 0 [ 2034.475631] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.517063] lowmem_reserve[]: 0 0 0 0 0 [ 2034.521106] Node 1 Normal free:53604kB min:53612kB low:67012kB high:80412kB active_anon:83840kB inactive_anon:3375476kB active_file:24kB inactive_file:20kB unevictable:55760kB writepending:28kB present:3932160kB managed:3870192kB mlocked:55760kB kernel_stack:14528kB pagetables:44716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.694555] lowmem_reserve[]: 0 0 0 0 0 [ 2034.698602] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2034.828163] Node 0 DMA32: 634*4kB (UME) 35*8kB (UME) 931*16kB (UME) 571*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35984kB [ 2034.908559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2034.935109] Node 1 Normal: 60*4kB (UME) 121*8kB (UM) 153*16kB (UME) 166*32kB (UME) 58*64kB (UME) 5*128kB (UE) 35*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53000kB [ 2034.965570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.981841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.000423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.009355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.027906] 16502 total pagecache pages [ 2035.031922] 0 pages in swap cache [ 2035.037993] Swap cache stats: add 0, delete 0, find 0/0 [ 2035.050977] Free swap = 0kB [ 2035.057121] Total swap = 0kB [ 2035.060303] 1965979 pages RAM [ 2035.071137] 0 pages HighMem/MovableOnly [ 2035.078040] 339053 pages reserved [ 2035.081639] 0 pages cma reserved [ 2035.092686] Out of memory: Kill process 28200 (syz-executor.0) score 1008 or sacrifice child [ 2035.111652] Killed process 28207 (syz-executor.0) total-vm:74972kB, anon-rss:18024kB, file-rss:34816kB, shmem-rss:0kB [ 2035.156806] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2035.175523] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2035.180672] CPU: 1 PID: 28201 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 2035.188545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.197904] Call Trace: [ 2035.200490] dump_stack+0x13e/0x194 [ 2035.204318] dump_header+0x178/0x6d4 [ 2035.208030] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2035.213044] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2035.218143] ? ___ratelimit+0x50/0x519 [ 2035.222024] oom_kill_process.cold+0x10/0xae3 [ 2035.226515] ? lock_downgrade+0x6e0/0x6e0 [ 2035.230673] out_of_memory+0x2d5/0x1110 [ 2035.234652] ? oom_killer_disable+0x1c0/0x1c0 [ 2035.239156] ? mutex_trylock+0x152/0x1a0 [ 2035.243349] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2035.248209] ? warn_alloc+0xf0/0xf0 [ 2035.251834] __alloc_pages_nodemask+0x5d3/0x700 [ 2035.256502] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2035.261572] ? lock_downgrade+0x6e0/0x6e0 [ 2035.265729] alloc_pages_current+0xe7/0x1e0 [ 2035.270057] __page_cache_alloc+0x245/0x3d0 [ 2035.274379] filemap_fault+0xc18/0x1c50 [ 2035.278354] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2035.283286] ? lock_acquire+0x170/0x3f0 [ 2035.287256] ? ext4_filemap_fault+0x7c/0xb0 [ 2035.291569] ext4_filemap_fault+0x84/0xb0 [ 2035.295804] __do_fault+0xfa/0x380 [ 2035.299340] __handle_mm_fault+0x22e9/0x3280 [ 2035.303749] ? copy_page_range+0x1d70/0x1d70 [ 2035.308162] ? find_held_lock+0x2d/0x110 [ 2035.312235] handle_mm_fault+0x288/0x7a0 [ 2035.316291] __get_user_pages+0x44d/0x11e0 [ 2035.320521] ? follow_page_mask+0x1580/0x1580 [ 2035.325010] ? lock_acquire+0x170/0x3f0 [ 2035.328979] ? __mm_populate+0x1e3/0x2c0 [ 2035.333043] populate_vma_page_range+0x17b/0x210 [ 2035.337802] __mm_populate+0x195/0x2c0 [ 2035.341682] ? populate_vma_page_range+0x210/0x210 [ 2035.346603] ? security_capable+0x88/0xb0 [ 2035.350762] SyS_mlockall+0x3f5/0x520 [ 2035.354553] ? SyS_munlock+0xf0/0xf0 [ 2035.358264] do_syscall_64+0x1d5/0x640 [ 2035.362146] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2035.367320] RIP: 0033:0x45ca29 [ 2035.370499] RSP: 