nk_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:07 executing program 2: mlockall(0x7) mlockall(0x3) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f00000000c0)=""/80) mlockall(0x2) fork() mlockall(0x2) mlockall(0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:51:07 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = fork() fork() syz_open_procfs$userns(r0, &(0x7f0000000040)) mlockall(0x4) 05:51:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3212.910057] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6800, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:10 executing program 0: mlockall(0x3) fork() r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, r0) syz_open_procfs$userns(0x0, 0x0) 05:51:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20000128, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7400, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:10 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = fork() fork() syz_open_procfs$userns(r0, &(0x7f0000000040)) mlockall(0x4) 05:51:10 executing program 2: mlockall(0x7) mlockall(0x3) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x8) fork() r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x7, [@remote, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @broadcast]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x7, 0x7, 0x300}, &(0x7f00000001c0)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x200}}, 0x10) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:51:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7a00, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x4800, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3215.799194] nla_parse: 15 callbacks suppressed [ 3215.799205] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x4c00, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3215.936106] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x8, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3216.069635] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3216.114095] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:12 executing program 0: mlockall(0x3) mlockall(0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x22002) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) fork() syz_open_procfs$userns(0x0, 0x0) 05:51:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:12 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) fork() fork() mlockall(0x4) 05:51:12 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x20, 0xa8000) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3218.070432] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3218.119851] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3218.153534] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3218.186941] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6800, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3218.350430] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3218.388103] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7400, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:16 executing program 0: mlockall(0x3) select(0x40, &(0x7f0000000000)={0x8, 0x7fff, 0x0, 0x10000, 0x8, 0x1, 0x6, 0x5}, &(0x7f0000000040)={0x1, 0x3, 0x80, 0x4, 0x40, 0xffff, 0x7, 0x5}, &(0x7f0000000080)={0x6, 0x6, 0x5, 0x0, 0x644a, 0x8, 0x80000001, 0xfffffffffffff389}, &(0x7f00000000c0)={0x0, 0x2710}) fork() fork() fork() r0 = fork() sched_getscheduler(r0) fork() r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r1, 0x0) fork() 05:51:16 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x2, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3222.123390] nla_parse: 5 callbacks suppressed [ 3222.123401] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3222.158051] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3222.190859] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3222.203184] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x3, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7a00, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:17 executing program 2: mlockall(0x7) mlockall(0x3) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) socket$inet(0x2, 0xa, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="54e3ea4694466e223813088ff4af239f", 0x10) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3222.654475] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3222.695394] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3222.722975] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3222.761474] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x7, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3222.939985] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3223.008131] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:18 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) mlockall(0x4) 05:51:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3224.559310] syz-executor.3 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3224.572846] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3224.579522] CPU: 1 PID: 31339 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3224.587408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3224.596749] Call Trace: [ 3224.599352] dump_stack+0x1fc/0x2ef [ 3224.602979] dump_header+0x15d/0xc3f [ 3224.606691] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3224.611796] ? ___ratelimit+0x319/0x590 [ 3224.615777] oom_kill_process.cold+0x10/0x692 [ 3224.620283] ? check_preemption_disabled+0x41/0x280 [ 3224.625322] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3224.630616] out_of_memory+0x1072/0x1390 [ 3224.634687] ? oom_killer_disable+0x270/0x270 [ 3224.639184] ? mutex_trylock+0x15f/0x1a0 [ 3224.643248] __alloc_pages_nodemask+0x23a2/0x2890 [ 3224.648109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3224.652977] alloc_pages_vma+0xf2/0x780 [ 3224.656963] do_anonymous_page+0x7c2/0x1be0 [ 3224.661289] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3224.665789] ? finish_task_switch+0x146/0x760 [ 3224.670281] ? finish_task_switch+0x118/0x760 [ 3224.674781] ? __pte_alloc+0x340/0x340 [ 3224.678675] ? mark_held_locks+0xf0/0xf0 [ 3224.682748] __handle_mm_fault+0x227a/0x41c0 [ 3224.687163] ? vm_insert_page+0x9c0/0x9c0 [ 3224.691338] ? check_preemption_disabled+0x41/0x280 [ 3224.696358] handle_mm_fault+0x436/0xb10 [ 3224.700420] __get_user_pages+0x6f0/0x1710 [ 3224.704658] ? follow_page_mask+0x1d00/0x1d00 [ 3224.709154] ? check_preemption_disabled+0x41/0x280 [ 3224.714180] populate_vma_page_range+0x200/0x290 [ 3224.718940] __mm_populate+0x1ea/0x350 [ 3224.722831] ? populate_vma_page_range+0x290/0x290 [ 3224.727759] ? do_mlock+0x6b0/0x6b0 [ 3224.731385] ? security_capable+0x8f/0xc0 [ 3224.735538] __se_sys_mlockall+0x362/0x4e0 [ 3224.739775] do_syscall_64+0xf9/0x620 [ 3224.743578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3224.748803] RIP: 0033:0x4665f9 [ 3224.751995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3224.770886] RSP: 002b:00007fa4071a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3224.778602] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3224.785868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3224.793123] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3224.800377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3224.807644] R13: 00007ffc396d572f R14: 00007fa4071a7300 R15: 0000000000022000 [ 3224.834037] Mem-Info: [ 3224.846495] active_anon:447892 inactive_anon:750777 isolated_anon:0 [ 3224.846495] active_file:2 inactive_file:20 isolated_file:0 [ 3224.846495] unevictable:42337 dirty:0 writeback:0 unstable:0 [ 3224.846495] slab_reclaimable:26327 slab_unreclaimable:159006 [ 3224.846495] mapped:74923 shmem:13163 pagetables:112688 bounce:0 [ 3224.846495] free:25026 free_pcp:124 free_cma:0 [ 3224.894599] Node 0 active_anon:1488104kB inactive_anon:107172kB active_file:52kB inactive_file:56kB unevictable:106540kB isolated(anon):0kB isolated(file):0kB mapped:277724kB dirty:0kB writeback:0kB shmem:19808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1351680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3224.938354] Node 1 active_anon:303464kB inactive_anon:2895952kB active_file:12kB inactive_file:12kB unevictable:62808kB isolated(anon):0kB isolated(file):0kB mapped:21868kB dirty:0kB writeback:0kB shmem:32844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3224.968685] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3225.089774] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3225.144220] Node 0 DMA32 free:40456kB min:35996kB low:44992kB high:53988kB active_anon:1483852kB inactive_anon:97908kB active_file:52kB inactive_file:2156kB unevictable:105664kB writepending:0kB present:3129332kB managed:2763456kB mlocked:105664kB kernel_stack:30048kB pagetables:76716kB bounce:0kB free_pcp:1720kB local_pcp:496kB free_cma:0kB [ 3225.200279] lowmem_reserve[]: 0 0 1 1 1 [ 3225.239357] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3225.289561] lowmem_reserve[]: 0 0 0 0 0 [ 3225.293579] Node 1 Normal free:53764kB min:53876kB low:67344kB high:80812kB active_anon:303464kB inactive_anon:2900752kB active_file:12kB inactive_file:12kB unevictable:58008kB writepending:0kB present:4194304kB managed:4128248kB mlocked:58008kB kernel_stack:120000kB pagetables:373628kB bounce:0kB free_pcp:100kB local_pcp:48kB free_cma:0kB [ 3225.331502] lowmem_reserve[]: 0 0 0 0 0 [ 3225.336309] Node 0 DMA: 3*4kB (UE) 3*8kB (UM) 3*16kB (UE) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10964kB [ 3225.364434] Node 0 DMA32: 850*4kB (UMEH) 3157*8kB (UMEH) 692*16kB (UMEH) 309*32kB (UMH) 97*64kB (UM) 35*128kB (M) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 62352kB [ 3225.385531] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3225.400842] Node 1 Normal: 35*4kB (UE) 2325*8kB (UE) 393*16kB (UE) 113*32kB (UME) 31*64kB (UME) 6*128kB (UM) 4*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 4*4096kB (UM) = 53924kB [ 3225.426595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3225.440206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3225.450410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3225.477079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3225.488060] 29910 total pagecache pages [ 3225.492054] 0 pages in swap cache [ 3225.525422] Swap cache stats: add 0, delete 0, find 0/0 [ 3225.530802] Free swap = 0kB [ 3225.545499] Total swap = 0kB [ 3225.548811] 2097051 pages RAM [ 3225.551917] 0 pages HighMem/MovableOnly [ 3225.578783] 369648 pages reserved [ 3225.582245] 0 pages cma reserved [ 3225.596970] Out of memory (oom_kill_allocating_task): Kill process 31339 (syz-executor.3) score 0 or sacrifice child [ 3225.626444] Killed process 31328 (syz-executor.3) total-vm:93384kB, anon-rss:30400kB, file-rss:55608kB, shmem-rss:0kB 05:51:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:21 executing program 2: mlockall(0x7) mlockall(0x3) fork() mlockall(0x6) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:51:21 executing program 0: mlockall(0x4) fork() syz_open_procfs$userns(0x0, 0x0) 05:51:21 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) mlockall(0x4) 05:51:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:21 executing program 0: mlockall(0x3) r0 = fork() syz_open_procfs$userns(r0, 0x0) 05:51:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x700, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf00, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3227.136992] nla_parse: 16 callbacks suppressed [ 3227.138490] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:24 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) mlockall(0x1) 05:51:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0xa000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:24 executing program 2: mlockall(0x7) mlockall(0x3) fork() sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000001", @ANYRES16=0x0, @ANYBLOB="02042cbd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4044804) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x2, @remote, 0x4e24, 0x1, 'ovf\x00', 0x8, 0x0, 0x67}, 0x2c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "a64cdc20"}, &(0x7f00000002c0)=0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x0, 'rdma'}]}, 0x6) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@empty, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r1 = fork() syz_open_procfs$userns(r1, &(0x7f0000000000)) 05:51:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x4da1, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:24 executing program 3: mlockall(0x7) mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) mlockall(0x4) [ 3229.497612] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3229.511362] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xa14d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3229.602950] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3229.672902] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3229.731677] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3229.777133] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3229.867456] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3229.900951] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x30000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3230.024130] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3231.273868] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3231.287266] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3231.309279] CPU: 0 PID: 31454 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3231.317181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3231.326530] Call Trace: [ 3231.329128] dump_stack+0x1fc/0x2ef [ 3231.332765] dump_header+0x15d/0xc3f [ 3231.336486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3231.341767] ? ___ratelimit+0x319/0x590 [ 3231.345751] oom_kill_process.cold+0x10/0x692 [ 3231.350374] ? check_preemption_disabled+0x41/0x280 [ 3231.355406] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3231.360701] out_of_memory+0x1072/0x1390 [ 3231.364776] ? oom_killer_disable+0x270/0x270 [ 3231.369280] ? mutex_trylock+0x15f/0x1a0 [ 3231.373350] __alloc_pages_nodemask+0x23a2/0x2890 [ 3231.378204] ? find_get_entry+0x4cd/0x8a0 [ 3231.382370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3231.387246] alloc_pages_current+0x193/0x2a0 [ 3231.391663] filemap_fault+0x146e/0x2180 [ 3231.395740] ext4_filemap_fault+0x84/0xb0 [ 3231.399893] __do_fault+0x10b/0x4b0 [ 3231.403521] __handle_mm_fault+0x273b/0x41c0 [ 3231.407936] ? vm_insert_page+0x9c0/0x9c0 [ 3231.412102] ? check_preemption_disabled+0x41/0x280 [ 3231.417128] handle_mm_fault+0x436/0xb10 [ 3231.421196] __get_user_pages+0x6f0/0x1710 [ 3231.425442] ? follow_page_mask+0x1d00/0x1d00 [ 3231.429965] populate_vma_page_range+0x200/0x290 [ 3231.434731] __mm_populate+0x1ea/0x350 [ 3231.438645] ? populate_vma_page_range+0x290/0x290 [ 3231.443577] ? do_mlock+0x6b0/0x6b0 [ 3231.447208] ? security_capable+0x8f/0xc0 [ 3231.451374] __se_sys_mlockall+0x362/0x4e0 [ 3231.455629] do_syscall_64+0xf9/0x620 [ 3231.459447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3231.464638] RIP: 0033:0x4665f9 [ 3231.467831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3231.486736] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3231.494448] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3231.501751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3231.509019] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3231.516370] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3231.523640] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3231.539793] Mem-Info: [ 3231.542238] active_anon:447940 inactive_anon:767713 isolated_anon:0 [ 3231.542238] active_file:47 inactive_file:0 isolated_file:0 [ 3231.542238] unevictable:26562 dirty:5 writeback:0 unstable:0 [ 3231.542238] slab_reclaimable:26344 slab_unreclaimable:158180 [ 3231.542238] mapped:65565 shmem:13163 pagetables:112353 bounce:0 [ 3231.542238] free:25200 free_pcp:4 free_cma:0 [ 3231.577915] Node 0 active_anon:1488492kB inactive_anon:126192kB active_file:184kB inactive_file:0kB unevictable:87236kB isolated(anon):0kB isolated(file):0kB mapped:241396kB dirty:16kB writeback:0kB shmem:19812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1357824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3231.606608] Node 1 active_anon:303268kB inactive_anon:2944660kB active_file:4kB inactive_file:0kB unevictable:19012kB isolated(anon):0kB isolated(file):0kB mapped:20864kB dirty:4kB writeback:0kB shmem:32840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3231.634813] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3231.716821] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3231.721883] Node 0 DMA32 free:35976kB min:35996kB low:44992kB high:53988kB active_anon:1484240kB inactive_anon:126192kB active_file:172kB inactive_file:0kB unevictable:86676kB writepending:8kB present:3129332kB managed:2763456kB mlocked:86676kB kernel_stack:29952kB pagetables:75380kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 3231.864125] lowmem_reserve[]: 0 0 1 1 1 [ 3231.868152] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3232.024062] lowmem_reserve[]: 0 0 0 0 0 [ 3232.028085] Node 1 Normal free:53652kB min:53876kB low:67344kB high:80812kB active_anon:303268kB inactive_anon:2944660kB active_file:0kB inactive_file:8kB unevictable:19020kB writepending:0kB present:4194304kB managed:4128248kB mlocked:19020kB kernel_stack:120096kB pagetables:373772kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3232.163185] lowmem_reserve[]: 0 0 0 0 0 [ 3232.185922] Node 0 DMA: 6*4kB (UME) 1*8kB (M) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 3232.246086] Node 0 DMA32: 586*4kB (UE) 2221*8kB (UME) 580*16kB (UME) 180*32kB (UM) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35984kB [ 3232.300527] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3232.349069] Node 1 Normal: 23*4kB (UME) 2339*8kB (UME) 552*16kB (UME) 141*32kB (UME) 48*64kB (UME) 4*128kB (U) 6*256kB (UME) 2*512kB (ME) 1*1024kB (E) 3*2048kB (ME) 2*4096kB (UM) = 53652kB [ 3232.418084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3232.457111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3232.493306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3232.502210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3232.550847] 19562 total pagecache pages [ 3232.576899] 0 pages in swap cache [ 3232.580379] Swap cache stats: add 0, delete 0, find 0/0 [ 3232.615385] Free swap = 0kB [ 3232.618419] Total swap = 0kB [ 3232.621510] 2097051 pages RAM [ 3232.679108] 0 pages HighMem/MovableOnly [ 3232.697489] 369648 pages reserved [ 3232.718390] 0 pages cma reserved [ 3232.721783] Out of memory (oom_kill_allocating_task): Kill process 31454 (syz-executor.0) score 0 or sacrifice child [ 3232.795763] Killed process 31454 (syz-executor.0) total-vm:93384kB, anon-rss:28352kB, file-rss:46104kB, shmem-rss:0kB [ 3232.842259] oom_reaper: reaped process 31454 (syz-executor.0), now anon-rss:28352kB, file-rss:46100kB, shmem-rss:0kB 05:51:28 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, &(0x7f0000000000)) syz_open_procfs$userns(0x0, 0x0) 05:51:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x34000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x48000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:28 executing program 3: mlockall(0x7) mlockall(0x3) fork() mlockall(0x4) 05:51:28 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000002040)={0x0, 0x2f, 0x1, @thr={&(0x7f0000000040)="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", &(0x7f0000001040)="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"}}, &(0x7f0000002080)) [ 3233.914084] nla_parse: 3 callbacks suppressed [ 3233.914094] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3233.968998] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3233.997102] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3234.035588] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x400300, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x4c000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3234.194631] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3234.237851] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3234.270370] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf0ffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3234.313179] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x1000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3234.538649] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3234.565741] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3235.485828] syz-executor.3 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3235.505784] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3235.510951] CPU: 1 PID: 31533 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3235.518831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3235.528181] Call Trace: [ 3235.530779] dump_stack+0x1fc/0x2ef [ 3235.534418] dump_header+0x15d/0xc3f [ 3235.538140] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3235.543246] ? ___ratelimit+0x319/0x590 [ 3235.547227] oom_kill_process.cold+0x10/0x692 [ 3235.551732] ? check_preemption_disabled+0x41/0x280 [ 3235.556758] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3235.562036] out_of_memory+0x1072/0x1390 [ 3235.566103] ? oom_killer_disable+0x270/0x270 [ 3235.570601] ? mutex_trylock+0x15f/0x1a0 [ 3235.574674] __alloc_pages_nodemask+0x23a2/0x2890 [ 3235.579536] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3235.584382] ? mark_held_locks+0xa6/0xf0 [ 3235.588444] ? finish_task_switch+0x118/0x760 [ 3235.593036] ? finish_task_switch+0x146/0x760 [ 3235.597554] ? finish_task_switch+0x118/0x760 [ 3235.602048] ? switch_mm_irqs_off+0x764/0x1340 [ 3235.606656] ? __schedule+0x88f/0x2040 [ 3235.610552] alloc_pages_vma+0xf2/0x780 [ 3235.614538] do_anonymous_page+0x7c2/0x1be0 [ 3235.618866] ? retint_kernel+0x2d/0x2d [ 3235.622760] ? __pte_alloc+0x340/0x340 [ 3235.626669] __handle_mm_fault+0x227a/0x41c0 [ 3235.631102] ? vm_insert_page+0x9c0/0x9c0 [ 3235.635259] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3235.640410] ? check_preemption_disabled+0x41/0x280 [ 3235.645557] handle_mm_fault+0x436/0xb10 [ 3235.649720] __get_user_pages+0x6f0/0x1710 [ 3235.653970] ? follow_page_mask+0x1d00/0x1d00 [ 3235.658476] ? check_preemption_disabled+0x41/0x280 [ 3235.663508] populate_vma_page_range+0x200/0x290 [ 3235.668274] __mm_populate+0x1ea/0x350 [ 3235.672171] ? populate_vma_page_range+0x290/0x290 [ 3235.677099] ? do_mlock+0x6b0/0x6b0 [ 3235.680731] ? security_capable+0x8f/0xc0 [ 3235.684889] __se_sys_mlockall+0x362/0x4e0 [ 3235.689129] do_syscall_64+0xf9/0x620 [ 3235.692935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3235.698165] RIP: 0033:0x4665f9 [ 3235.701360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3235.720452] RSP: 002b:00007fa4071a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3235.728248] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3235.735516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3235.742803] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3235.750074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3235.757346] R13: 00007ffc396d572f R14: 00007fa4071a7300 R15: 0000000000022000 [ 3235.807579] Mem-Info: [ 3235.810071] active_anon:448038 inactive_anon:767733 isolated_anon:0 [ 3235.810071] active_file:24 inactive_file:0 isolated_file:0 [ 3235.810071] unevictable:26432 dirty:41 writeback:0 unstable:0 [ 3235.810071] slab_reclaimable:26375 slab_unreclaimable:158046 [ 3235.810071] mapped:67475 shmem:13163 pagetables:112395 bounce:0 [ 3235.810071] free:25079 free_pcp:0 free_cma:0 [ 3236.049975] Node 0 active_anon:1488536kB inactive_anon:126272kB active_file:0kB inactive_file:36kB unevictable:87116kB isolated(anon):0kB isolated(file):0kB mapped:249300kB dirty:0kB writeback:0kB shmem:19812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3236.118326] Node 1 active_anon:303616kB inactive_anon:2944660kB active_file:0kB inactive_file:4kB unevictable:19376kB isolated(anon):0kB isolated(file):0kB mapped:20848kB dirty:0kB writeback:0kB shmem:32840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3236.283005] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3236.437028] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3236.458374] Node 0 DMA32 free:35368kB min:35996kB low:44992kB high:53988kB active_anon:1484284kB inactive_anon:126272kB active_file:72kB inactive_file:20kB unevictable:87020kB writepending:0kB present:3129332kB managed:2763456kB mlocked:87020kB kernel_stack:30048kB pagetables:75464kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3236.631740] lowmem_reserve[]: 0 0 1 1 1 [ 3236.657272] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3236.814437] lowmem_reserve[]: 0 0 0 0 0 [ 3236.837044] Node 1 Normal free:53780kB min:53876kB low:67344kB high:80812kB active_anon:303616kB inactive_anon:2944660kB active_file:0kB inactive_file:4kB unevictable:19376kB writepending:0kB present:4194304kB managed:4128248kB mlocked:19376kB kernel_stack:120064kB pagetables:373872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3236.871223] lowmem_reserve[]: 0 0 0 0 0 [ 3236.876427] Node 0 DMA: 6*4kB (UME) 1*8kB (M) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 3236.904685] Node 0 DMA32: 508*4kB (UME) 2167*8kB (UME) 646*16kB (UME) 178*32kB (U) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35976kB [ 3236.924457] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3236.935863] Node 1 Normal: 30*4kB (UME) 2280*8kB (UE) 589*16kB (UE) 154*32kB (UME) 47*64kB (UE) 7*128kB (UM) 6*256kB (UME) 1*512kB (E) 1*1024kB (E) 3*2048kB (ME) 2*4096kB (UM) = 54024kB [ 3236.952738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3236.961665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3236.970300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3236.980985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3236.989638] 21956 total pagecache pages [ 3236.993676] 0 pages in swap cache [ 3236.997127] Swap cache stats: add 0, delete 0, find 0/0 [ 3237.002482] Free swap = 0kB [ 3237.005557] Total swap = 0kB [ 3237.008575] 2097051 pages RAM [ 3237.011671] 0 pages HighMem/MovableOnly [ 3237.022916] 369648 pages reserved [ 3237.026399] 0 pages cma reserved [ 3237.029768] Out of memory (oom_kill_allocating_task): Kill process 31533 (syz-executor.3) score 0 or sacrifice child [ 3237.062912] Killed process 31533 (syz-executor.3) total-vm:93384kB, anon-rss:14196kB, file-rss:40200kB, shmem-rss:0kB [ 3237.114454] oom_reaper: reaped process 31533 (syz-executor.3), now anon-rss:14196kB, file-rss:40192kB, shmem-rss:0kB 05:51:32 executing program 0: mlockall(0x3) r0 = fork() syz_open_procfs$userns(0x0, 0x0) fork() syz_open_procfs$userns(r0, &(0x7f0000000040)) 05:51:32 executing program 3: mlockall(0x7) mlockall(0x3) fork() mlockall(0x4) 05:51:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:32 executing program 2: mlockall(0x0) r0 = semget(0x1, 0x3, 0x13) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000040)=0x1) mlockall(0x3) fork() r1 = fork() ptrace$pokeuser(0x6, r1, 0x100000001, 0x5) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:51:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x68000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x2000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x3000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6c000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x74000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x7000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x48000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3239.800995] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3239.847416] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3239.861597] CPU: 1 PID: 31590 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3239.869512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3239.878861] Call Trace: [ 3239.881454] dump_stack+0x1fc/0x2ef [ 3239.885117] dump_header+0x15d/0xc3f [ 3239.888841] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3239.893994] ? ___ratelimit+0x319/0x590 [ 3239.897978] oom_kill_process.cold+0x10/0x692 [ 3239.902573] ? check_preemption_disabled+0x41/0x280 [ 3239.907597] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3239.912880] out_of_memory+0x1072/0x1390 [ 3239.916953] ? oom_killer_disable+0x270/0x270 [ 3239.921460] ? mutex_trylock+0x15f/0x1a0 [ 3239.925528] __alloc_pages_nodemask+0x23a2/0x2890 [ 3239.930470] ? find_get_entry+0x4cd/0x8a0 [ 3239.934655] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3239.939548] alloc_pages_current+0x193/0x2a0 [ 3239.943970] filemap_fault+0x146e/0x2180 [ 3239.948050] ext4_filemap_fault+0x84/0xb0 [ 3239.952206] __do_fault+0x10b/0x4b0 [ 3239.955837] __handle_mm_fault+0x273b/0x41c0 [ 3239.960253] ? vm_insert_page+0x9c0/0x9c0 [ 3239.964418] ? check_preemption_disabled+0x41/0x280 [ 3239.969446] handle_mm_fault+0x436/0xb10 [ 3239.973515] __get_user_pages+0x6f0/0x1710 [ 3239.977758] ? follow_page_mask+0x1d00/0x1d00 [ 3239.982269] populate_vma_page_range+0x200/0x290 [ 3239.987031] __mm_populate+0x1ea/0x350 [ 3239.990921] ? populate_vma_page_range+0x290/0x290 [ 3239.995852] ? do_mlock+0x6b0/0x6b0 [ 3239.999482] ? security_capable+0x8f/0xc0 [ 3240.003661] __se_sys_mlockall+0x362/0x4e0 [ 3240.007902] do_syscall_64+0xf9/0x620 [ 3240.011708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3240.016897] RIP: 0033:0x4665f9 [ 3240.020092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3240.038992] RSP: 002b:00007f3abfc81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3240.046724] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3240.053994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3240.061263] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3240.068532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3240.075800] R13: 00007fff13b6547f R14: 00007f3abfc81300 R15: 0000000000022000 [ 3240.086719] Mem-Info: [ 3240.089165] active_anon:447943 inactive_anon:767708 isolated_anon:0 [ 3240.089165] active_file:30 inactive_file:0 isolated_file:0 [ 3240.089165] unevictable:27333 dirty:0 writeback:0 unstable:0 [ 3240.089165] slab_reclaimable:26425 slab_unreclaimable:157484 [ 3240.089165] mapped:66737 shmem:13163 pagetables:112321 bounce:0 [ 3240.089165] free:25146 free_pcp:0 free_cma:0 [ 3240.123051] Node 0 active_anon:1488352kB inactive_anon:126176kB active_file:72kB inactive_file:128kB unevictable:77232kB isolated(anon):0kB isolated(file):0kB mapped:245952kB dirty:0kB writeback:0kB shmem:19816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3240.153896] Node 1 active_anon:303420kB inactive_anon:2944656kB active_file:16kB inactive_file:0kB unevictable:32100kB isolated(anon):0kB isolated(file):0kB mapped:20928kB dirty:0kB writeback:0kB shmem:32836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3240.181931] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3240.208679] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3240.214489] Node 0 DMA32 free:35824kB min:35996kB low:44992kB high:53988kB active_anon:1484100kB inactive_anon:126176kB active_file:0kB inactive_file:236kB unevictable:77232kB writepending:0kB present:3129332kB managed:2763456kB mlocked:77232kB kernel_stack:29984kB pagetables:75212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3240.376812] lowmem_reserve[]: 0 0 1 1 1 [ 3240.380845] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3240.511721] lowmem_reserve[]: 0 0 0 0 0 [ 3240.526316] Node 1 Normal free:53664kB min:53876kB low:67344kB high:80812kB active_anon:303420kB inactive_anon:2944656kB active_file:16kB inactive_file:0kB unevictable:32100kB writepending:0kB present:4194304kB managed:4128248kB mlocked:32100kB kernel_stack:120032kB pagetables:373812kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3240.617953] lowmem_reserve[]: 0 0 0 0 0 [ 3240.622476] Node 0 DMA: 6*4kB (UME) 4*8kB (UM) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB [ 3240.736298] Node 0 DMA32: 574*4kB (UME) 946*8kB (UME) 795*16kB (UE) 222*32kB (UM) 37*64kB (UM) 21*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36280kB [ 3240.804183] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3240.869984] Node 1 Normal: 30*4kB (UME) 2963*8kB (UME) 807*16kB (UME) 203*32kB (UME) 59*64kB (UME) 12*128kB (U) 6*256kB (UE) 1*512kB (E) 1*1024kB (E) 1*2048kB (M) 0*4096kB = 53664kB [ 3240.914902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3240.947539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3240.988097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3241.030356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3241.050765] 20674 total pagecache pages [ 3241.083327] 0 pages in swap cache [ 3241.101627] Swap cache stats: add 0, delete 0, find 0/0 [ 3241.128527] Free swap = 0kB [ 3241.145540] Total swap = 0kB [ 3241.160079] 2097051 pages RAM [ 3241.177405] 0 pages HighMem/MovableOnly [ 3241.198119] 369648 pages reserved [ 3241.216686] 0 pages cma reserved [ 3241.232743] Out of memory (oom_kill_allocating_task): Kill process 31590 (syz-executor.2) score 0 or sacrifice child [ 3241.256585] Killed process 31587 (syz-executor.2) total-vm:93384kB, anon-rss:28352kB, file-rss:40640kB, shmem-rss:0kB [ 3241.288866] oom_reaper: reaped process 31587 (syz-executor.2), now anon-rss:28352kB, file-rss:40636kB, shmem-rss:0kB 05:51:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:37 executing program 3: mlockall(0x7) mlockall(0x3) fork() mlockall(0x4) 05:51:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x4c000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:37 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, &(0x7f00000000c0)) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) 05:51:37 executing program 2: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x1}}, 0x10) [ 3242.488581] nla_parse: 16 callbacks suppressed [ 3242.488591] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3242.514707] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x9effffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3242.544782] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3242.574883] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:51:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xa14d0000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3242.748519] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3242.818638] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x68000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf0ffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3243.022421] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3243.100090] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3243.814781] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3243.829035] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3243.854658] CPU: 1 PID: 31713 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3243.862583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3243.872154] Call Trace: [ 3243.874757] dump_stack+0x1fc/0x2ef [ 3243.878393] dump_header+0x15d/0xc3f [ 3243.882111] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3243.887212] ? ___ratelimit+0x319/0x590 [ 3243.891319] oom_kill_process.cold+0x10/0x692 [ 3243.895812] ? check_preemption_disabled+0x41/0x280 [ 3243.900826] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3243.906134] out_of_memory+0x1072/0x1390 [ 3243.910192] ? oom_killer_disable+0x270/0x270 [ 3243.914683] ? mutex_trylock+0x15f/0x1a0 [ 3243.918747] __alloc_pages_nodemask+0x23a2/0x2890 [ 3243.923588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3243.928441] ? __lock_acquire+0x6de/0x3ff0 [ 3243.932685] alloc_pages_vma+0xf2/0x780 [ 3243.936649] wp_page_copy+0x219/0x2c40 [ 3243.940535] ? _vm_normal_page+0x132/0x510 [ 3243.944805] ? follow_pte_pmd+0x60/0x60 [ 3243.948777] do_wp_page+0x2d4/0x2210 [ 3243.952475] ? finish_mkwrite_fault+0x640/0x640 [ 3243.957131] ? __handle_mm_fault+0x15f6/0x41c0 [ 3243.961702] ? mark_held_locks+0xf0/0xf0 [ 3243.965757] __handle_mm_fault+0x258b/0x41c0 [ 3243.970160] ? vm_insert_page+0x9c0/0x9c0 [ 3243.974307] ? check_preemption_disabled+0x41/0x280 [ 3243.979332] handle_mm_fault+0x436/0xb10 [ 3243.983379] __do_page_fault+0x68e/0xd60 [ 3243.987438] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3243.992452] ? spurious_fault+0x840/0x840 [ 3243.996600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3244.001450] ? page_fault+0x8/0x30 [ 3244.004972] page_fault+0x1e/0x30 [ 3244.008414] RIP: 0033:0x40daf1 [ 3244.011596] Code: 53 40 48 8b 73 38 48 8b 7b 30 48 85 c0 0f 84 4b 01 00 00 48 83 ec 08 ff 73 70 ff 73 68 ff 73 60 ff d0 48 83 c4 20 48 8b 0c 24 <48> 89 41 78 e9 41 fe ff ff 66 0f 1f 44 00 00 48 8b 04 24 8b 0d 8a [ 3244.030488] RSP: 002b:00007f3abfc811a0 EFLAGS: 00010217 [ 3244.035834] RAX: 0000000000000000 RBX: 000000000056bf80 RCX: 000000000056bf80 [ 3244.043090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3244.050354] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3244.057619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3244.064890] R13: 00007fff13b6547f R14: 00007f3abfc81300 R15: 0000000000022000 [ 3244.078609] Mem-Info: [ 3244.081055] active_anon:447964 inactive_anon:767713 isolated_anon:0 [ 3244.081055] active_file:42 inactive_file:0 isolated_file:0 [ 3244.081055] unevictable:27445 dirty:1 writeback:4 unstable:0 [ 3244.081055] slab_reclaimable:26455 slab_unreclaimable:157250 [ 3244.081055] mapped:66111 shmem:13163 pagetables:112350 bounce:0 [ 3244.081055] free:25112 free_pcp:62 free_cma:0 [ 3244.118115] Node 0 active_anon:1488436kB inactive_anon:126180kB active_file:32kB inactive_file:36kB unevictable:64360kB isolated(anon):0kB isolated(file):0kB mapped:241956kB dirty:0kB writeback:0kB shmem:19804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3244.152218] Node 1 active_anon:303324kB inactive_anon:2944672kB active_file:36kB inactive_file:20kB unevictable:45592kB isolated(anon):0kB isolated(file):0kB mapped:22472kB dirty:0kB writeback:0kB shmem:32848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3244.184079] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3244.225195] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3244.230281] Node 0 DMA32 free:35900kB min:35996kB low:44992kB high:53988kB active_anon:1484184kB inactive_anon:126180kB active_file:32kB inactive_file:36kB unevictable:64360kB writepending:0kB present:3129332kB managed:2763456kB mlocked:64360kB kernel_stack:29984kB pagetables:75336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3244.265496] lowmem_reserve[]: 0 0 1 