002b:00007fe0c34d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2035.378193] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 2035.385459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2035.392722] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2035.399988] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2035.407252] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fe0c34d76d4 [ 2035.422318] Mem-Info: [ 2035.424952] active_anon:207768 inactive_anon:1099887 isolated_anon:0 [ 2035.424952] active_file:9 inactive_file:19 isolated_file:0 [ 2035.424952] unevictable:39504 dirty:7 writeback:0 unstable:0 [ 2035.424952] slab_reclaimable:19103 slab_unreclaimable:113313 [ 2035.424952] mapped:63708 shmem:12406 pagetables:18252 bounce:0 [ 2035.424952] free:24938 free_pcp:30 free_cma:0 [ 2035.480849] Node 0 active_anon:747232kB inactive_anon:1024072kB active_file:8kB inactive_file:0kB unevictable:101604kB isolated(anon):0kB isolated(file):0kB mapped:227020kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.521151] Node 1 active_anon:83840kB inactive_anon:3375476kB active_file:28kB inactive_file:80kB unevictable:56412kB isolated(anon):0kB isolated(file):0kB mapped:27812kB dirty:28kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.567760] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.601000] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2035.618662] Node 0 DMA32 free:36000kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018996kB active_file:4kB inactive_file:0kB unevictable:101604kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101604kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2035.658651] lowmem_reserve[]: 0 0 0 0 0 [ 2035.662678] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.698487] lowmem_reserve[]: 0 0 0 0 0 [ 2035.702510] Node 1 Normal free:53356kB min:53612kB low:67012kB high:80412kB active_anon:83824kB inactive_anon:3375412kB active_file:92kB inactive_file:16kB unevictable:56412kB writepending:28kB present:3932160kB managed:3870192kB mlocked:56412kB kernel_stack:14400kB pagetables:44588kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.741084] lowmem_reserve[]: 0 0 0 0 0 [ 2035.745187] Node 0 DMA: 6*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 2035.771177] Node 0 DMA32: 642*4kB (UME) 31*8kB (UME) 931*16kB (UME) 570*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB [ 2035.794887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2035.815694] Node 1 Normal: 117*4kB (UME) 121*8kB (UM) 153*16kB (UME) 170*32kB (UME) 58*64kB (UME) 5*128kB (UE) 35*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53356kB [ 2035.837571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.851497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.870158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.881374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.899996] 16478 total pagecache pages [ 2035.906479] 0 pages in swap cache [ 2035.909930] Swap cache stats: add 0, delete 0, find 0/0 [ 2035.925563] Free swap = 0kB [ 2035.928594] Total swap = 0kB [ 2035.931601] 1965979 pages RAM [ 2035.939839] 0 pages HighMem/MovableOnly [ 2035.948871] 339053 pages reserved [ 2035.952323] 0 pages cma reserved [ 2035.960880] Out of memory: Kill process 28200 (syz-executor.0) score 1008 or sacrifice child [ 2035.979594] Killed process 28201 (syz-executor.0) total-vm:74972kB, anon-rss:17988kB, file-rss:40176kB, shmem-rss:0kB [ 2036.008571] oom_reaper: reaped process 28201 (syz-executor.0), now anon-rss:18016kB, file-rss:6064kB, shmem-rss:0kB [ 2036.049022] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2036.126080] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2036.131094] CPU: 0 PID: 6340 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 2036.138539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.147887] Call Trace: [ 2036.150471] dump_stack+0x13e/0x194 [ 2036.154081] dump_header+0x178/0x6d4 [ 2036.157775] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2036.162769] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2036.167848] ? ___ratelimit+0x50/0x519 [ 2036.171714] oom_kill_process.cold+0x10/0xae3 [ 2036.176201] ? lock_acquire+0x170/0x3f0 [ 2036.180167] ? lock_downgrade+0x6e0/0x6e0 [ 2036.184306] out_of_memory+0x2d5/0x1110 [ 2036.188271] ? oom_killer_disable+0x1c0/0x1c0 [ 2036.192743] ? mutex_trylock+0x152/0x1a0 [ 2036.196782] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2036.201612] ? warn_alloc+0xf0/0xf0 [ 2036.205221] __alloc_pages_nodemask+0x5d3/0x700 [ 2036.209955] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2036.214947] ? lock_downgrade+0x6e0/0x6e0 [ 2036.219078] alloc_pages_current+0xe7/0x1e0 [ 2036.223455] __page_cache_alloc+0x245/0x3d0 [ 2036.227774] filemap_fault+0xc18/0x1c50 [ 2036.231741] ? __lock_page_or_retry+0x8a0/0x8a0 [ 2036.236391] ? lock_acquire+0x170/0x3f0 [ 2036.240360] ? ext4_filemap_fault+0x7c/0xb0 [ 2036.244664] ext4_filemap_fault+0x84/0xb0 [ 2036.248789] __do_fault+0xfa/0x380 [ 2036.252319] __handle_mm_fault+0x22e9/0x3280 [ 2036.256716] ? copy_page_range+0x1d70/0x1d70 [ 2036.261113] ? find_held_lock+0x2d/0x110 [ 2036.265167] handle_mm_fault+0x288/0x7a0 [ 2036.269216] __do_page_fault+0x4bc/0xb40 [ 2036.273256] ? vmalloc_fault+0xdf0/0xdf0 [ 2036.277300] ? do_page_fault+0x60/0x4f2 [ 2036.281259] ? page_fault+0x2f/0x50 [ 2036.284862] page_fault+0x45/0x50 [ 2036.288293] RIP: 0001:0x11 [ 2036.291123] RSP: 3b86972a:000000c42003aee8 EFLAGS: 1d98b700eae [ 2036.390705] Mem-Info: [ 2036.403343] active_anon:207762 inactive_anon:1102346 isolated_anon:0 [ 2036.403343] active_file:1986 inactive_file:1635 isolated_file:40 [ 2036.403343] unevictable:26880 dirty:32 writeback:0 unstable:0 [ 2036.403343] slab_reclaimable:19102 slab_unreclaimable:113387 [ 2036.403343] mapped:62158 shmem:12406 pagetables:18220 bounce:0 [ 2036.403343] free:31050 free_pcp:416 free_cma:0 [ 2036.460169] Node 0 active_anon:747232kB inactive_anon:1024672kB active_file:124kB inactive_file:76kB unevictable:100508kB isolated(anon):0kB isolated(file):0kB mapped:226820kB dirty:0kB writeback:0kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.510332] Node 1 active_anon:83816kB inactive_anon:3375412kB active_file:13032kB inactive_file:1308kB unevictable:112kB isolated(anon):0kB isolated(file):32kB mapped:15012kB dirty:128kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2036.545640] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.577096] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2036.582198] Node 0 DMA32 free:37048kB min:36272kB low:45340kB high:54408kB active_anon:747172kB inactive_anon:1018996kB active_file:180kB inactive_file:28kB unevictable:100424kB writepending:0kB present:3129332kB managed:2621260kB mlocked:100372kB kernel_stack:12288kB pagetables:28284kB bounce:0kB free_pcp:1044kB local_pcp:372kB free_cma:0kB [ 2036.617779] lowmem_reserve[]: 0 0 0 0 0 [ 2036.624653] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.724411] lowmem_reserve[]: 0 0 0 0 0 [ 2036.729333] Node 1 Normal free:87832kB min:53612kB low:67012kB high:80412kB active_anon:84152kB inactive_anon:3375412kB active_file:10652kB inactive_file:7000kB unevictable:452kB writepending:180kB present:3932160kB managed:3870192kB mlocked:160kB kernel_stack:14368kB pagetables:44368kB bounce:0kB free_pcp:216kB local_pcp:188kB free_cma:0kB [ 2036.842681] lowmem_reserve[]: 0 0 0 0 0 [ 2036.846748] Node 0 DMA: 8*4kB (UME) 9*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10456kB [ 2036.902672] Node 0 DMA32: 722*4kB (UME) 85*8kB (UME) 921*16kB (UME) 571*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36576kB [ 2036.949855] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2036.990533] Node 1 Normal: 1575*4kB (UME) 1706*8kB (UM) 889*16kB (UME) 160*32kB (UME) 112*64kB (UME) 8*128kB (UME) 36*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 87420kB [ 2037.052495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.093233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.101853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.145601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.180424] 