1 1 [ 3244.269505] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3244.299295] lowmem_reserve[]: 0 0 0 0 0 [ 3244.303336] Node 1 Normal free:53800kB min:53876kB low:67344kB high:80812kB active_anon:303324kB inactive_anon:2944672kB active_file:36kB inactive_file:20kB unevictable:45592kB writepending:0kB present:4194304kB managed:4128248kB mlocked:45592kB kernel_stack:120032kB pagetables:373840kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3244.339663] lowmem_reserve[]: 0 0 0 0 0 [ 3244.344452] Node 0 DMA: 6*4kB (UME) 4*8kB (UM) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB [ 3244.373420] Node 0 DMA32: 493*4kB (UME) 121*8kB (UME) 402*16kB (UME) 353*32kB (UM) 156*64kB (UM) 29*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35900kB [ 3244.396459] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3244.417063] Node 1 Normal: 8*4kB (UE) 3479*8kB (UE) 1087*16kB (UME) 199*32kB (UM) 30*64kB (UME) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53800kB [ 3244.431777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3244.449120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3244.458590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3244.477538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3244.486177] 20042 total pagecache pages [ 3244.490164] 0 pages in swap cache [ 3244.502973] Swap cache stats: add 0, delete 0, find 0/0 [ 3244.508341] Free swap = 0kB [ 3244.511350] Total swap = 0kB [ 3244.514459] 2097051 pages RAM [ 3244.517585] 0 pages HighMem/MovableOnly [ 3244.521636] 369648 pages reserved [ 3244.530265] 0 pages cma reserved [ 3244.533697] Out of memory (oom_kill_allocating_task): Kill process 31713 (syz-executor.2) score 0 or sacrifice child [ 3244.549344] Killed process 31713 (syz-executor.2) total-vm:93384kB, anon-rss:28228kB, file-rss:35084kB, shmem-rss:0kB [ 3244.584626] oom_reaper: reaped process 31713 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 3244.599919] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3244.614236] systemd-journal cpuset=/ mems_allowed=0-1 [ 3244.619459] CPU: 1 PID: 4694 Comm: systemd-journal Not tainted 4.19.205-syzkaller #0 [ 3244.627336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3244.636685] Call Trace: [ 3244.639272] dump_stack+0x1fc/0x2ef [ 3244.642900] dump_header+0x15d/0xc3f [ 3244.646619] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3244.651733] ? ___ratelimit+0x319/0x590 [ 3244.655713] oom_kill_process.cold+0x10/0x692 [ 3244.660216] ? check_preemption_disabled+0x41/0x280 [ 3244.665237] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3244.670518] out_of_memory+0x1072/0x1390 [ 3244.674589] ? oom_killer_disable+0x270/0x270 [ 3244.679081] ? mutex_trylock+0x15f/0x1a0 [ 3244.683136] __alloc_pages_nodemask+0x23a2/0x2890 [ 3244.687978] ? find_get_entry+0x4cd/0x8a0 [ 3244.692260] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3244.697130] alloc_pages_current+0x193/0x2a0 [ 3244.701554] filemap_fault+0x146e/0x2180 [ 3244.705618] ext4_filemap_fault+0x84/0xb0 [ 3244.709777] __do_fault+0x10b/0x4b0 [ 3244.713408] __handle_mm_fault+0x273b/0x41c0 [ 3244.717840] ? vm_insert_page+0x9c0/0x9c0 [ 3244.722000] ? check_preemption_disabled+0x41/0x280 [ 3244.727044] handle_mm_fault+0x436/0xb10 [ 3244.731102] __do_page_fault+0x68e/0xd60 [ 3244.735269] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3244.740269] ? spurious_fault+0x840/0x840 [ 3244.744411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3244.749263] ? page_fault+0x8/0x30 [ 3244.752813] page_fault+0x1e/0x30 [ 3244.756250] RIP: 0033:0x7fa7afdb6303 [ 3244.759952] Code: Bad RIP value. [ 3244.763305] RSP: 002b:00007fff67a47060 EFLAGS: 00010293 [ 3244.768652] RAX: 0000000000000001 RBX: 000055bda8e271e0 RCX: 00007fa7afdb6303 [ 3244.775938] RDX: 0000000000000014 RSI: 00007fff67a47070 RDI: 0000000000000008 [ 3244.783201] RBP: 00007fff67a47260 R08: 00007fff67ade000 R09: 0000036545996f65 [ 3244.790462] R10: 00000000ffffffff R11: 0000000000000293 R12: 00007fff67a47070 [ 3244.797719] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005cac06d2def5b [ 3244.813008] Mem-Info: [ 3244.815455] active_anon:447940 inactive_anon:767713 isolated_anon:0 [ 3244.815455] active_file:31 inactive_file:0 isolated_file:0 [ 3244.815455] unevictable:27488 dirty:0 writeback:0 unstable:0 [ 3244.815455] slab_reclaimable:26466 slab_unreclaimable:157258 [ 3244.815455] mapped:66107 shmem:13163 pagetables:112323 bounce:0 [ 3244.815455] free:25118 free_pcp:174 free_cma:0 [ 3244.872523] Node 0 active_anon:1488436kB inactive_anon:126164kB active_file:0kB inactive_file:76kB unevictable:64360kB isolated(anon):0kB isolated(file):0kB mapped:241956kB dirty:0kB writeback:0kB shmem:19804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3244.962244] Node 1 active_anon:303324kB inactive_anon:2944668kB active_file:56kB inactive_file:0kB unevictable:45596kB isolated(anon):0kB isolated(file):0kB mapped:22476kB dirty:0kB writeback:0kB shmem:32848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3245.110678] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3245.174974] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3245.180031] Node 0 DMA32 free:35680kB min:35996kB low:44992kB high:53988kB active_anon:1484184kB inactive_anon:126164kB active_file:92kB inactive_file:0kB unevictable:64360kB writepending:0kB present:3129332kB managed:2763456kB mlocked:64360kB kernel_stack:29952kB pagetables:75188kB bounce:0kB free_pcp:444kB local_pcp:20kB free_cma:0kB [ 3245.232828] lowmem_reserve[]: 0 0 1 1 1 [ 3245.236841] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3245.311642] lowmem_reserve[]: 0 0 0 0 0 [ 3245.328797] Node 1 Normal free:53800kB min:53876kB low:67344kB high:80812kB active_anon:303324kB inactive_anon:2944668kB active_file:56kB inactive_file:0kB unevictable:45596kB writepending:0kB present:4194304kB managed:4128248kB mlocked:45596kB kernel_stack:120032kB pagetables:373840kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 3245.480361] lowmem_reserve[]: 0 0 0 0 0 [ 3245.506734] Node 0 DMA: 6*4kB (UME) 4*8kB (UM) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB [ 3245.608709] Node 0 DMA32: 409*4kB (UE) 164*8kB (UME) 401*16kB (UME) 342*32kB (UM) 156*64kB (UM) 29*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35540kB [ 3245.672171] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB 05:51:40 executing program 3: mlockall(0x7) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xfffff000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3245.742843] Node 1 Normal: 112*4kB (UME) 3644*8kB (UME) 1210*16kB (UME) 315*32kB (UM) 100*64kB (UME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67872kB [ 3245.801396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3245.824855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3245.838238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3245.847207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3245.856020] 21684 total pagecache pages [ 3245.860003] 0 pages in swap cache [ 3245.864019] Swap cache stats: add 0, delete 0, find 0/0 [ 3245.869452] Free swap = 0kB [ 3245.873237] Total swap = 0kB [ 3245.901491] 2097051 pages RAM [ 3245.905062] 0 pages HighMem/MovableOnly [ 3245.909035] 369648 pages reserved [ 3245.913868] 0 pages cma reserved [ 3245.917245] Out of memory (oom_kill_allocating_task): Kill process 4694 (systemd-journal) score 0 or sacrifice child [ 3245.934164] Killed process 4694 (systemd-journal) total-vm:103360kB, anon-rss:516kB, file-rss:4kB, shmem-rss:43476kB [ 3245.956520] oom_reaper: reaped process 4694 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:43504kB [ 3246.115709] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3246.137139] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3246.387681] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3246.521804] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3246.585963] systemd[1]: Stopped Journal Service. [ 3246.687558] systemd[1]: Starting Journal Service... [ 3247.268426] systemd-journald[31734]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 05:51:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:42 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "3eb960e48490eee9", "006481d6b1e598a5058b02c12a421fab9ef008ca0471f7cd3ca92c5f3ddc70c4", "d911d432", "4a81428748c1db11"}, 0x38) mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) 05:51:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x6c000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xffffff7f, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:42 executing program 2: mlockall(0x7) mlockall(0x0) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3247.773182] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xffffff9e, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3247.863392] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:42 executing program 3: mlockall(0x7) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x74000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xfffffff0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3248.144560] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3248.244778] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3248.613647] systemd[1]: Started Journal Service. 05:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:45 executing program 3: mlockall(0x7) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:45 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() fork() timer_create(0x6, &(0x7f0000000140)={0x0, 0x19, 0x2, @thr={&(0x7f0000000040)="66f71ce58abd38e17ecb6f07d3dc8cd442367845a946a849ba86add66ef1aad29fc7223fee563f0dbfc62acd10695bbd968a021fac35a9f400cac85989f3143556de68bb93b2be16bd72d2e022c92207651bb380f2273e76ee84a2107165923e", &(0x7f00000000c0)="6ae1af15fe8eb0b9d3cb0f214eb8bc910ab1715176a5666e8cdbdb9ac6521a3c79f19c5dde1badeccc62269275e7e818c7186608ea428655de4c9fefa2f698e0f0605fd691ad304eebdfca078a35191a80dfe073a68b18"}}, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) syz_open_procfs$userns(r0, &(0x7f0000000000)) 05:51:45 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) [ 3250.730818] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x2, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3250.780526] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x3, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3251.078577] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:45 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) [ 3251.162146] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x7, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:46 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) [ 3252.357876] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3252.395378] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3252.400666] CPU: 1 PID: 31864 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3252.408547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3252.417932] Call Trace: [ 3252.420619] dump_stack+0x1fc/0x2ef [ 3252.424258] dump_header+0x15d/0xc3f [ 3252.427982] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3252.433094] ? ___ratelimit+0x319/0x590 [ 3252.437077] oom_kill_process.cold+0x10/0x692 [ 3252.441577] ? check_preemption_disabled+0x41/0x280 [ 3252.446603] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3252.451975] out_of_memory+0x1072/0x1390 [ 3252.456059] ? oom_killer_disable+0x270/0x270 [ 3252.460560] ? mutex_trylock+0x15f/0x1a0 [ 3252.464629] __alloc_pages_nodemask+0x23a2/0x2890 [ 3252.469585] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3252.474529] ? __lock_acquire+0x6de/0x3ff0 [ 3252.478776] ? mark_held_locks+0xf0/0xf0 [ 3252.482856] alloc_pages_vma+0xf2/0x780 [ 3252.486930] do_anonymous_page+0x7c2/0x1be0 [ 3252.491261] ? __pte_alloc+0x340/0x340 [ 3252.495154] ? __put_compound_page+0xc0/0xc0 [ 3252.499570] ? mark_held_locks+0xf0/0xf0 [ 3252.503647] __handle_mm_fault+0x227a/0x41c0 [ 3252.508064] ? vm_insert_page+0x9c0/0x9c0 [ 3252.512228] ? check_preemption_disabled+0x41/0x280 [ 3252.517270] handle_mm_fault+0x436/0xb10 [ 3252.521375] __get_user_pages+0x6f0/0x1710 [ 3252.525629] ? follow_page_mask+0x1d00/0x1d00 [ 3252.530141] populate_vma_page_range+0x200/0x290 [ 3252.534928] __mm_populate+0x1ea/0x350 [ 3252.538827] ? populate_vma_page_range+0x290/0x290 [ 3252.543760] ? do_mlock+0x6b0/0x6b0 [ 3252.547396] ? security_capable+0x8f/0xc0 [ 3252.551565] __se_sys_mlockall+0x362/0x4e0 [ 3252.555808] do_syscall_64+0xf9/0x620 [ 3252.559615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3252.564805] RIP: 0033:0x4665f9 [ 3252.568184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3252.587086] RSP: 002b:00007f3abfc60188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3252.594803] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3252.602071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3252.609439] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3252.616707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3252.623975] R13: 00007fff13b6547f R14: 00007f3abfc60300 R15: 0000000000022000 [ 3252.659805] Mem-Info: [ 3252.662362] active_anon:452037 inactive_anon:774287 isolated_anon:0 [ 3252.662362] active_file:36 inactive_file:4 isolated_file:29 [ 3252.662362] unevictable:17502 dirty:0 writeback:0 unstable:0 [ 3252.662362] slab_reclaimable:26793 slab_unreclaimable:155657 [ 3252.662362] mapped:55761 shmem:15211 pagetables:112602 bounce:0 [ 3252.662362] free:24953 free_pcp:0 free_cma:0 [ 3252.697301] Node 0 active_anon:1491080kB inactive_anon:135688kB active_file:112kB inactive_file:20kB unevictable:28472kB isolated(anon):0kB isolated(file):0kB mapped:218576kB dirty:0kB writeback:0kB shmem:23340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3252.726096] Node 1 active_anon:317068kB inactive_anon:2961460kB active_file:72kB inactive_file:48kB unevictable:41552kB isolated(anon):0kB isolated(file):64kB mapped:4424kB dirty:0kB writeback:0kB shmem:37504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3252.754320] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:76kB writepending:0kB present:15992kB managed:15908kB mlocked:76kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3252.782388] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3252.787435] Node 0 DMA32 free:35840kB min:35996kB low:44992kB high:53988kB active_anon:1486828kB inactive_anon:135688kB active_file:44kB inactive_file:0kB unevictable:28412kB writepending:0kB present:3129332kB managed:2763456kB mlocked:28412kB kernel_stack:29824kB pagetables:75032kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3252.817107] lowmem_reserve[]: 0 0 1 1 1 [ 3252.821090] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3252.847224] lowmem_reserve[]: 0 0 0 0 0 [ 3252.851905] Node 1 Normal free:54264kB min:53876kB low:67344kB high:80812kB active_anon:317072kB inactive_anon:2961460kB active_file:52kB inactive_file:52kB unevictable:41552kB writepending:0kB present:4194304kB managed:4128248kB mlocked:41552kB kernel_stack:120608kB pagetables:375124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3252.882061] lowmem_reserve[]: 0 0 0 0 0 [ 3252.886028] Node 0 DMA: 3*4kB (UE) 8*8kB (UM) 3*16kB (UME) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10940kB [ 3252.903337] Node 0 DMA32: 152*4kB (UME) 849*8kB (UME) 332*16kB (UME) 236*32kB (UM) 134*64kB (M) 48*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35752kB [ 3252.951037] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3253.021129] Node 1 Normal: 96*4kB (UM) 3177*8kB (UME) 1166*16kB (UME) 265*32kB (UM) 7*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54024kB [ 3253.043186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3253.054259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3253.063978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3253.073266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3253.082256] 18507 total pagecache pages [ 3253.086504] 0 pages in swap cache [ 3253.090182] Swap cache stats: add 0, delete 0, find 0/0 [ 3253.095959] Free swap = 0kB [ 3253.099214] Total swap = 0kB [ 3253.102661] 2097051 pages RAM [ 3253.106093] 0 pages HighMem/MovableOnly [ 3253.110280] 369648 pages reserved [ 3253.114102] 0 pages cma reserved [ 3253.117696] Out of memory (oom_kill_allocating_task): Kill process 31864 (syz-executor.2) score 0 or sacrifice child [ 3253.128773] Killed process 31873 (syz-executor.2) total-vm:93384kB, anon-rss:240kB, file-rss:35084kB, shmem-rss:0kB [ 3253.496011] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 3253.547743] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3253.583494] CPU: 0 PID: 31897 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3253.591329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3253.600677] Call Trace: [ 3253.603277] dump_stack+0x1fc/0x2ef [ 3253.606909] dump_header+0x15d/0xc3f [ 3253.610628] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3253.615731] ? ___ratelimit+0x319/0x590 [ 3253.619708] oom_kill_process.cold+0x10/0x692 [ 3253.624208] ? lock_downgrade+0x720/0x720 [ 3253.628360] ? check_preemption_disabled+0x41/0x280 [ 3253.633383] out_of_memory+0x34d/0x1390 [ 3253.637367] ? oom_killer_disable+0x270/0x270 [ 3253.641880] ? mutex_trylock+0x15f/0x1a0 [ 3253.645947] __alloc_pages_nodemask+0x23a2/0x2890 [ 3253.651411] ? find_get_entry+0x4cd/0x8a0 [ 3253.655571] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3253.660523] alloc_pages_current+0x193/0x2a0 [ 3253.664935] filemap_fault+0x146e/0x2180 [ 3253.669008] ext4_filemap_fault+0x84/0xb0 [ 3253.673159] __do_fault+0x10b/0x4b0 [ 3253.676797] __handle_mm_fault+0x273b/0x41c0 [ 3253.681212] ? vm_insert_page+0x9c0/0x9c0 [ 3253.685377] ? check_preemption_disabled+0x41/0x280 [ 3253.690399] handle_mm_fault+0x436/0xb10 [ 3253.694465] __do_page_fault+0x68e/0xd60 [ 3253.698533] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3253.703559] ? spurious_fault+0x840/0x840 [ 3253.707709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3253.712552] ? page_fault+0x8/0x30 [ 3253.716089] page_fault+0x1e/0x30 [ 3253.719554] RIP: 0033:0x561ba8711f90 [ 3253.723278] Code: Bad RIP value. [ 3253.726635] RSP: 002b:00007ffca3fc6368 EFLAGS: 00010246 [ 3253.731992] RAX: 0000000000000000 RBX: 0000561baa6d1010 RCX: 0000000000000000 [ 3253.739262] RDX: 00007ffca3fc6378 RSI: 00007ffca3fc6380 RDI: 0000561baa6d71c0 [ 3253.746550] RBP: 00007ffca3fc6380 R08: 000000000000ffff R09: 0000000000000000 [ 3253.753903] R10: 00007faec8373220 R11: 000000000000000d R12: 00007ffca3fc6378 [ 3253.761165] R13: 0000561baa6d48a0 R14: 0000561baa6d1010 R15: 0000561baa6d1028 [ 3253.827993] Mem-Info: [ 3253.842949] active_anon:452038 inactive_anon:774305 isolated_anon:0 [ 3253.842949] active_file:30 inactive_file:114 isolated_file:0 [ 3253.842949] unevictable:17455 dirty:0 writeback:0 unstable:0 [ 3253.842949] slab_reclaimable:26798 slab_unreclaimable:155625 [ 3253.842949] mapped:55833 shmem:15211 pagetables:112581 bounce:0 [ 3253.842949] free:25039 free_pcp:352 free_cma:0 [ 3253.936506] Node 0 active_anon:1491092kB inactive_anon:135776kB active_file:564kB inactive_file:492kB unevictable:24292kB isolated(anon):0kB isolated(file):0kB mapped:216284kB dirty:0kB writeback:0kB shmem:23340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 05:51:48 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) [ 3253.973626] Node 1 active_anon:317060kB