16962 total pagecache pages [ 2037.191855] 0 pages in swap cache [ 2037.207605] Swap cache stats: add 0, delete 0, find 0/0 [ 2037.233127] Free swap = 0kB [ 2037.236262] Total swap = 0kB [ 2037.239289] 1965979 pages RAM [ 2037.242395] 0 pages HighMem/MovableOnly [ 2037.267046] 339053 pages reserved [ 2037.270534] 0 pages cma reserved [ 2037.287264] Out of memory: Kill process 28185 (syz-executor.2) score 1007 or sacrifice child 07:53:01 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:53:01 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:53:01 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) prctl$PR_MCE_KILL_GET(0x22) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 07:53:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000140)=0x13c) 07:53:01 executing program 3: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="128505a9ce742cce47802f1a3c1eb706cec9099efd4f17b9ce364a0546c0cea93cc39c457e779a9713bc886ac2a9baaa0ea259cab04a97ad0d3bb34da3df93c652117515e0b9dcf3e30571b6ed9830976d44d731a1ae2fcdae497055c71078ba4c4564ced65c65abdf1613272ae9734a6418946c4253b7f7a2d0aea01e104eff46ebed0aa3a5323ab9be1a5539312a87e808c519a27a5a67e386702a75e59b182eb297c5e129df5f9d507161cb294f9b700c2085899d2089af7d11d1a814349c04fd0603333a55a3377ef7411af516e1c330ec73b9b9506aa4a59fce76ca3faa", 0xe0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r6) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="08020000feffffff080000000000000004000000000000000100a31b637e7c6de7761268c3918e5ddc000000000000400000000000000003000000000000000800000020000000050000000000000009000000000000000100000000000000ff0100000000000001ffffffffffffff7c00000000000000040000000100000004000000810000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="88e3e86e03000000000000000400000000000000ffffffff0000000013000000090000006367726f75702e636f6e74726f6c6c65727300000000000006000000000000000100000000000000d456000000000000010400000000000000000000000000000200000000000000080000000000000037feffffffffffff090000000000000000000000000000000300000000000000ff0000005c0000006b0000000000000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000910b000000000000030000000000000006000000000000000e000000a67f00002f6465762f7562695f6374726c00000004000000000000000000000000000000ffffff7f000000003f0000000000000000000000030000000500000000000000000000000000000000000000010000000400000000000000020000000000000004000000000000000000000000000000ff0000000800000088090000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="010000009e0f00000000000004000000000000000100000000000000050000000800000066642f3300000000"], 0x208) sendfile(r3, r4, 0x0, 0x100000080000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/501], 0x1) 07:53:01 executing program 2: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) [ 2037.810204] syz-executor.2: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2037.889928] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2037.896234] ceph: No mds server is up or the cluster is laggy [ 2037.920462] CPU: 0 PID: 28227 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 2037.928382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2037.937737] Call Trace: [ 2037.940330] dump_stack+0x13e/0x194 [ 2037.943942] warn_alloc.cold+0x96/0x1af [ 2037.947913] ? zone_watermark_ok_safe+0x280/0x280 [ 2037.952741] ? __alloc_pages_direct_compact+0xba/0x360 [ 2037.958107] __alloc_pages_slowpath+0x2114/0x26c0 [ 2037.963040] ? warn_alloc+0xf0/0xf0 [ 2037.966908] ? find_held_lock+0x2d/0x110 [ 2037.970966] ? fs_reclaim_acquire+0x10/0x10 [ 2037.975275] __alloc_pages_nodemask+0x5d3/0x700 [ 2037.979939] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2037.984791] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2037.989796] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2037.994898] ? cache_grow_begin+0x32d/0x410 [ 2037.999221] cache_grow_begin+0x7b/0x410 [ 2038.003277] fallback_alloc+0x205/0x2b0 [ 2038.007234] __kmalloc+0x214/0x7c0 [ 2038.010773] ? mempool_create_node+0x2cd/0x3c0 [ 2038.015339] ? __lockdep_init_map+0x100/0x560 [ 2038.019951] ? mempool_resize+0x5d0/0x5d0 [ 2038.024081] mempool_create_node+0x2cd/0x3c0 [ 2038.028566] ceph_mount+0x796/0x1815 [ 2038.032278] ? ceph_mount+0x2/0x1815 [ 2038.035973] mount_fs+0x92/0x2a0 [ 2038.039337] vfs_kern_mount.part.0+0x5b/0x3c0 [ 2038.043814] do_mount+0x3c9/0x24f0 [ 2038.047423] ? check_preemption_disabled+0x35/0x240 [ 2038.052419] ? copy_mount_string+0x40/0x40 [ 2038.056641] ? copy_mnt_ns+0x8a0/0x8a0 [ 2038.060510] ? copy_mount_options+0x1ec/0x2e0 [ 2038.064998] ? copy_mnt_ns+0x8a0/0x8a0 [ 2038.068879] SyS_mount+0xa8/0x120 [ 2038.072330] ? copy_mnt_ns+0x8a0/0x8a0 [ 2038.076227] do_syscall_64+0x1d5/0x640 [ 2038.080114] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2038.085291] RIP: 0033:0x45ca29 [ 2038.088460] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2038.096147] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 2038.103395] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 2038.110644] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2038.117892] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2038.125140] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007f38bfbc46d4 [ 2038.141513] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2038.150306] Mem-Info: [ 2038.193835] active_anon:207814 inactive_anon:1099871 isolated_anon:0 [ 2038.193835] active_file:34 inactive_file:0 isolated_file:0 [ 2038.193835] unevictable:38562 dirty:9 writeback:7 unstable:0 [ 2038.193835] slab_reclaimable:19108 slab_unreclaimable:113951 [ 2038.193835] mapped:64369 shmem:12406 pagetables:18264 bounce:0 [ 2038.193835] free:24904 free_pcp:5 free_cma:0 [ 2038.238513] Node 0 active_anon:747536kB inactive_anon:1024072kB active_file:60kB inactive_file:24kB unevictable:105004kB isolated(anon):0kB isolated(file):0kB mapped:227884kB dirty:0kB writeback:4kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2038.242191] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2038.268157] Node 1 active_anon:83720kB inactive_anon:3375412kB active_file:76kB inactive_file:0kB unevictable:49244kB isolated(anon):0kB isolated(file):24kB mapped:29592kB dirty:36kB writeback:24kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2038.272254] CPU: 1 PID: 28216 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 2038.302894] Node 0 [ 2038.308272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2038.308276] Call Trace: [ 2038.308294] dump_stack+0x13e/0x194 [ 2038.308309] dump_header+0x178/0x6d4 [ 2038.308321] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 2038.310714] DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.320573] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2038.320583] ? ___ratelimit+0x50/0x519 [ 2038.320596] oom_kill_process.cold+0x10/0xae3 [ 2038.320605] ? lock_acquire+0x170/0x3f0 [ 2038.320612] ? lock_downgrade+0x6e0/0x6e0 [ 2038.320622] out_of_memory+0x2d5/0x1110 [ 2038.320634] ? oom_killer_disable+0x1c0/0x1c0 [ 2038.320681] ? mutex_trylock+0x152/0x1a0 [ 2038.320693] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 2038.320706] ? warn_alloc+0xf0/0xf0 [ 2038.320717] __alloc_pages_nodemask+0x5d3/0x700 [ 2038.320727] ? __anon_vma_prepare+0x172/0x370 [ 2038.320734] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2038.320747] ? anon_vma_interval_tree_insert+0x211/0x3e0 [ 2038.320757] alloc_pages_vma+0xc2/0x4a0 [ 2038.320767] __handle_mm_fault+0x17b6/0x3280 [ 2038.320776] ? copy_page_range+0x1d70/0x1d70 [ 2038.320789] ? find_held_lock+0x2d/0x110 [ 2038.323632] lowmem_reserve[]: [ 2038.327008] handle_mm_fault+0x288/0x7a0 [ 2038.327022] __do_page_fault+0x4bc/0xb40 [ 2038.327032] ? vmalloc_fault+0xdf0/0xdf0 [ 2038.327040] ? do_page_fault+0x60/0x4f2 [ 2038.330926] 0 [ 2038.335827] ? page_fault+0x2f/0x50 [ 2038.335836] page_fault+0x45/0x50 [ 2038.335844] RIP: deda4700:0x76 [ 2038.335849] RSP: 20000:00007fff3f399680 EFLAGS: 7fff3f399780 [ 2038.339533] Mem-Info: [ 2038.365565] 2557 [ 2038.375542] active_anon:207814 inactive_anon:1099871 isolated_anon:0 [ 2038.375542] active_file:34 inactive_file:0 isolated_file:6 [ 2038.375542] unevictable:38562 dirty:9 writeback:7 unstable:0 [ 2038.375542] slab_reclaimable:19108 slab_unreclaimable:113951 [ 2038.375542] mapped:64369 shmem:12406 pagetables:18264 bounce:0 [ 2038.375542] free:24904 free_pcp:0 free_cma:0 [ 2038.375556] Node 0 active_anon:747536kB inactive_anon:1024072kB active_file:60kB inactive_file:24kB unevictable:105004kB isolated(anon):0kB isolated(file):0kB mapped:227884kB dirty:0kB writeback:4kB shmem:29080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 583680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2038.375568] Node 1 active_anon:83720kB inactive_anon:3375412kB active_file:76kB inactive_file:0kB unevictable:49244kB isolated(anon):0kB isolated(file):24kB mapped:29592kB dirty:36kB writeback:24kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2038.375572] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:60kB inactive_anon:5076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.375593] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2038.375609] Node 0 DMA32 free:35792kB min:36272kB low:45340kB high:54408kB active_anon:747476kB inactive_anon:1018996kB active_file:60kB inactive_file:0kB unevictable:104804kB writepending:4kB present:3129332kB managed:2621260kB mlocked:104804kB kernel_stack:12352kB pagetables:28296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.375624] lowmem_reserve[]: 0 0 0 0 0 [ 2038.375639] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.375654] lowmem_reserve[]: 0 0 0 0 0 [ 2038.375673] Node 1 Normal free:53392kB min:53612kB low:67012kB high:80412kB active_anon:83720kB inactive_anon:3375412kB active_file:20kB inactive_file:548kB unevictable:49160kB writepending:160kB present:3932160kB managed:3870192kB mlocked:49160kB kernel_stack:14656kB pagetables:44752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.375691] lowmem_reserve[]: 0 0 0 0 [ 2038.379956] 2557 [ 2038.383836] 0 [ 2038.383843] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 11*16kB (UME) 14*32kB (UME) [ 2038.388037] 2557 [ 2038.392314] 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 2038.392358] Node 0 DMA32: [ 2038.397138] 2557 [ 2038.404815] 4*4kB [ 2038.409618] (U) 428*8kB (UM) 914*16kB (UE) 561*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36016kB [ 2038.409666] Node 0 [ 2038.414332] Node 0 [ 2038.422481] Normal: [ 2038.425161] DMA32 free:35792kB min:36272kB low:45340kB high:54408kB active_anon:747476kB inactive_anon:1018996kB active_file:60kB inactive_file:0kB unevictable:104804kB writepending:4kB present:3129332kB managed:2621260kB mlocked:104804kB kernel_stack:12352kB pagetables:28296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.428665] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2038.428704] Node 1 Normal: [ 2038.433326] lowmem_reserve[]: [ 2038.440985] 409*4kB [ 2038.441797] 0 [ 2038.444789] (UME) 44*8kB (UME) 52*16kB (UME) 166*32kB (UME) 90*64kB (UME) 6*128kB [ 2038.449022] 0 [ 2038.452928] (ME) 33*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 53828kB [ 2038.452965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.452972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.457185] 0 [ 2038.460987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.460992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.460996] 17102 total pagecache pages [ 2038.461007] 0 pages in swap cache [ 2038.461012] Swap cache stats: add 0, delete 0, find 0/0 [ 2038.461015] Free swap = 0kB [ 2038.461018] Total swap = 0kB [ 2038.461024] 1965979 pages RAM [ 2038.461030] 0 pages HighMem/MovableOnly [ 2038.462991] 0 [ 2038.482481] 339053 pages reserved [ 2038.485661] 0 [ 2038.526376] 0 pages cma reserved [ 2038.577501] Out of memory: Kill process 28216 (syz-executor.5) score 1008 or sacrifice child [ 2038.601019] Node 0 [ 2038.609277] Killed process 28216 (syz-executor.5) total-vm:74972kB, anon-rss:18000kB, file-rss:41516kB, shmem-rss:0kB [ 2038.637995] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.665283] oom_reaper: reaped process 28216 (syz-executor.5), now anon-rss:18012kB, file-rss:7468kB, shmem-rss:0kB [ 2039.000078] lowmem_reserve[]: 0 0 0 0 0 [ 2039.004745] Node 1 Normal free:54068kB min:53612kB low:67012kB high:80412kB active_anon:83700kB inactive_anon:3375412kB active_file:3304kB inactive_file:3652kB unevictable:40384kB writepending:0kB present:3932160kB managed:3870192kB mlocked:40384kB kernel_stack:14560kB pagetables:44624kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 2039.035842] lowmem_reserve[]: 0 0 0 0 0 [ 2039.040455] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 11*16kB (UME) 14*32kB (UME) 4*64kB (U) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 2039.057126] Node 0 DMA32: 17*4kB (UM) 492*8kB (UM) 916*16kB (UME) 560*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36580kB [ 2039.121596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2039.201536] Node 1 Normal: 261*4kB (UM) 82*8kB (UM) 100*16kB (ME) 164*32kB (UME) 88*64kB (UME) 8*128kB (ME) 33*256kB (UME) 30*512kB (ME) 9*1024kB (UME) 3*2048kB (M) 0*4096kB = 54372kB [ 2039.219706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2039.246911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2039.255937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2039.267715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2039.278441] 17429 total pagecache pages [ 2039.296501] 0 pages in swap cache [ 2039.309547] Swap cache stats: add 0, delete 0, find 0/0 [ 2039.327454] Free swap = 0kB [ 2039.338122] Total swap = 0kB [ 2039.349468] 1965979 pages RAM [ 2039.360856] 0 pages HighMem/MovableOnly [ 2039.375270] 339053 pages reserved [ 2039.387943] 0 pages cma reserved [ 2039.400482] ================================================================== [ 2039.408261] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100 [ 2039.415188] Read of size 8 at addr ffff8880a553a650 by task syz-executor.2/28227 [ 2039.422711] [ 2039.424335] CPU: 0 PID: 28227 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 2039.432212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.441570] Call Trace: [ 2039.444164] dump_stack+0x13e/0x194 [ 2039.447796] ? ceph_destroy_options+0xda/0x100 [ 2039.452380] print_address_description.cold+0x7c/0x1e2 [ 2039.457692] ? ceph_destroy_options+0xda/0x100 [ 2039.462278] kasan_report.cold+0xa9/0x2ae [ 2039.466435] ceph_destroy_options+0xda/0x100 [ 2039.470851] ceph_mount+0xd4c/0x1815 [ 2039.474579] ? ceph_mount+0x2/0x1815 [ 2039.478393] mount_fs+0x92/0x2a0 [ 2039.481769] vfs_kern_mount.part.0+0x5b/0x3c0 [ 2039.486273] do_mount+0x3c9/0x24f0 [ 2039.489815] ? check_preemption_disabled+0x35/0x240 [ 2039.494844] ? copy_mount_string+0x40/0x40 [ 2039.499080] ? copy_mnt_ns+0x8a0/0x8a0 [ 2039.502971] ? copy_mount_options+0x1ec/0x2e0 [ 2039.507468] ? copy_mnt_ns+0x8a0/0x8a0 [ 2039.511354] SyS_mount+0xa8/0x120 [ 2039.514807] ? copy_mnt_ns+0x8a0/0x8a0 [ 2039.518700] do_syscall_64+0x1d5/0x640 [ 2039.522596] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2039.527785] RIP: 0033:0x45ca29 [ 2039.530975] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2039.538684] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 2039.545952] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 2039.553222] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2039.560497] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2039.567776] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007f38bfbc46d4 [ 2039.575060] [ 2039.576689] Allocated by task 28227: [ 2039.580403] save_stack+0x32/0xa0 [ 2039.583853] kasan_kmalloc+0xbf/0xe0 [ 2039.587565] kmem_cache_alloc_trace+0x14d/0x7b0 [ 2039.592269] ceph_parse_options+0xb8/0xe80 [ 2039.596504] ceph_mount+0x44f/0x1815 [ 