inactive_anon:2961444kB active_file:968kB inactive_file:3292kB unevictable:23336kB isolated(anon):0kB isolated(file):0kB mapped:5852kB dirty:0kB writeback:0kB shmem:37504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3254.030499] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:48kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3254.076052] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3254.098946] Node 0 DMA32 free:36368kB min:35996kB low:44992kB high:53988kB active_anon:1486840kB inactive_anon:135764kB active_file:236kB inactive_file:2144kB unevictable:24316kB writepending:0kB present:3129332kB managed:2763456kB mlocked:24316kB kernel_stack:29760kB pagetables:75036kB bounce:0kB free_pcp:1500kB local_pcp:1136kB free_cma:0kB [ 3254.201439] lowmem_reserve[]: 0 0 1 1 1 [ 3254.205460] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3254.259801] lowmem_reserve[]: 0 0 0 0 0 [ 3254.267072] Node 1 Normal free:68268kB min:53876kB low:67344kB high:80812kB active_anon:317060kB inactive_anon:2961812kB active_file:1532kB inactive_file:1716kB unevictable:23336kB writepending:0kB present:4194304kB managed:4128248kB mlocked:23324kB kernel_stack:120480kB pagetables:375028kB bounce:0kB free_pcp:2008kB local_pcp:1396kB free_cma:0kB [ 3254.346294] lowmem_reserve[]: 0 0 0 0 0 [ 3254.370017] Node 0 DMA: 10*4kB (UME) 8*8kB (UM) 3*16kB (UME) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 3254.396241] Node 0 DMA32: 17*4kB (UME) 953*8kB (UME) 372*16kB (UME) 238*32kB (UM) 134*64kB (M) 48*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36748kB [ 3254.418496] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3254.439000] Node 1 Normal: 164*4kB (UM) 3479*8kB (UME) 1408*16kB (UME) 377*32kB (UME) 62*64kB (UME) 21*128kB (M) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 70248kB [ 3254.468629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3254.486832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3254.503725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3254.532907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3254.566460] 19077 total pagecache pages [ 3254.592075] 0 pages in swap cache [ 3254.596852] Swap cache stats: add 0, delete 0, find 0/0 [ 3254.621373] Free swap = 0kB [ 3254.624403] Total swap = 0kB [ 3254.627470] 2097051 pages RAM [ 3254.630773] 0 pages HighMem/MovableOnly [ 3254.643081] 369648 pages reserved [ 3254.646545] 0 pages cma reserved [ 3254.649906] Out of memory: Kill process 30744 (syz-executor.2) score 1010 or sacrifice child [ 3254.687815] Killed process 30744 (syz-executor.2) total-vm:93648kB, anon-rss:37028kB, file-rss:35084kB, shmem-rss:0kB 05:51:50 executing program 3: mlockall(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:50 executing program 2: mlockall(0x7) mlockall(0x3) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r0 = semget$private(0x0, 0x4, 0x300) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) r1 = fork() sched_getscheduler(r1) sched_getattr(r1, &(0x7f0000000200)={0x38}, 0x38, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000040)=""/242) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000001c0)) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000240)={0xc, {0xf6, "42a0ee6044940e3d9c3b81ff7544cb552e00f246eec7422b414fc30e58581e8feb3dad253167e2c4c1c2b4f838dd3a24789a12f65a1f4c954bdd61ebb91564285c13301511c0723eba668c449d66761f9b82f70a064187be716d1ad6050ab6f69dc669195be96b35abc4dcfcae329c8affedb7b519c0ef5c5da105bfcafed1ef8b5490e0f632e2658825b2b8e247262b92e693be97baa58c3f0bf0df3dcfbe9e505da49f24260a2187186b32e6455b91d1bfdb4a766ffc646c29ea1261fa59c6dbc7ea2386eadde29ade7e79c2f8c03d494b733f830f5cfc33a76f1f9c7a87362a4ca4c6b32891d5e0d41acac61c3b2e6afb152f5abb"}}, 0xfc) 05:51:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:50 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0xfb}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) 05:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:50 executing program 3: mlockall(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:50 executing program 3: mlockall(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x4) 05:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x300, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:50 executing program 3: mlockall(0x7) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x0) 05:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3257.524833] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3257.563598] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3257.607330] CPU: 0 PID: 31922 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3257.615237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3257.624585] Call Trace: [ 3257.627184] dump_stack+0x1fc/0x2ef [ 3257.630819] dump_header+0x15d/0xc3f [ 3257.634542] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3257.639646] ? ___ratelimit+0x319/0x590 [ 3257.643625] oom_kill_process.cold+0x10/0x692 [ 3257.648123] ? check_preemption_disabled+0x41/0x280 [ 3257.653145] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3257.658424] out_of_memory+0x1072/0x1390 [ 3257.662494] ? oom_killer_disable+0x270/0x270 [ 3257.666995] ? mutex_trylock+0x15f/0x1a0 [ 3257.671058] __alloc_pages_nodemask+0x23a2/0x2890 [ 3257.675919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3257.680767] ? finish_task_switch+0x146/0x760 [ 3257.685280] ? _raw_spin_unlock_irq+0x24/0x80 [ 3257.689777] alloc_pages_vma+0xf2/0x780 [ 3257.693759] do_anonymous_page+0x7c2/0x1be0 [ 3257.698090] ? __pte_alloc+0x340/0x340 [ 3257.701974] ? io_schedule_timeout+0x140/0x140 [ 3257.706559] ? mark_held_locks+0xf0/0xf0 [ 3257.710628] __handle_mm_fault+0x227a/0x41c0 [ 3257.715074] ? vm_insert_page+0x9c0/0x9c0 [ 3257.719235] ? check_preemption_disabled+0x41/0x280 [ 3257.724255] handle_mm_fault+0x436/0xb10 [ 3257.728317] __get_user_pages+0x6f0/0x1710 [ 3257.732561] ? follow_page_mask+0x1d00/0x1d00 [ 3257.737071] populate_vma_page_range+0x200/0x290 [ 3257.741831] __mm_populate+0x1ea/0x350 [ 3257.745723] ? populate_vma_page_range+0x290/0x290 [ 3257.750651] ? do_mlock+0x6b0/0x6b0 [ 3257.754281] ? security_capable+0x8f/0xc0 [ 3257.758436] __se_sys_mlockall+0x362/0x4e0 [ 3257.762674] do_syscall_64+0xf9/0x620 [ 3257.766486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3257.771683] RIP: 0033:0x4665f9 [ 3257.774876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3257.793775] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3257.801486] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3257.808761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3257.816027] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3257.823295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3257.830563] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3258.004105] Mem-Info: [ 3258.006574] active_anon:452158 inactive_anon:774298 isolated_anon:0 [ 3258.006574] active_file:16 inactive_file:14 isolated_file:0 [ 3258.006574] unevictable:15471 dirty:0 writeback:0 unstable:0 [ 3258.006574] slab_reclaimable:26848 slab_unreclaimable:157531 [ 3258.006574] mapped:54938 shmem:15211 pagetables:112657 bounce:0 [ 3258.006574] free:25201 free_pcp:0 free_cma:0 [ 3258.040640] Node 0 active_anon:1491092kB inactive_anon:135716kB active_file:4kB inactive_file:0kB unevictable:22100kB isolated(anon):0kB isolated(file):0kB mapped:215644kB dirty:0kB writeback:0kB shmem:23344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3258.069054] Node 1 active_anon:317540kB inactive_anon:2961476kB active_file:60kB inactive_file:56kB unevictable:39784kB isolated(anon):0kB isolated(file):0kB mapped:4108kB dirty:0kB writeback:0kB shmem:37500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3258.098279] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3258.164461] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3258.169522] Node 0 DMA32 free:35952kB min:35996kB low:44992kB high:53988kB active_anon:1486840kB inactive_anon:135716kB active_file:12kB inactive_file:0kB unevictable:22080kB writepending:0kB present:3129332kB managed:2763456kB mlocked:22080kB kernel_stack:29824kB pagetables:75236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3258.352617] lowmem_reserve[]: 0 0 1 1 1 [ 3258.387419] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3258.532645] lowmem_reserve[]: 0 0 0 0 0 [ 3258.559228] Node 1 Normal free:53872kB min:53876kB low:67344kB high:80812kB active_anon:317540kB inactive_anon:2961476kB active_file:96kB inactive_file:0kB unevictable:39784kB writepending:0kB present:4194304kB managed:4128248kB mlocked:39784kB kernel_stack:120672kB pagetables:375132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3258.760754] lowmem_reserve[]: 0 0 0 0 0 [ 3258.782567] Node 0 DMA: 3*4kB (UE) 5*8kB (U) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10980kB [ 3258.913759] Node 0 DMA32: 87*4kB (UME) 643*8kB (UME) 455*16kB (UME) 242*32kB (UME) 134*64kB (M) 48*128kB (ME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36004kB [ 3259.008655] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3259.079028] Node 1 Normal: 104*4kB (UME) 2540*8kB (UME) 1301*16kB (UME) 343*32kB (UM) 21*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54256kB [ 3259.175270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3259.238805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3259.289559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3259.334063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3259.386196] 17637 total pagecache pages [ 3259.390208] 0 pages in swap cache [ 3259.427367] Swap cache stats: add 0, delete 0, find 0/0 [ 3259.462924] Free swap = 0kB [ 3259.465984] Total swap = 0kB [ 3259.469005] 2097051 pages RAM [ 3259.519551] 0 pages HighMem/MovableOnly [ 3259.548928] 369648 pages reserved [ 3259.565163] 0 pages cma reserved [ 3259.568567] Out of memory (oom_kill_allocating_task): Kill process 31922 (syz-executor.0) score 0 or sacrifice child [ 3259.638891] Killed process 31922 (syz-executor.0) total-vm:93252kB, anon-rss:20944kB, file-rss:40196kB, shmem-rss:0kB [ 3259.692122] oom_reaper: reaped process 31922 (syz-executor.0), now anon-rss:20944kB, file-rss:40192kB, shmem-rss:0kB [ 3259.719203] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3259.797796] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3259.828654] CPU: 1 PID: 31939 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3259.836512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3259.845869] Call Trace: [ 3259.848461] dump_stack+0x1fc/0x2ef [ 3259.852107] dump_header+0x15d/0xc3f [ 3259.855826] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3259.860963] ? ___ratelimit+0x319/0x590 [ 3259.865053] oom_kill_process.cold+0x10/0x692 [ 3259.869545] ? check_preemption_disabled+0x41/0x280 [ 3259.874567] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3259.879843] out_of_memory+0x1072/0x1390 [ 3259.883914] ? oom_killer_disable+0x270/0x270 [ 3259.888431] ? mutex_trylock+0x15f/0x1a0 [ 3259.892585] __alloc_pages_nodemask+0x23a2/0x2890 [ 3259.897432] ? find_get_entry+0x4cd/0x8a0 [ 3259.901761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3259.906803] alloc_pages_current+0x193/0x2a0 [ 3259.911217] filemap_fault+0x146e/0x2180 [ 3259.915321] ext4_filemap_fault+0x84/0xb0 [ 3259.919475] __do_fault+0x10b/0x4b0 [ 3259.923108] __handle_mm_fault+0x273b/0x41c0 [ 3259.927522] ? vm_insert_page+0x9c0/0x9c0 [ 3259.931685] ? check_preemption_disabled+0x41/0x280 [ 3259.936710] handle_mm_fault+0x436/0xb10 [ 3259.940776] __do_page_fault+0x68e/0xd60 [ 3259.944929] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3259.949945] ? spurious_fault+0x840/0x840 [ 3259.954103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3259.958946] ? page_fault+0x8/0x30 [ 3259.962486] page_fault+0x1e/0x30 [ 3259.965933] RIP: 0033:0x7faec8417e50 [ 3259.969638] Code: Bad RIP value. [ 3259.972996] RSP: 002b:00007ffca3fc1de8 EFLAGS: 00010202 [ 3259.978356] RAX: 0000000000000001 RBX: 0000561baa6d48a1 RCX: 0000000000000001 [ 3259.985618] RDX: 0000561baa6d48a0 RSI: 0000561ba872267b RDI: 0000561ba8725266 [ 3259.992885] RBP: 0000561ba8725266 R08: 0000561ba8722670 R09: 0000000000001010 [ 3260.000150] R10: 0000000000000020 R11: 0000000000000246 R12: 0000561ba8722856 [ 3260.007414] R13: 0000561ba872267b R14: 00000000ffffffea R15: 0000561baa6d27a8 [ 3260.606912] Mem-Info: [ 3260.632870] active_anon:452158 inactive_anon:774348 isolated_anon:0 [ 3260.632870] active_file:298 inactive_file:924 isolated_file:32 [ 3260.632870] unevictable:9185 dirty:0 writeback:0 unstable:0 [ 3260.632870] slab_reclaimable:26751 slab_unreclaimable:157556 [ 3260.632870] mapped:54500 shmem:15211 pagetables:112657 bounce:0 [ 3260.632870] free:29199 free_pcp:1022 free_cma:0 [ 3260.767776] Node 0 active_anon:1491100kB inactive_anon:135816kB active_file:1072kB inactive_file:3388kB unevictable:14356kB isolated(anon):0kB isolated(file):128kB mapped:214248kB dirty:0kB writeback:0kB shmem:23344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3260.880476] Node 1 active_anon:317520kB inactive_anon:2961476kB active_file:532kB inactive_file:512kB unevictable:22280kB isolated(anon):0kB isolated(file):0kB mapped:5060kB dirty:4kB writeback:0kB shmem:37500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3260.967419] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:20kB writepending:0kB present:15992kB managed:15908kB mlocked:20kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3261.020816] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3261.025863] Node 0 DMA32 free:35536kB min:35996kB low:44992kB high:53988kB active_anon:1486848kB inactive_anon:135720kB active_file:2132kB inactive_file:2116kB unevictable:14276kB writepending:64kB present:3129332kB managed:2763456kB mlocked:14276kB kernel_stack:29824kB pagetables:75228kB bounce:0kB free_pcp:3184kB local_pcp:1896kB free_cma:0kB [ 3261.100835] lowmem_reserve[]: 0 0 1 1 1 [ 3261.104842] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3261.156115] lowmem_reserve[]: 0 0 0 0 0 [ 3261.160124] Node 1 Normal free:61928kB min:53876kB low:67344kB high:80812kB active_anon:317520kB inactive_anon:2961476kB active_file:308kB inactive_file:88kB unevictable:22280kB writepending:4kB present:4194304kB managed:4128248kB mlocked:22280kB kernel_stack:120512kB pagetables:375000kB bounce:0kB free_pcp:1840kB local_pcp:1448kB free_cma:0kB [ 3261.191299] lowmem_reserve[]: 0 0 0 0 0 [ 3261.195284] Node 0 DMA: 3*4kB (UE) 5*8kB (U) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10980kB [ 3261.210966] Node 0 DMA32: 292*4kB (UME) 621*8kB (ME) 487*16kB (UME) 240*32kB (UME) 126*64kB (UME) 48*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36072kB [ 3261.226369] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3261.250815] Node 1 Normal: 377*4kB (UME) 1955*8kB (UME) 1513*16kB (UME) 466*32kB (UM) 75*64kB (UM) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61964kB [ 3261.291003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3261.299850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3261.330821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3261.339683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3261.348884] 17760 total pagecache pages [ 3261.352963] 0 pages in swap cache [ 3261.356410] Swap cache stats: add 0, delete 0, find 0/0 [ 3261.361866] Free swap = 0kB [ 3261.364880] Total swap = 0kB [ 3261.367895] 2097051 pages RAM [ 3261.380784] 0 pages HighMem/MovableOnly [ 3261.384765] 369648 pages reserved [ 3261.388208] 0 pages cma reserved [ 3261.410813] Out of memory (oom_kill_allocating_task): Kill process 31939 (systemd-udevd) score 0 or sacrifice child [ 3261.430850] Killed process 31939 (systemd-udevd) total-vm:45484kB, anon-rss:2860kB, file-rss:0kB, shmem-rss:0kB [ 3261.453073] oom_reaper: reaped process 31939 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:51:56 executing program 0: mlockall(0x3) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x2c, 0x2, @tid=r0}, &(0x7f0000000040)) syz_open_procfs$userns(r0, 0x0) 05:51:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x700, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:56 executing program 2: r0 = semget(0x3, 0x3, 0x460) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f00000000c0)=""/186) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080), 0x6) mlockall(0x7) mlockall(0x3) fork() socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:51:56 executing program 3: mlockall(0x7) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x0) 05:51:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="11000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf00, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:51:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:51:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x4da1, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:51:57 executing program 3: mlockall(0x7) socket$inet6_udplite(0xa, 0x2, 0x88) fork() mlockall(0x0) 05:51:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3263.442894] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 3263.479706] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3263.496146] CPU: 0 PID: 4699 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3263.503872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3263.513229] Call Trace: [ 3263.515819] dump_stack+0x1fc/0x2ef [ 3263.519455] dump_header+0x15d/0xc3f [ 3263.523175] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3263.528276] ? ___ratelimit+0x319/0x590 [ 3263.532257] oom_kill_process.cold+0x10/0x692 [ 3263.536757] ? lock_downgrade+0x720/0x720 [ 3263.540908] ? check_preemption_disabled+0x41/0x280 [ 3263.545929] out_of_memory+0x34d/0x1390 [ 3263.549911] ? oom_killer_disable+0x270/0x270 [ 3263.554409] ? mutex_trylock+0x15f/0x1a0 [ 3263.558481] __alloc_pages_nodemask+0x23a2/0x2890 [ 3263.563343] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3263.568184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3263.573026] ? __put_seccomp_filter+0xa0/0xa0 [ 3263.577529] ? lock_downgrade+0x720/0x720 [ 3263.581679] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 3263.586965] ? ____cache_alloc_node+0x156/0x1d0 [ 3263.591631] ? cache_grow_begin+0x64/0x8a0 [ 3263.595871] cache_grow_begin+0xa4/0x8a0 [ 3263.599938] fallback_alloc+0x213/0x2e0 [ 3263.603924] kmem_cache_alloc+0x1e4/0x370 [ 3263.608075] getname_flags+0xce/0x590 [ 3263.611878] do_sys_open+0x26c/0x520 [ 3263.615597] ? filp_open+0x70/0x70 [ 3263.619140] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3263.624504] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3263.629545] ? do_syscall_64+0x21/0x620 [ 3263.633523] do_syscall_64+0xf9/0x620 [ 3263.637358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3263.642544] RIP: 0033:0x7faec83a59b1 [ 3263.646252] Code: Bad RIP value. [ 3263.649607] RSP: 002b:00007ffca3fc6938 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 3263.657309] RAX: ffffffffffffffda RBX: 0000561baa703370 RCX: 00007faec83a59b1 [ 3263.664581] RDX: 00000000000000fd RSI: 0000000000090800 RDI: 0000561baa6e5730 [ 3263.671847] RBP: 00007faec955b710 R08: 0000561baa6e4fd0 R09: 0000000000001010 [ 3263.679112] R10: 00007faec868bb58 R11: 0000000000000202 R12: 0000000000000000 [ 3263.686375] R13: 0000561baa6e5730 R14: 00000000000000fd R15: 0000561baa6e5730 [ 3263.917702] Mem-Info: [ 