2039.600221] mount_fs+0x92/0x2a0 [ 2039.603586] vfs_kern_mount.part.0+0x5b/0x3c0 [ 2039.608081] do_mount+0x3c9/0x24f0 [ 2039.611791] SyS_mount+0xa8/0x120 [ 2039.615243] do_syscall_64+0x1d5/0x640 [ 2039.619128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2039.624312] [ 2039.625934] Freed by task 28227: [ 2039.629300] save_stack+0x32/0xa0 [ 2039.632763] kasan_slab_free+0x75/0xc0 [ 2039.636645] kfree+0xcb/0x260 [ 2039.639747] ceph_destroy_client+0x90/0xb0 [ 2039.643982] ceph_mount+0xd25/0x1815 [ 2039.647698] mount_fs+0x92/0x2a0 [ 2039.651063] vfs_kern_mount.part.0+0x5b/0x3c0 [ 2039.655559] do_mount+0x3c9/0x24f0 [ 2039.659099] SyS_mount+0xa8/0x120 [ 2039.662559] do_syscall_64+0x1d5/0x640 [ 2039.666453] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2039.671640] [ 2039.673269] The buggy address belongs to the object at ffff8880a553a580 [ 2039.673269] which belongs to the cache kmalloc-256 of size 256 [ 2039.685953] The buggy address is located 208 bytes inside of [ 2039.685953] 256-byte region [ffff8880a553a580, ffff8880a553a680) [ 2039.697832] The buggy address belongs to the page: [ 2039.702766] page:ffffea0002954e80 count:1 mapcount:0 mapping:ffff8880a553a080 index:0xffff8880a553aa80 [ 2039.712215] flags: 0xfffe0000000100(slab) [ 2039.716547] raw: 00fffe0000000100 ffff8880a553a080 ffff8880a553aa80 0000000100000005 [ 2039.724435] raw: ffffea00024512a0 ffffea0002831f60 ffff88812fe547c0 0000000000000000 [ 2039.732325] page dumped because: kasan: bad access detected [ 2039.738063] [ 2039.739707] Memory state around the buggy address: [ 2039.744632] ffff8880a553a500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2039.751993] ffff8880a553a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2039.759360] >ffff8880a553a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2039.766720] ^ [ 2039.772782] ffff8880a553a680: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2039.780174] ffff8880a553a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2039.787538] ================================================================== [ 2039.794897] Disabling lock debugging due to kernel taint [ 2039.802235] Kernel panic - not syncing: panic_on_warn set ... [ 2039.802235] [ 2039.809649] CPU: 0 PID: 28227 Comm: syz-executor.2 Tainted: G B 4.14.180-syzkaller #0 [ 2039.818749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.828102] Call Trace: [ 2039.830716] dump_stack+0x13e/0x194 [ 2039.834346] panic+0x1f9/0x42d [ 2039.837539] ? add_taint.cold+0x16/0x16 [ 2039.841522] ? preempt_schedule_common+0x4a/0xc0 [ 2039.846287] ? ceph_destroy_options+0xda/0x100 [ 2039.850886] ? ___preempt_schedule+0x16/0x18 [ 2039.855305] ? ceph_destroy_options+0xda/0x100 [ 2039.859897] kasan_end_report+0x43/0x49 [ 2039.863967] kasan_report.cold+0x12f/0x2ae [ 2039.868209] ceph_destroy_options+0xda/0x100 [ 2039.872805] ceph_mount+0xd4c/0x1815 [ 2039.876525] ? ceph_mount+0x2/0x1815 [ 2039.880246] mount_fs+0x92/0x2a0 [ 2039.883612] vfs_kern_mount.part.0+0x5b/0x3c0 [ 2039.888108] do_mount+0x3c9/0x24f0 [ 2039.891650] ? check_preemption_disabled+0x35/0x240 [ 2039.896665] ? copy_mount_string+0x40/0x40 [ 2039.900898] ? copy_mnt_ns+0x8a0/0x8a0 [ 2039.904790] ? copy_mount_options+0x1ec/0x2e0 [ 2039.909307] ? copy_mnt_ns+0x8a0/0x8a0 [ 2039.913196] SyS_mount+0xa8/0x120 [ 2039.916649] ? copy_mnt_ns+0x8a0/0x8a0 [ 2039.920538] do_syscall_64+0x1d5/0x640 [ 2039.924431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2039.929792] RIP: 0033:0x45ca29 [ 2039.932977] RSP: 002b:00007f38bfbc3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2039.940684] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 2039.948040] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 2039.955311] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2039.962581] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2039.969880] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007f38bfbc46d4 [ 2039.978703] Kernel Offset: disabled [ 2039.982424] Rebooting in 86400 seconds..