3263.920202] active_anon:452043 inactive_anon:774343 isolated_anon:0 [ 3263.920202] active_file:14 inactive_file:19 isolated_file:0 [ 3263.920202] unevictable:11819 dirty:0 writeback:0 unstable:0 [ 3263.920202] slab_reclaimable:24924 slab_unreclaimable:163203 [ 3263.920202] mapped:54969 shmem:15210 pagetables:112658 bounce:0 [ 3263.920202] free:25093 free_pcp:246 free_cma:0 [ 3263.977882] Node 0 active_anon:1491224kB inactive_anon:135712kB active_file:0kB inactive_file:56kB unevictable:20736kB isolated(anon):0kB isolated(file):0kB mapped:211644kB dirty:0kB writeback:0kB shmem:23340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3264.035961] Node 1 active_anon:316948kB inactive_anon:2961660kB active_file:68kB inactive_file:20kB unevictable:26540kB isolated(anon):0kB isolated(file):0kB mapped:8232kB dirty:0kB writeback:0kB shmem:37500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3264.070119] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3264.109115] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3264.132691] Node 0 DMA32 free:35712kB min:35996kB low:44992kB high:53988kB active_anon:1486972kB inactive_anon:135712kB active_file:0kB inactive_file:56kB unevictable:20508kB writepending:0kB present:3129332kB managed:2763456kB mlocked:20508kB kernel_stack:29856kB pagetables:75224kB bounce:0kB free_pcp:948kB local_pcp:456kB free_cma:0kB [ 3264.168272] lowmem_reserve[]: 0 0 1 1 1 [ 3264.173435] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3264.205090] lowmem_reserve[]: 0 0 0 0 0 [ 3264.209294] Node 1 Normal free:53676kB min:53876kB low:67344kB high:80812kB active_anon:316948kB inactive_anon:2961660kB active_file:72kB inactive_file:20kB unevictable:26340kB writepending:0kB present:4194304kB managed:4128248kB mlocked:26340kB kernel_stack:120640kB pagetables:375148kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3264.245203] lowmem_reserve[]: 0 0 0 0 0 [ 3264.249198] Node 0 DMA: 2*4kB (E) 7*8kB (UM) 2*16kB (UE) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3264.269191] Node 0 DMA32: 1012*4kB (UE) 472*8kB (UME) 484*16kB (ME) 224*32kB (UME) 107*64kB (UME) 42*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34960kB [ 3264.288529] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3264.299739] Node 1 Normal: 127*4kB (UM) 945*8kB (UME) 1371*16kB (UE) 380*32kB (UM) 99*64kB (UM) 35*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53748kB [ 3264.321042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3264.329893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3264.343065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3264.351970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3264.364461] 17622 total pagecache pages [ 3264.368784] 0 pages in swap cache [ 3264.377712] Swap cache stats: add 0, delete 0, find 0/0 [ 3264.387718] Free swap = 0kB [ 3264.395626] Total swap = 0kB [ 3264.398652] 2097051 pages RAM [ 3264.406206] 0 pages HighMem/MovableOnly [ 3264.410176] 369648 pages reserved [ 3264.415379] 0 pages cma reserved [ 3264.419464] Out of memory: Kill process 30747 (syz-executor.2) score 1010 or sacrifice child [ 3264.430033] Killed process 30747 (syz-executor.2) total-vm:93648kB, anon-rss:37028kB, file-rss:35076kB, shmem-rss:0kB [ 3264.458218] oom_reaper: reaped process 30747 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3264.510102] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 3264.523523] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3264.528829] CPU: 0 PID: 4699 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3264.536528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3264.545890] Call Trace: [ 3264.548473] dump_stack+0x1fc/0x2ef [ 3264.552115] dump_header+0x15d/0xc3f [ 3264.555833] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3264.560936] ? ___ratelimit+0x319/0x590 [ 3264.564910] oom_kill_process.cold+0x10/0x692 [ 3264.569399] ? lock_downgrade+0x720/0x720 [ 3264.573543] ? check_preemption_disabled+0x41/0x280 [ 3264.578562] out_of_memory+0x34d/0x1390 [ 3264.582550] ? oom_killer_disable+0x270/0x270 [ 3264.587062] ? mutex_trylock+0x15f/0x1a0 [ 3264.591121] __alloc_pages_nodemask+0x23a2/0x2890 [ 3264.595982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3264.600823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3264.605741] ? __put_seccomp_filter+0xa0/0xa0 [ 3264.610225] ? lock_downgrade+0x720/0x720 [ 3264.614378] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 3264.619638] ? ____cache_alloc_node+0x156/0x1d0 [ 3264.624313] ? cache_grow_begin+0x64/0x8a0 [ 3264.628539] cache_grow_begin+0xa4/0x8a0 [ 3264.632684] fallback_alloc+0x213/0x2e0 [ 3264.636662] kmem_cache_alloc+0x1e4/0x370 [ 3264.640813] getname_flags+0xce/0x590 [ 3264.644616] do_sys_open+0x26c/0x520 [ 3264.648324] ? filp_open+0x70/0x70 [ 3264.651859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3264.657220] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3264.662236] ? do_syscall_64+0x21/0x620 [ 3264.666200] do_syscall_64+0xf9/0x620 [ 3264.670015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3264.675202] RIP: 0033:0x7faec83a59b1 [ 3264.678914] Code: Bad RIP value. [ 3264.682272] RSP: 002b:00007ffca3fc6938 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 3264.690413] RAX: ffffffffffffffda RBX: 0000561baa703370 RCX: 00007faec83a59b1 [ 3264.697678] RDX: 00000000000000fd RSI: 0000000000090800 RDI: 0000561baa6e5730 [ 3264.704945] RBP: 00007faec955b710 R08: 0000561baa6e4fd0 R09: 0000000000001010 [ 3264.712209] R10: 00007faec868bb58 R11: 0000000000000202 R12: 0000000000000000 [ 3264.719467] R13: 0000561baa6e5730 R14: 00000000000000fd R15: 0000561baa6e5730 [ 3264.730122] Mem-Info: [ 3264.742570] active_anon:452043 inactive_anon:774318 isolated_anon:0 [ 3264.742570] active_file:0 inactive_file:19 isolated_file:0 [ 3264.742570] unevictable:11819 dirty:0 writeback:0 unstable:0 [ 3264.742570] slab_reclaimable:24924 slab_unreclaimable:163253 [ 3264.742570] mapped:54969 shmem:15210 pagetables:112621 bounce:0 [ 3264.742570] free:25093 free_pcp:352 free_cma:0 [ 3264.782755] Node 0 active_anon:1491224kB inactive_anon:135712kB active_file:0kB inactive_file:56kB unevictable:20736kB isolated(anon):0kB isolated(file):0kB mapped:211644kB dirty:0kB writeback:0kB shmem:23340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3264.817276] Node 1 active_anon:316948kB inactive_anon:2961560kB active_file:0kB inactive_file:20kB unevictable:26540kB isolated(anon):0kB isolated(file):0kB mapped:8232kB dirty:0kB writeback:0kB shmem:37500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3264.871174] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3264.915928] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3264.926392] Node 0 DMA32 free:34960kB min:35996kB low:44992kB high:53988kB active_anon:1486976kB inactive_anon:135712kB active_file:20kB inactive_file:20kB unevictable:20764kB writepending:0kB present:3129332kB managed:2763456kB mlocked:20764kB kernel_stack:29856kB pagetables:75224kB bounce:0kB free_pcp:756kB local_pcp:396kB free_cma:0kB [ 3264.970212] lowmem_reserve[]: 0 0 1 1 1 [ 3264.974997] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3265.007652] lowmem_reserve[]: 0 0 0 0 0 [ 3265.017025] Node 1 Normal free:53780kB min:53876kB low:67344kB high:80812kB active_anon:316948kB inactive_anon:2961472kB active_file:0kB inactive_file:56kB unevictable:26596kB writepending:0kB present:4194304kB managed:4128248kB mlocked:26596kB kernel_stack:120608kB pagetables:374984kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 3265.058091] lowmem_reserve[]: 0 0 0 0 0 [ 3265.067191] Node 0 DMA: 2*4kB (E) 7*8kB (UM) 2*16kB (UE) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3265.158731] Node 0 DMA32: 1012*4kB (UE) 472*8kB (UME) 484*16kB (ME) 224*32kB (UME) 107*64kB (UME) 42*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34960kB [ 3265.258869] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3265.330544] Node 1 Normal: 127*4kB (UM) 945*8kB (UME) 1371*16kB (UE) 385*32kB (UM) 99*64kB (UM) 35*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53908kB [ 3265.424814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3265.477715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3265.533281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3265.580291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3265.622458] 17603 total pagecache pages [ 3265.626452] 0 pages in swap cache [ 3265.629895] Swap cache stats: add 0, delete 0, find 0/0 [ 3265.698227] Free swap = 0kB [ 3265.715009] Total swap = 0kB [ 3265.718045] 2097051 pages RAM [ 3265.755573] 0 pages HighMem/MovableOnly [ 3265.759571] 369648 pages reserved [ 3265.799414] 0 pages cma reserved [ 3265.820409] Out of memory: Kill process 30974 (syz-executor.2) score 1010 or sacrifice child [ 3265.829043] Killed process 30974 (syz-executor.2) total-vm:93648kB, anon-rss:37028kB, file-rss:35076kB, shmem-rss:0kB [ 3265.992574] oom_reaper: reaped process 30974 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:52:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="13000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:01 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) sched_getscheduler(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_open_procfs$userns(0x0, 0x0) 05:52:01 executing program 2: mlockall(0x7) mlockall(0x3) fork() getgid() syz_open_procfs$userns(0x0, &(0x7f0000000040)) 05:52:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xa14d, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:01 executing program 3: r0 = semget(0x3, 0x3, 0x460) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f00000000c0)=""/186) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080), 0x6) mlockall(0x7) mlockall(0x3) fork() socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:52:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x30000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="15000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3267.251816] ieee802154 phy0 wpan0: encryption failed: -22 [ 3267.255918] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3267.257461] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.326024] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3268.058999] syz-executor.3 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3268.079451] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3268.112403] CPU: 0 PID: 32084 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3268.120354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3268.129709] Call Trace: [ 3268.132357] dump_stack+0x1fc/0x2ef [ 3268.135998] dump_header+0x15d/0xc3f [ 3268.139722] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 3268.144835] ? ___ratelimit+0x319/0x590 [ 3268.148827] oom_kill_process.cold+0x10/0x692 [ 3268.153348] ? check_preemption_disabled+0x41/0x280 [ 3268.158384] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3268.163671] out_of_memory+0x1072/0x1390 [ 3268.167747] ? oom_killer_disable+0x270/0x270 [ 3268.172255] ? mutex_trylock+0x15f/0x1a0 [ 3268.176328] __alloc_pages_nodemask+0x23a2/0x2890 [ 3268.181194] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3268.186042] ? __lock_acquire+0x6de/0x3ff0 [ 3268.190288] ? mark_held_locks+0xf0/0xf0 [ 3268.194371] alloc_pages_vma+0xf2/0x780 [ 3268.198358] do_anonymous_page+0x7c2/0x1be0 [ 3268.202693] ? __pte_alloc+0x340/0x340 [ 3268.206591] ? __put_compound_page+0xc0/0xc0 [ 3268.211011] ? mark_held_locks+0xf0/0xf0 [ 3268.215089] __handle_mm_fault+0x227a/0x41c0 [ 3268.219610] ? vm_insert_page+0x9c0/0x9c0 [ 3268.223791] ? check_preemption_disabled+0x41/0x280 [ 3268.228856] handle_mm_fault+0x436/0xb10 [ 3268.232930] __get_user_pages+0x6f0/0x1710 [ 3268.237182] ? follow_page_mask+0x1d00/0x1d00 [ 3268.241691] ? check_preemption_disabled+0x41/0x280 [ 3268.246729] populate_vma_page_range+0x200/0x290 [ 3268.251518] __mm_populate+0x1ea/0x350 [ 3268.255414] ? populate_vma_page_range+0x290/0x290 [ 3268.260348] ? do_mlock+0x6b0/0x6b0 [ 3268.263978] ? security_capable+0x8f/0xc0 [ 3268.268152] __se_sys_mlockall+0x362/0x4e0 [ 3268.272402] do_syscall_64+0xf9/0x620 [ 3268.276212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3268.281407] RIP: 0033:0x4665f9 [ 3268.284614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3268.303556] RSP: 002b:00007fa4071a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3268.311277] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3268.318555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3268.325831] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3268.333108] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3268.340501] R13: 00007ffc396d572f R14: 00007fa4071a7300 R15: 0000000000022000 [ 3269.428816] Mem-Info: [ 3269.441628] active_anon:452108 inactive_anon:765039 isolated_anon:0 [ 3269.441628] active_file:12 inactive_file:5 isolated_file:0 [ 3269.441628] unevictable:18390 dirty:0 writeback:0 unstable:0 [ 3269.441628] slab_reclaimable:23287 slab_unreclaimable:167629 [ 3269.441628] mapped:56007 shmem:15210 pagetables:112632 bounce:0 [ 3269.441628] free:24963 free_pcp:89 free_cma:0 [ 3269.591002] Node 0 active_anon:1491116kB inactive_anon:135712kB active_file:12kB inactive_file:12kB unevictable:25344kB isolated(anon):0kB isolated(file):0kB mapped:211704kB dirty:0kB writeback:0kB shmem:23344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3269.628183] Node 1 active_anon:317316kB inactive_anon:2924444kB active_file:128kB inactive_file:4kB unevictable:48216kB isolated(anon):0kB isolated(file):0kB mapped:12324kB dirty:0kB writeback:0kB shmem:37496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3269.694350] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:44kB writepending:0kB present:15992kB managed:15908kB mlocked:44kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3269.900320] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3269.931329] Node 0 DMA32 free:35272kB min:35996kB low:44992kB high:53988kB active_anon:1486864kB inactive_anon:135712kB active_file:12kB inactive_file:12kB unevictable:25300kB writepending:0kB present:3129332kB managed:2763456kB mlocked:25300kB kernel_stack:29824kB pagetables:75208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3270.128235] lowmem_reserve[]: 0 0 1 1 1 [ 3270.164411] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3270.303149] lowmem_reserve[]: 0 0 0 0 0 [ 3270.307173] Node 1 Normal free:53412kB min:53876kB low:67344kB high:80812kB active_anon:317316kB inactive_anon:2924444kB active_file:92kB inactive_file:8kB unevictable:48216kB writepending:0kB present:4194304kB managed:4128248kB mlocked:48216kB kernel_stack:120608kB pagetables:375060kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3270.375091] lowmem_reserve[]: 0 0 0 0 0 [ 3270.379116] Node 0 DMA: 2*4kB (E) 7*8kB (UM) 3*16kB (UME) 3*32kB (UME) 2*64kB (UE) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 3270.427378] Node 0 DMA32: 1987*4kB (ME) 1031*8kB (UME) 177*16kB (UME) 204*32kB (UME) 85*64kB (UME) 30*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34836kB [ 3270.500167] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3270.561565] Node 1 Normal: 154*4kB (UME) 58*8kB (UME) 881*16kB (UME) 386*32kB (UM) 25*64kB (U) 9*128kB (M) 27*256kB (M) 15*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (E) = 54088kB [ 3270.661607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3270.715706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3270.773181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3270.829613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3270.910536] 18374 total pagecache pages [ 3270.914560] 0 pages in swap cache [ 3270.918025] Swap cache stats: add 0, delete 0, find 0/0 [ 3270.954903] Free swap = 0kB [ 3270.957965] Total swap = 0kB [ 3270.965989] 2097051 pages RAM [ 3270.969113] 0 pages HighMem/MovableOnly [ 3270.994750] 369648 pages reserved [ 3270.998230] 0 pages cma reserved [ 3271.001685] Out of memory (oom_kill_allocating_task): Kill process 32084 (syz-executor.3) score 0 or sacrifice child [ 3271.045369] Killed process 32084 (syz-executor.3) total-vm:93384kB, anon-rss:14080kB, file-rss:40212kB, shmem-rss:0kB [ 3271.103182] oom_reaper: reaped process 32084 (syz-executor.3), now anon-rss:14080kB, file-rss:40204kB, shmem-rss:0kB 05:52:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x34000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="16000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:05 executing program 2: mlockall(0x7) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000080)='0', 0x1) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x1}}, 0x10) [ 3271.345110] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3271.402663] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="17000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x400300, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:06 executing program 3: r0 = semget(0x3, 0x3, 0x460) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f00000000c0)=""/186) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080), 0x6) mlockall(0x7) mlockall(0x3) fork() socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:52:06 executing program 0: mlockall(0x0) fork() socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$userns(0x0, 0x0) 05:52:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3272.419043] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf0ffff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3272.500643] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:07 executing program 0: mlockall(0x3) fork() setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0xffffffff, 0x4) syz_open_procfs$userns(0x0, 0x0) 05:52:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="11000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x1000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3272.749920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3272.816779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3274.023210] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3274.035060] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3274.059310] CPU: 0 PID: 8111 Comm: syz-fuzzer Not tainted 4.19.205-syzkaller #0 [ 3274.066776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3274.076213] Call Trace: [ 3274.078807] dump_stack+0x1fc/0x2ef [ 3274.082473] dump_header+0x15d/0xc3f [ 3274.086199] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3274.091305] ? ___ratelimit+0x319/0x590 [ 3274.095289] oom_kill_process.cold+0x10/0x692 [ 3274.099792] ? check_preemption_disabled+0x41/0x280 [ 3274.104816] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3274.110106] out_of_memory+0x1072/0x1390 [ 3274.114271] ? oom_killer_disable+0x270/0x270 [ 3274.118773] ? mutex_trylock+0x15f/0x1a0 [ 3274.122839] __alloc_pages_nodemask+0x23a2/0x2890 [ 3274.127717] ? find_get_entry+0x4cd/0x8a0 [ 3274.131967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3274.136810] alloc_pages_current+0x193/0x2a0 [ 3274.141210] filemap_fault+0x146e/0x2180 [ 3274.145384] ext4_filemap_fault+0x84/0xb0 [ 3274.149531] __do_fault+0x10b/0x4b0 [ 3274.153153] __handle_mm_fault+0x273b/0x41c0 [ 3274.157551] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3274.162643] ? vm_insert_page+0x9c0/0x9c0 [ 3274.166805] ? check_preemption_disabled+0x41/0x280 [ 3274.171916] handle_mm_fault+0x436/0xb10 [ 3274.176110] __do_page_fault+0x68e/0xd60 [ 3274.180162] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3274.185178] ? spurious_fault+0x840/0x840 [ 3274.189331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3274.194173] ? page_fault+0x8/0x30 [ 3274.197802] page_fault+0x1e/0x30 [ 3274.201241] RIP: 0033:0x46dabd [ 3274.204422] Code: Bad RIP value. [ 3274.207768] RSP: 002b:000000c00003df18 EFLAGS: 00010202 [ 3274.213144] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046dabd [ 3274.220406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003df18 [ 3274.227671] RBP: 000000c00003df28 R08: 000000000004180f R09: 0000036d808c80f1 [ 3274.234925] R10: 000630ea9067f426 R11: 0000000000000202 R12: 000000000043b6a0 [ 3274.242180] R13: 0000000000000000 R14: 000000000094d6d0 R15: 0000000000000000 [ 3274.260494] Mem-Info: [ 3274.263331] active_anon:452100 inactive_anon:765063 isolated_anon:0 [ 3274.263331] active_file:42 inactive_file:43 isolated_file:0 [ 3274.263331] unevictable:18361 dirty:0 writeback:0 unstable:0 [ 3274.263331] slab_reclaimable:23301 slab_unreclaimable:167081 [ 3274.263331] mapped:60054 shmem:15210 pagetables:112696 bounce:0 [ 3274.263331] free:25108 free_pcp:236 free_cma:0 [ 3274.310062] Node 0 active_anon:1491228kB inactive_anon:135768kB active_file:144kB inactive_file:16kB unevictable:32952kB isolated(anon):0kB isolated(file):0kB mapped:225468kB dirty:0kB writeback:0kB shmem:23348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1359872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3274.356890] Node 1 active_anon:317172kB inactive_anon:2924484kB active_file:24kB inactive_file:36kB unevictable:40492kB isolated(anon):0kB isolated(file):0kB mapped:14648kB dirty:0kB writeback:0kB shmem:37492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3274.385792] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3274.414077] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3274.420363] Node 0 DMA32 free:36868kB min:35996kB low:44992kB high:53988kB active_anon:1486976kB inactive_anon:135768kB active_file:56kB inactive_file:200kB unevictable:32552kB writepending:0kB present:3129332kB managed:2763456kB mlocked:32552kB kernel_stack:29888kB pagetables:75284kB bounce:0kB free_pcp:464kB local_pcp:372kB free_cma:0kB [ 3274.451929] lowmem_reserve[]: 0 0 1 1 1 [ 3274.458829] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3274.486926] lowmem_reserve[]: 0 0 0 0 0 [ 3274.492101] Node 1 Normal free:54228kB min:53876kB low:67344kB high:80812kB active_anon:317172kB inactive_anon:2927484kB active_file:824kB inactive_file:508kB unevictable:36104kB writepending:0kB present:4194304kB managed:4128248kB mlocked:36036kB kernel_stack:120800kB pagetables:375092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3274.525171] lowmem_reserve[]: 0 0 0 0 0 [ 3274.530268] Node 0 DMA: 5*4kB (ME) 3*8kB (UM) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 3274.547203] Node 0 DMA32: 1966*4kB (UE) 2217*8kB (UMEH) 139*16kB (UME) 23*32kB (UME) 54*64kB (UME) 30*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35856kB [ 3274.565129] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3274.581849] Node 1 Normal: 53*4kB (UME) 34*8kB (UE) 412*16kB (UME) 381*32kB (UM) 102*64kB (UM) 29*128kB (M) 27*256kB (M) 15*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (E) = 53316kB [ 3274.616876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3274.679719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3274.719241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3274.757950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3274.837267] 22547 total pagecache pages [ 3274.860876] 0 pages in swap cache [ 3274.885179] Swap cache stats: add 0, delete 0, find 0/0 [ 3274.925741] Free swap = 0kB [ 3274.944591] Total swap = 0kB [ 3274.958536] 2097051 pages RAM [ 3274.973643] 0 pages HighMem/MovableOnly [ 3274.992235] 369648 pages reserved 05:52:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:09 executing program 2: mlockall(0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7ff}, 0x8) mlockall(0x3) fork() fork() fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, &(0x7f0000000080)) [ 3275.028160] 0 pages cma reserved [ 3275.060773] Out of memory (oom_kill_allocating_task): Kill process 8111 (syz-fuzzer) score 0 or sacrifice child [ 3275.143111] Killed process 8144 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:928kB, shmem-rss:0kB 05:52:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x2000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="19000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:16 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000040)) r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r1, &(0x7f0000000000)) mlockall(0x0) 05:52:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="13000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:16 executing program 3: mlockall(0x7) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000080)='0', 0x1) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x1}}, 0x10) 05:52:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x3000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:17 executing program 0: mlockall(0x3) r0 = fork() syz_open_procfs$userns(r0, 0x0) 05:52:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x2000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="16000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x7000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3283.503444] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 05:52:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="16000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3284.182029] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3284.213125] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:19 executing program 2: mlockall(0x7) mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3285.133201] IPVS: ftp: loaded support on port[0] = 21 [ 3285.932920] chnl_net:caif_netlink_parms(): no params data found [ 3286.189276] IPVS: stopping master sync thread 27758 ... [ 3286.195518] IPVS: stopping backup sync thread 20807 ... [ 3286.334139] bridge0: port 1(bridge_slave_0) entered blocking state [ 3286.340900] bridge0: port 1(bridge_slave_0) entered disabled state [ 3286.347835] device bridge_slave_0 entered promiscuous mode [ 3286.358105] bridge0: port 2(bridge_slave_1) entered blocking state [ 3286.368880] bridge0: port 2(bridge_slave_1) entered disabled state [ 3286.375881] device bridge_slave_1 entered promiscuous mode [ 3286.506333] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3286.517127] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3286.537997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3286.545434] team0: Port device team_slave_0 added [ 3286.551244] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3286.558468] team0: Port device team_slave_1 added [ 3286.585340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3286.592541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3286.601706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3286.608377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3286.617692] device bridge_slave_1 left promiscuous mode [ 3286.624645] bridge0: port 2(bridge_slave_1) entered disabled state [ 3286.634327] device bridge_slave_0 left promiscuous mode [ 3286.640017] bridge0: port 1(bridge_slave_0) entered disabled state [ 3286.653495] device veth1_macvtap left promiscuous mode [ 3286.659155] device veth0_macvtap left promiscuous mode [ 3286.664439] device veth1_vlan left promiscuous mode [ 3286.669734] device veth0_vlan left promiscuous mode [ 3286.940560] Bluetooth: hci4: command 0x0409 tx timeout [ 3289.018479] Bluetooth: hci4: command 0x041b tx timeout [ 3291.088427] Bluetooth: hci4: command 0x040f tx timeout [ 3291.162577] device hsr_slave_1 left promiscuous mode [ 3291.172648] device hsr_slave_0 left promiscuous mode [ 3291.186495] team0 (unregistering): Port device team_slave_1 removed [ 3291.199176] team0 (unregistering): Port device team_slave_0 removed [ 3291.210494] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3291.221940] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3291.256565] bond0 (unregistering): Released all slaves [ 3291.276155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3291.282843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3291.308315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3291.321446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3291.327681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3291.354260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3291.365302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3291.372985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3291.397121] device hsr_slave_0 entered promiscuous mode [ 3291.402992] device hsr_slave_1 entered promiscuous mode [ 3291.409632] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3291.416774] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3291.515583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3291.561558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3291.576312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3291.587625] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3291.594329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3291.601984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3291.615215] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3291.636213] 8021q: adding VLAN 0 to HW filter on device team0 [ 3291.647445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3291.660847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3291.674883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3291.685088] bridge0: port 1(bridge_slave_0) entered blocking state [ 3291.691512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3291.707962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3291.717930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3291.732173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3291.742819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3291.754692] bridge0: port 2(bridge_slave_1) entered blocking state [ 3291.761102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3291.778291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3291.787846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3291.802538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3291.814310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3291.831893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3291.841912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3291.854014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3291.871678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3291.881699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3291.893137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3291.906226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3291.925294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3291.941590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3291.955030] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3291.966490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3291.977411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3292.003519] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3292.012458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3292.025785] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3292.034863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3292.046813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3292.061841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3292.141645] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3292.159559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3292.230107] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3292.237306] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3292.245993] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3292.257655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3292.272000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3292.279972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3292.289877] device veth0_vlan entered promiscuous mode [ 3292.304103] device veth1_vlan entered promiscuous mode [ 3292.310958] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3292.324876] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3292.331397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3292.339930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3292.353067] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3292.364042] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3292.371287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3292.379813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3292.389907] device veth0_macvtap entered promiscuous mode [ 3292.396488] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3292.406475] device veth1_macvtap entered promiscuous mode [ 3292.413503] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3292.424378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3292.435688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3292.445300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3292.455531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.465203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3292.475241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.484651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3292.495244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.504760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3292.514557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.523895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3292.534728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.545603] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3292.552722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3292.561730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3292.569158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3292.576397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3292.584327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3292.593008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3292.602937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.612378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3292.623159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.632569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3292.642659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.651957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3292.661765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.670931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3292.681391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3292.692332] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3292.699261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3292.707068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3292.715179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3292.870516] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 3292.876946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3292.889431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3292.896208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3292.915349] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 3292.922692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3292.934011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3292.941446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:52:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x7000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) mlockall(0x3) fork() syz_open_dev$vcsn(&(0x7f0000000000), 0x53bd, 0x4400) syz_open_procfs$userns(0x0, 0x0) 05:52:27 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="de1ccfc0f1284f446fb8665e96e38f529fafbc277b792d37c2e8f3edc0eb6e3e4419478881d8f20a", 0x28, 0x90, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x1000) syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') [ 3293.088175] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="15000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3293.130797] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3293.168717] Bluetooth: hci4: command 0x0419 tx timeout 05:52:27 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000040)) r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r1, &(0x7f0000000000)) mlockall(0x0) 05:52:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x9effffff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3293.304569] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3293.352353] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3293.381672] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xa14d0000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3293.426336] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="16000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3293.652678] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf0ffffff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3293.719170] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3293.776385] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="17000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xfffff000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3294.005094] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:29 executing program 0: mlockall(0x3) fork() openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200482, 0x0) syz_open_procfs$userns(0x0, 0x0) 05:52:30 executing program 2: mlockall(0x7) mlockall(0x3) fork() mlockall(0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x3410173c, 0x4) 05:52:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xffffff7f, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xf0ffffff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:30 executing program 3: mlockall(0x7) mlockall(0x3) r0 = fork() sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="de1ccfc0f1284f446fb8665e96e38f529fafbc277b792d37c2e8f3edc0eb6e3e4419478881d8f20a", 0x28, 0x90, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x1000) syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') 05:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xffffff9e, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="19000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xfffffff0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0xffffffff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:32 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x41a, 0x2400) read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/154, 0x9a) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x23}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040060) 05:52:32 executing program 2: mlockall(0x7) mlockall(0x3) fork() mlockall(0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3298.220086] nla_parse: 16 callbacks suppressed [ 3298.220096] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3298.275877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3298.304708] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3298.375587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\'\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3299.155490] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3299.192179] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:35 executing program 0: mlockall(0x3) fork() fork() fork() r0 = fork() r1 = fork() sched_getscheduler(r1) r2 = fork() sched_getscheduler(r2) r3 = fork() sched_getscheduler(r3) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') sched_getscheduler(r3) syz_open_procfs$userns(r0, 0x0) 05:52:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x9}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:35 executing program 2: mlockall(0x7) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) mlockall(0x3) r0 = fork() r1 = fork() sched_getscheduler(r1) r2 = fork() sched_getscheduler(r2) fork() syz_open_procfs$userns(r1, &(0x7f0000000100)) r3 = fork() getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace$pokeuser(0x6, r3, 0x0, 0x0) r4 = fork() timer_create(0x1, &(0x7f0000000140)={0x0, 0x7, 0x5, @tid=r0}, &(0x7f0000000180)) sched_getscheduler(r4) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/time_for_children\x00') [ 3300.680847] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3300.728930] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3300.785582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3300.805591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xa}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3302.497760] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 3302.595295] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3302.664573] CPU: 1 PID: 421 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3302.672305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.681653] Call Trace: [ 3302.684246] dump_stack+0x1fc/0x2ef [ 3302.687880] dump_header+0x15d/0xc3f [ 3302.691597] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3302.696702] ? ___ratelimit+0x319/0x590 [ 3302.700678] oom_kill_process.cold+0x10/0x692 [ 3302.705176] ? check_preemption_disabled+0x41/0x280 [ 3302.710199] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3302.715566] out_of_memory+0x1072/0x1390 [ 3302.719632] ? oom_killer_disable+0x270/0x270 [ 3302.724169] ? mutex_trylock+0x15f/0x1a0 [ 3302.728321] __alloc_pages_nodemask+0x23a2/0x2890 [ 3302.733268] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3302.738111] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3302.742974] ? update_curr+0x3b9/0x870 [ 3302.746871] ? drop_futex_key_refs+0x6f/0xe0 [ 3302.751375] ? ____cache_alloc_node+0x156/0x1d0 [ 3302.756042] ? cache_grow_begin+0x64/0x8a0 [ 3302.760278] cache_grow_begin+0xa4/0x8a0 [ 3302.764347] fallback_alloc+0x213/0x2e0 [ 3302.768329] kmem_cache_alloc_node+0xe3/0x3b0 [ 3302.772843] copy_process.part.0+0x1ceb/0x8260 [ 3302.777433] ? do_futex+0x171/0x1880 [ 3302.781154] ? migrate_swap_stop+0x900/0x900 [ 3302.785566] ? __cleanup_sighand+0x60/0x60 [ 3302.789800] ? wake_up_q+0x93/0xe0 [ 3302.793342] ? rwsem_optimistic_spin+0x480/0x480 [ 3302.798106] _do_fork+0x22f/0xf30 [ 3302.801561] ? fork_idle+0x220/0x220 [ 3302.805276] ? do_futex+0x1880/0x1880 [ 3302.809081] ? security_capable+0x8f/0xc0 [ 3302.813232] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3302.818690] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3302.823709] ? do_syscall_64+0x21/0x620 [ 3302.827693] do_syscall_64+0xf9/0x620 [ 3302.831496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3302.836688] RIP: 0033:0x4665f9 [ 3302.839881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3302.858865] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3302.866576] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3302.873842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3302.881109] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3302.888380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3302.895649] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3302.928116] Mem-Info: [ 3302.930588] active_anon:374019 inactive_anon:863706 isolated_anon:0 [ 3302.930588] active_file:14 inactive_file:18 isolated_file:2 [ 3302.930588] unevictable:45332 dirty:0 writeback:0 unstable:0 [ 3302.930588] slab_reclaimable:22122 slab_unreclaimable:154785 [ 3302.930588] mapped:59110 shmem:15197 pagetables:91284 bounce:0 [ 3302.930588] free:25015 free_pcp:127 free_cma:0 [ 3302.971328] Node 0 active_anon:1239672kB inactive_anon:306976kB active_file:56kB inactive_file:72kB unevictable:171408kB isolated(anon):0kB isolated(file):0kB mapped:235036kB dirty:0kB writeback:0kB shmem:23340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3303.005621] Node 1 active_anon:256404kB inactive_anon:3147848kB active_file:0kB inactive_file:0kB unevictable:9920kB isolated(anon):0kB isolated(file):8kB mapped:1404kB dirty:0kB writeback:0kB shmem:37448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3303.039844] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.070684] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3303.075723] Node 0 DMA32 free:35860kB min:35996kB low:44992kB high:53988kB active_anon:1235460kB inactive_anon:306836kB active_file:56kB inactive_file:20kB unevictable:171408kB writepending:0kB present:3129332kB managed:2763456kB mlocked:171408kB kernel_stack:26592kB pagetables:65052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.105889] lowmem_reserve[]: 0 0 1 1 1 [ 3303.110088] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.137531] lowmem_reserve[]: 0 0 0 0 0 [ 3303.141642] Node 1 Normal free:53252kB min:53876kB low:67344kB high:80812kB active_anon:256404kB inactive_anon:3147848kB active_file:4kB inactive_file:8kB unevictable:9920kB writepending:12kB present:4194304kB managed:4128248kB mlocked:9920kB kernel_stack:96096kB pagetables:299924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.173177] lowmem_reserve[]: 0 0 0 0 0 [ 3303.182395] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10944kB [ 3303.216209] Node 0 DMA32: 2642*4kB (UMEH) 1120*8kB (UMEH) 434*16kB (UMEH) 289*32kB (UMEH) 8*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36360kB [ 3303.254390] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3303.285878] Node 1 Normal: 45*4kB (UME) 1742*8kB (UME) 1064*16kB (U) 705*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53700kB [ 3303.323501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3303.369692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3303.406562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3303.415764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3303.446416] 21702 total pagecache pages [ 3303.450464] 0 pages in swap cache [ 3303.453915] Swap cache stats: add 0, delete 0, find 0/0 [ 3303.464032] Free swap = 0kB [ 3303.479022] Total swap = 0kB [ 3303.482054] 2097051 pages RAM [ 3303.485238] 0 pages HighMem/MovableOnly [ 3303.493287] 369648 pages reserved [ 3303.496748] 0 pages cma reserved [ 3303.502890] Out of memory (oom_kill_allocating_task): Kill process 421 (syz-executor.0) score 0 or sacrifice child [ 3303.518576] Killed process 510 (syz-executor.0) total-vm:93516kB, anon-rss:36900kB, file-rss:35084kB, shmem-rss:0kB [ 3303.564755] oom_reaper: reaped process 510 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3303.591927] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3303.618428] systemd-journal cpuset=/ mems_allowed=0-1 [ 3303.623649] CPU: 0 PID: 31734 Comm: systemd-journal Not tainted 4.19.205-syzkaller #0 [ 3303.631616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3303.640983] Call Trace: [ 3303.643580] dump_stack+0x1fc/0x2ef [ 3303.647214] dump_header+0x15d/0xc3f [ 3303.650934] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3303.656026] ? ___ratelimit+0x319/0x590 [ 3303.659987] oom_kill_process.cold+0x10/0x692 [ 3303.664468] ? check_preemption_disabled+0x41/0x280 [ 3303.669479] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3303.674738] out_of_memory+0x1072/0x1390 [ 3303.678903] ? oom_killer_disable+0x270/0x270 [ 3303.683395] ? mutex_trylock+0x15f/0x1a0 [ 3303.687451] __alloc_pages_nodemask+0x23a2/0x2890 [ 3303.692305] ? find_get_entry+0x4cd/0x8a0 [ 3303.696538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3303.701378] alloc_pages_current+0x193/0x2a0 [ 3303.705866] filemap_fault+0x146e/0x2180 [ 3303.710015] ext4_filemap_fault+0x84/0xb0 [ 3303.714153] __do_fault+0x10b/0x4b0 [ 3303.717764] __handle_mm_fault+0x273b/0x41c0 [ 3303.722160] ? vm_insert_page+0x9c0/0x9c0 [ 3303.726299] ? check_preemption_disabled+0x41/0x280 [ 3303.731304] handle_mm_fault+0x436/0xb10 [ 3303.735358] __do_page_fault+0x68e/0xd60 [ 3303.739403] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3303.744422] ? spurious_fault+0x840/0x840 [ 3303.748552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3303.753481] ? page_fault+0x8/0x30 [ 3303.757008] page_fault+0x1e/0x30 [ 3303.760441] RIP: 0033:0x7faa947e92e3 [ 3303.764139] Code: Bad RIP value. [ 3303.767485] RSP: 002b:00007ffddcef9428 EFLAGS: 00010246 [ 3303.772836] RAX: 0000000000000001 RBX: 0000561dde3de1e0 RCX: 00007faa947e92e3 [ 3303.780086] RDX: 0000000000000013 RSI: 00007ffddcef9430 RDI: 000000000000000c [ 3303.787336] RBP: 00007ffddcef9620 R08: 0000000001312d00 R09: 00000374cf89e5d4 [ 3303.794582] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddcef9430 [ 3303.801829] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005cac070a388e4 [ 3303.812082] Mem-Info: [ 3303.814712] active_anon:374019 inactive_anon:863706 isolated_anon:0 [ 3303.814712] active_file:17 inactive_file:19 isolated_file:0 [ 3303.814712] unevictable:45332 dirty:3 writeback:0 unstable:0 [ 3303.814712] slab_reclaimable:22122 slab_unreclaimable:154785 [ 3303.814712] mapped:59087 shmem:15197 pagetables:91247 bounce:0 [ 3303.814712] free:24999 free_pcp:121 free_cma:0 [ 3303.877099] Node 0 active_anon:1239672kB inactive_anon:306964kB active_file:96kB inactive_file:40kB unevictable:171408kB isolated(anon):0kB isolated(file):0kB mapped:234944kB dirty:0kB writeback:0kB shmem:23340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3303.921525] Node 1 active_anon:256404kB inactive_anon:3147864kB active_file:16kB inactive_file:96kB unevictable:9964kB isolated(anon):0kB isolated(file):0kB mapped:1412kB dirty:0kB writeback:0kB shmem:37448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3304.014165] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3304.085111] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3304.104606] Node 0 DMA32 free:36432kB min:35996kB low:44992kB high:53988kB active_anon:1235460kB inactive_anon:306844kB active_file:52kB inactive_file:0kB unevictable:171372kB writepending:0kB present:3129332kB managed:2763456kB mlocked:171372kB kernel_stack:26464kB pagetables:64892kB bounce:0kB free_pcp:480kB local_pcp:480kB free_cma:0kB [ 3304.190214] lowmem_reserve[]: 0 0 1 1 1 [ 3304.200497] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3304.280390] lowmem_reserve[]: 0 0 0 0 0 [ 3304.289461] Node 1 Normal free:53708kB min:53876kB low:67344kB high:80812kB active_anon:256404kB inactive_anon:3147864kB active_file:16kB inactive_file:156kB unevictable:10164kB writepending:0kB present:4194304kB managed:4128248kB mlocked:10164kB kernel_stack:96128kB pagetables:300452kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB [ 3304.349534] lowmem_reserve[]: 0 0 0 0 0 [ 3304.353732] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10944kB [ 3304.449140] Node 0 DMA32: 2658*4kB (UMEH) 1121*8kB (UMEH) 437*16kB (UMEH) 298*32kB (UMEH) 4*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36512kB [ 3304.478816] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3304.490031] Node 1 Normal: 44*4kB (UME) 1810*8kB (UME) 1073*16kB (UM) 701*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54256kB [ 3304.503796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3304.512767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3304.521414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3304.530416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3304.539073] 21822 total pagecache pages [ 3304.543048] 0 pages in swap cache [ 3304.546492] Swap cache stats: add 0, delete 0, find 0/0 [ 3304.551913] Free swap = 0kB [ 3304.554925] Total swap = 0kB [ 3304.575402] 2097051 pages RAM [ 3304.583738] 0 pages HighMem/MovableOnly [ 3304.587824] 369648 pages reserved [ 3304.591267] 0 pages cma reserved [ 3304.594632] Out of memory (oom_kill_allocating_task): Kill process 31734 (systemd-journal) score 0 or sacrifice child [ 3304.605459] Killed process 31734 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:1604kB 05:52:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) 05:52:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xc}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3304.928488] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3304.966535] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3305.058469] nla_parse: 8 callbacks suppressed [ 3305.058477] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3305.111113] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3305.151409] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3305.172083] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3305.211500] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3305.255760] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3305.274164] systemd[1]: Stopped Journal Service. [ 3305.399498] systemd[1]: Starting Journal Service... [ 3305.972609] systemd-journald[554]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 05:52:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xd}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:40 executing program 2: mlockall(0x7) mlockall(0xb) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) accept4$tipc(r0, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x80000) mlockall(0x1) r1 = fork() tkill(r1, 0x1) r2 = fork() sched_getscheduler(r2) syz_open_procfs$userns(r1, &(0x7f0000000040)) [ 3306.192610] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3306.248468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3306.281813] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3306.329163] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3306.543889] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3306.622077] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xe}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3307.598421] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3307.616896] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3307.622041] CPU: 1 PID: 579 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3307.629945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3307.639297] Call Trace: [ 3307.641893] dump_stack+0x1fc/0x2ef [ 3307.645535] dump_header+0x15d/0xc3f [ 3307.649264] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3307.654370] ? ___ratelimit+0x319/0x590 [ 3307.658351] oom_kill_process.cold+0x10/0x692 [ 3307.662850] ? check_preemption_disabled+0x41/0x280 [ 3307.667872] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3307.673244] out_of_memory+0x1072/0x1390 [ 3307.677315] ? oom_killer_disable+0x270/0x270 [ 3307.681813] ? mutex_trylock+0x15f/0x1a0 [ 3307.685880] __alloc_pages_nodemask+0x23a2/0x2890 [ 3307.690743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3307.695589] ? __lock_acquire+0x6de/0x3ff0 [ 3307.699830] ? mark_held_locks+0xf0/0xf0 [ 3307.703908] alloc_pages_vma+0xf2/0x780 [ 3307.707888] do_anonymous_page+0x7c2/0x1be0 [ 3307.712215] ? __pte_alloc+0x340/0x340 [ 3307.716095] ? __put_compound_page+0xc0/0xc0 [ 3307.720488] ? mark_held_locks+0xf0/0xf0 [ 3307.724538] __handle_mm_fault+0x227a/0x41c0 [ 3307.728932] ? vm_insert_page+0x9c0/0x9c0 [ 3307.733091] ? check_preemption_disabled+0x41/0x280 [ 3307.738114] handle_mm_fault+0x436/0xb10 [ 3307.742254] __get_user_pages+0x6f0/0x1710 [ 3307.746478] ? follow_page_mask+0x1d00/0x1d00 [ 3307.750962] ? sockfd_lookup_light+0xc6/0x180 [ 3307.755458] populate_vma_page_range+0x200/0x290 [ 3307.760220] __mm_populate+0x1ea/0x350 [ 3307.764105] ? populate_vma_page_range+0x290/0x290 [ 3307.769034] ? do_mlock+0x6b0/0x6b0 [ 3307.772667] ? security_capable+0x8f/0xc0 [ 3307.776825] __se_sys_mlockall+0x362/0x4e0 [ 3307.781055] do_syscall_64+0xf9/0x620 [ 3307.784842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3307.790025] RIP: 0033:0x4665f9 [ 3307.793210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3307.812106] RSP: 002b:00007f3abfc81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3307.819902] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3307.827177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 3307.834651] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3307.841905] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3307.849160] R13: 00007fff13b6547f R14: 00007f3abfc81300 R15: 0000000000022000 [ 3307.947075] Mem-Info: [ 3307.949550] active_anon:374121 inactive_anon:865788 isolated_anon:0 [ 3307.949550] active_file:41 inactive_file:69 isolated_file:0 [ 3307.949550] unevictable:44222 dirty:6 writeback:0 unstable:0 [ 3307.949550] slab_reclaimable:22100 slab_unreclaimable:153625 [ 3307.949550] mapped:59031 shmem:17245 pagetables:91256 bounce:0 [ 3307.949550] free:25184 free_pcp:50 free_cma:0 [ 3307.983539] Node 0 active_anon:1240172kB inactive_anon:315208kB active_file:44kB inactive_file:32kB unevictable:157704kB isolated(anon):0kB isolated(file):0kB mapped:233704kB dirty:8kB writeback:0kB shmem:31528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3308.049104] Node 1 active_anon:256312kB inactive_anon:3147944kB active_file:12kB inactive_file:20kB unevictable:19184kB isolated(anon):0kB isolated(file):0kB mapped:2320kB dirty:16kB writeback:0kB shmem:37452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3308.105082] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.136125] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3308.141436] Node 0 DMA32 free:35660kB min:35996kB low:44992kB high:53988kB active_anon:1235960kB inactive_anon:315068kB active_file:52kB inactive_file:56kB unevictable:157704kB writepending:8kB present:3129332kB managed:2763456kB mlocked:157704kB kernel_stack:26592kB pagetables:65100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.173297] lowmem_reserve[]: 0 0 1 1 1 [ 3308.177374] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.214005] lowmem_reserve[]: 0 0 0 0 0 [ 3308.218068] Node 1 Normal free:53784kB min:53876kB low:67344kB high:80812kB active_anon:256312kB inactive_anon:3147944kB active_file:12kB inactive_file:0kB unevictable:19184kB writepending:16kB present:4194304kB managed:4128248kB mlocked:19184kB kernel_stack:96000kB pagetables:299764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.253937] lowmem_reserve[]: 0 0 0 0 0 [ 3308.258024] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10944kB [ 3308.273847] Node 0 DMA32: 2665*4kB (UMEH) 650*8kB (UMEH) 190*16kB (UMEH) 348*32kB (UMEH) 48*64kB (UM) 19*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36308kB [ 3308.289488] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3308.301401] Node 1 Normal: 45*4kB (U) 1570*8kB (UM) 1251*16kB (U) 685*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54676kB [ 3308.314843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.325405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.336857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.345868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.354663] 23772 total pagecache pages [ 3308.362938] 0 pages in swap cache [ 3308.366396] Swap cache stats: add 0, delete 0, find 0/0 [ 3308.371782] Free swap = 0kB [ 3308.374789] Total swap = 0kB [ 3308.377869] 2097051 pages RAM [ 3308.380973] 0 pages HighMem/MovableOnly [ 3308.384933] 369648 pages reserved [ 3308.388421] 0 pages cma reserved [ 3308.391778] Out of memory (oom_kill_allocating_task): Kill process 579 (syz-executor.2) score 0 or sacrifice child [ 3308.402352] Killed process 572 (syz-executor.2) total-vm:93384kB, anon-rss:23784kB, file-rss:39296kB, shmem-rss:0kB [ 3308.415838] oom_reaper: reaped process 572 (syz-executor.2), now anon-rss:23832kB, file-rss:40192kB, shmem-rss:0kB [ 3308.904433] systemd[1]: Started Journal Service. 05:52:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\'\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x14}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:44 executing program 2: mlockall(0x186aed509506fbd0) mlockall(0x3) mlockall(0x4) pipe2$9p(&(0x7f0000000040), 0x0) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:52:44 executing program 0: mlockall(0x3) mlockall(0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r5, 0x731}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x40810) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008045}, 0x4014) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x11) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0x9, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffff5e, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4803}, 0x880) fork() syz_open_procfs$userns(0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0xffffffffffffffc2) 05:52:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:44 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3310.074445] nla_parse: 11 callbacks suppressed [ 3310.074456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:44 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3310.148264] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3310.202879] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3311.676897] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3311.718085] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3311.771770] CPU: 0 PID: 8141 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3311.779606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3311.789043] Call Trace: [ 3311.791662] dump_stack+0x1fc/0x2ef [ 3311.795298] dump_header+0x15d/0xc3f [ 3311.799015] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3311.804114] ? ___ratelimit+0x319/0x590 [ 3311.808096] oom_kill_process.cold+0x10/0x692 [ 3311.812590] ? check_preemption_disabled+0x41/0x280 [ 3311.817609] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3311.822897] out_of_memory+0x1072/0x1390 [ 3311.826962] ? oom_killer_disable+0x270/0x270 [ 3311.831456] ? mutex_trylock+0x15f/0x1a0 [ 3311.835544] __alloc_pages_nodemask+0x23a2/0x2890 [ 3311.840388] ? find_get_entry+0x4cd/0x8a0 [ 3311.844544] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3311.849407] alloc_pages_current+0x193/0x2a0 [ 3311.853813] filemap_fault+0x146e/0x2180 [ 3311.857886] ext4_filemap_fault+0x84/0xb0 [ 3311.862033] __do_fault+0x10b/0x4b0 [ 3311.865753] __handle_mm_fault+0x273b/0x41c0 [ 3311.870157] ? debug_object_free+0x1cc/0x380 [ 3311.874560] ? vm_insert_page+0x9c0/0x9c0 [ 3311.878896] ? check_preemption_disabled+0x41/0x280 [ 3311.883916] handle_mm_fault+0x436/0xb10 [ 3311.887981] __do_page_fault+0x68e/0xd60 [ 3311.892043] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3311.897056] ? spurious_fault+0x840/0x840 [ 3311.901199] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3311.906039] ? page_fault+0x8/0x30 [ 3311.909578] page_fault+0x1e/0x30 [ 3311.913023] RIP: 0033:0x413397 [ 3311.916209] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 d8 00 00 00 48 8b 05 34 20 09 01 48 69 8c 24 d0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 d1 1f [ 3311.935107] RSP: 002b:00007fff13b656d0 EFLAGS: 00010212 [ 3311.940464] RAX: 0000001b30820000 RBX: 0000000000004dce RCX: 0000000000328598 [ 3311.947728] RDX: 00000000003288f4 RSI: 00007fff13b657a0 RDI: 00007fff13b6568c [ 3311.954988] RBP: 00007fff13b6573c R08: 00007fff13bb0000 R09: 00000377953cc218 [ 3311.962247] R10: 0019a3b8438a3d26 R11: 0000000000000001 R12: 0000000000000032 [ 3311.969510] R13: 00000000003286f9 R14: 0000000000000003 R15: 00007fff13b657a0 [ 3312.769075] Mem-Info: [ 3312.771554] active_anon:373993 inactive_anon:872793 isolated_anon:0 [ 3312.771554] active_file:7 inactive_file:17 isolated_file:0 [ 3312.771554] unevictable:36367 dirty:0 writeback:0 unstable:0 [ 3312.771554] slab_reclaimable:22061 slab_unreclaimable:154388 [ 3312.771554] mapped:58001 shmem:17245 pagetables:91163 bounce:0 [ 3312.771554] free:25756 free_pcp:151 free_cma:0 [ 3312.856460] Node 0 active_anon:1239656kB inactive_anon:331784kB active_file:252kB inactive_file:288kB unevictable:133540kB isolated(anon):0kB isolated(file):36kB mapped:230552kB dirty:0kB writeback:0kB shmem:31532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3312.916430] Node 1 active_anon:256316kB inactive_anon:3159388kB active_file:56kB inactive_file:76kB unevictable:11932kB isolated(anon):0kB isolated(file):64kB mapped:1968kB dirty:0kB writeback:0kB shmem:37448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3313.006416] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3313.056391] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3313.061442] Node 0 DMA32 free:35708kB min:35996kB low:44992kB high:53988kB active_anon:1235444kB inactive_anon:331644kB active_file:288kB inactive_file:320kB unevictable:133480kB writepending:0kB present:3129332kB managed:2763456kB mlocked:133480kB kernel_stack:26528kB pagetables:64800kB bounce:0kB free_pcp:948kB local_pcp:700kB free_cma:0kB [ 3313.136384] lowmem_reserve[]: 0 0 1 1 1 [ 3313.140407] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3313.174136] lowmem_reserve[]: 0 0 0 0 0 [ 3313.182612] Node 1 Normal free:53780kB min:53876kB low:67344kB high:80812kB active_anon:256316kB inactive_anon:3159388kB active_file:192kB inactive_file:228kB unevictable:11932kB writepending:0kB present:4194304kB managed:4128248kB mlocked:11932kB kernel_stack:95872kB pagetables:299692kB bounce:0kB free_pcp:1696kB local_pcp:360kB free_cma:0kB [ 3313.218192] lowmem_reserve[]: 0 0 0 0 0 [ 3313.222281] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10944kB [ 3313.306384] Node 0 DMA32: 2795*4kB (UE) 931*8kB (UE) 83*16kB (UE) 34*32kB (UME) 114*64kB (UM) 37*128kB (UM) 9*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35892kB [ 3313.327946] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3313.344920] Node 1 Normal: 0*4kB 400*8kB (U) 1745*16kB (U) 706*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53712kB [ 3313.362107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.386399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.395006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.427116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.435727] 23274 total pagecache pages [ 3313.456410] 0 pages in swap cache [ 3313.459891] Swap cache stats: add 0, delete 0, find 0/0 [ 3313.491852] Free swap = 0kB [ 3313.494893] Total swap = 0kB [ 3313.497981] 2097051 pages RAM [ 3313.501079] 0 pages HighMem/MovableOnly [ 3313.505044] 369648 pages reserved [ 3313.530713] 0 pages cma reserved [ 3313.534132] Out of memory (oom_kill_allocating_task): Kill process 8141 (syz-executor.2) score 0 or sacrifice child [ 3313.559043] Killed process 31104 (syz-executor.2) total-vm:93648kB, anon-rss:37028kB, file-rss:35060kB, shmem-rss:0kB [ 3313.619844] oom_reaper: reaped process 31104 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:52:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='1\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:49 executing program 2: mlockall(0x7) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000100)) mlockall(0x3) mlockall(0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x15, 0x0, 0x0) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0xf83a440189a77857, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r3) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0)=0x800, 0x4) 05:52:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:49 executing program 0: r0 = fork() sched_getscheduler(r0) fork() r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r1, &(0x7f0000000080)) mlockall(0x3) r2 = fork() sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) syz_open_procfs$userns(0x0, 0x0) 05:52:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x2}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:49 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3314.993888] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3315.031608] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3315.043997] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3315.055551] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3315.218673] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3315.269319] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3315.282934] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x3}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3315.324961] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3315.488452] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3315.553600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3315.582254] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3315.631317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3316.354031] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3316.373275] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3316.395728] CPU: 1 PID: 715 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3316.403528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3316.412891] Call Trace: [ 3316.415502] dump_stack+0x1fc/0x2ef [ 3316.419143] dump_header+0x15d/0xc3f [ 3316.422862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3316.427962] ? ___ratelimit+0x319/0x590 [ 3316.431940] oom_kill_process.cold+0x10/0x692 [ 3316.436440] ? check_preemption_disabled+0x41/0x280 [ 3316.441554] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3316.446832] out_of_memory+0x1072/0x1390 [ 3316.450985] ? oom_killer_disable+0x270/0x270 [ 3316.455478] ? mutex_trylock+0x15f/0x1a0 [ 3316.459542] __alloc_pages_nodemask+0x23a2/0x2890 [ 3316.464663] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3316.469527] ? __lock_acquire+0x6de/0x3ff0 [ 3316.473768] ? mark_held_locks+0xf0/0xf0 [ 3316.477840] alloc_pages_vma+0xf2/0x780 [ 3316.481819] do_anonymous_page+0x7c2/0x1be0 [ 3316.486145] ? __pte_alloc+0x340/0x340 [ 3316.490046] ? __put_compound_page+0xc0/0xc0 [ 3316.494454] ? mark_held_locks+0xf0/0xf0 [ 3316.498607] __handle_mm_fault+0x227a/0x41c0 [ 3316.503027] ? vm_insert_page+0x9c0/0x9c0 [ 3316.507193] ? check_preemption_disabled+0x41/0x280 [ 3316.512212] handle_mm_fault+0x436/0xb10 [ 3316.516282] __get_user_pages+0x6f0/0x1710 [ 3316.520529] ? follow_page_mask+0x1d00/0x1d00 [ 3316.525023] ? rwsem_wake+0x1d7/0x2b0 [ 3316.528820] ? rwsem_optimistic_spin+0x480/0x480 [ 3316.533584] populate_vma_page_range+0x200/0x290 [ 3316.538347] __mm_populate+0x1ea/0x350 [ 3316.542342] ? populate_vma_page_range+0x290/0x290 [ 3316.547272] ? do_mlock+0x6b0/0x6b0 [ 3316.550901] ? security_capable+0x8f/0xc0 [ 3316.555140] __se_sys_mlockall+0x362/0x4e0 [ 3316.559382] do_syscall_64+0xf9/0x620 [ 3316.563188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3316.568372] RIP: 0033:0x4665f9 [ 3316.571572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3316.590477] RSP: 002b:00007f3abfc81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3316.598192] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3316.605466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3316.612731] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3316.620000] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3316.627269] R13: 00007fff13b6547f R14: 00007f3abfc81300 R15: 0000000000022000 [ 3316.773323] Mem-Info: [ 3316.779677] active_anon:374049 inactive_anon:865734 isolated_anon:0 [ 3316.779677] active_file:885 inactive_file:846 isolated_file:20 [ 3316.779677] unevictable:35419 dirty:11 writeback:14 unstable:0 [ 3316.779677] slab_reclaimable:21977 slab_unreclaimable:157955 [ 3316.779677] mapped:59321 shmem:17245 pagetables:91189 bounce:0 [ 3316.779677] free:27471 free_pcp:764 free_cma:0 [ 3316.830998] Node 0 active_anon:1239876kB inactive_anon:320820kB active_file:1564kB inactive_file:1508kB unevictable:110884kB isolated(anon):0kB isolated(file):80kB mapped:229392kB dirty:20kB writeback:92kB shmem:31520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3316.914771] Node 1 active_anon:256420kB inactive_anon:3142168kB active_file:12kB inactive_file:8kB unevictable:30760kB isolated(anon):0kB isolated(file):0kB mapped:5416kB dirty:4kB writeback:0kB shmem:37460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3316.950803] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3316.982961] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3316.989538] Node 0 DMA32 free:45724kB min:35996kB low:44992kB high:53988kB active_anon:1235756kB inactive_anon:320620kB active_file:1684kB inactive_file:1516kB unevictable:110852kB writepending:0kB present:3129332kB managed:2763456kB mlocked:110852kB kernel_stack:26624kB pagetables:65256kB bounce:0kB free_pcp:2928kB local_pcp:1492kB free_cma:0kB [ 3317.046582] lowmem_reserve[]: 0 0 1 1 1 [ 3317.051319] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3317.083306] lowmem_reserve[]: 0 0 0 0 0 [ 3317.087637] Node 1 Normal free:55732kB min:53876kB low:67344kB high:80812kB active_anon:256420kB inactive_anon:3142168kB active_file:12kB inactive_file:8kB unevictable:30760kB writepending:4kB present:4194304kB managed:4128248kB mlocked:30760kB kernel_stack:95968kB pagetables:300044kB bounce:0kB free_pcp:1484kB local_pcp:4kB free_cma:0kB [ 3317.123314] lowmem_reserve[]: 0 0 0 0 0 [ 3317.127578] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10944kB [ 3317.149032] Node 0 DMA32: 3374*4kB (UME) 975*8kB (UME) 550*16kB (UME) 289*32kB (ME) 80*64kB (M) 16*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46512kB [ 3317.165446] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3317.177453] Node 1 Normal: 55*4kB (UM) 120*8kB (UM) 1970*16kB (U) 720*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55740kB [ 3317.191682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3317.201396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3317.210863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3317.220592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3317.230125] 22944 total pagecache pages [ 3317.234834] 0 pages in swap cache [ 3317.239096] Swap cache stats: add 0, delete 0, find 0/0 [ 3317.245160] Free swap = 0kB [ 3317.249155] Total swap = 0kB [ 3317.252675] 2097051 pages RAM [ 3317.256592] 0 pages HighMem/MovableOnly [ 3317.261366] 369648 pages reserved [ 3317.265401] 0 pages cma reserved [ 3317.269513] Out of memory (oom_kill_allocating_task): Kill process 715 (syz-executor.2) score 0 or sacrifice child [ 3317.281363] Killed process 810 (syz-executor.2) total-vm:93516kB, anon-rss:28356kB, file-rss:35084kB, shmem-rss:0kB 05:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:53 executing program 2: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:52:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:53 executing program 0: mlockall(0x3) r0 = fork() pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)) syz_open_procfs$userns(0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x40000000000000, 0x82000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffa}, [@jmp={0x5, 0x0, 0xa, 0x5, 0xb, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ldst={0x1, 0x0, 0x6, 0x2, 0x8, 0x0, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x72, 0x6e, &(0x7f0000000100)=""/110, 0x40f00, 0x17, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x4, 0x8, 0xbec}, 0x10, 0xffffffffffffffff}, 0x78) sched_getscheduler(r0) 05:52:53 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3318.660317] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3318.676356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:53 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:53 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0xf}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3319.628323] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3319.641803] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3319.667601] CPU: 1 PID: 845 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3319.675326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3319.684817] Call Trace: [ 3319.687409] dump_stack+0x1fc/0x2ef [ 3319.691047] dump_header+0x15d/0xc3f [ 3319.694796] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3319.699895] ? ___ratelimit+0x319/0x590 [ 3319.703870] oom_kill_process.cold+0x10/0x692 [ 3319.708540] ? check_preemption_disabled+0x41/0x280 [ 3319.713549] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3319.718830] out_of_memory+0x1072/0x1390 [ 3319.722899] ? oom_killer_disable+0x270/0x270 [ 3319.727400] ? mutex_trylock+0x15f/0x1a0 [ 3319.731459] __alloc_pages_nodemask+0x23a2/0x2890 [ 3319.736317] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3319.741240] ? __lock_acquire+0x6de/0x3ff0 [ 3319.745461] ? mark_held_locks+0xf0/0xf0 [ 3319.749533] alloc_pages_vma+0xf2/0x780 [ 3319.753523] do_anonymous_page+0x7c2/0x1be0 [ 3319.757861] ? __pte_alloc+0x340/0x340 [ 3319.761744] ? __put_compound_page+0xc0/0xc0 [ 3319.766138] ? mark_held_locks+0xf0/0xf0 [ 3319.770204] __handle_mm_fault+0x227a/0x41c0 [ 3319.774686] ? vm_insert_page+0x9c0/0x9c0 [ 3319.778843] ? sync_mm_rss+0x97/0x1a0 [ 3319.782648] handle_mm_fault+0x436/0xb10 [ 3319.786726] __get_user_pages+0x6f0/0x1710 [ 3319.790961] ? follow_page_mask+0x1d00/0x1d00 [ 3319.795457] populate_vma_page_range+0x200/0x290 [ 3319.800214] __mm_populate+0x1ea/0x350 [ 3319.804085] ? populate_vma_page_range+0x290/0x290 [ 3319.809007] ? do_mlock+0x6b0/0x6b0 [ 3319.812642] ? security_capable+0x8f/0xc0 [ 3319.816818] __se_sys_mlockall+0x362/0x4e0 [ 3319.821079] do_syscall_64+0xf9/0x620 [ 3319.824875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3319.830043] RIP: 0033:0x4665f9 [ 3319.833302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3319.852185] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3319.859881] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3319.867140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3319.874403] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3319.881670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3319.888932] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3319.907483] Mem-Info: [ 3319.910167] active_anon:374088 inactive_anon:865704 isolated_anon:0 [ 3319.910167] active_file:13 inactive_file:11 isolated_file:0 [ 3319.910167] unevictable:37079 dirty:0 writeback:0 unstable:0 [ 3319.910167] slab_reclaimable:21785 slab_unreclaimable:161308 [ 3319.910167] mapped:54969 shmem:17245 pagetables:91383 bounce:0 [ 3319.910167] free:24969 free_pcp:227 free_cma:0 [ 3319.949425] Node 0 active_anon:1240028kB inactive_anon:320700kB active_file:36kB inactive_file:40kB unevictable:117536kB isolated(anon):0kB isolated(file):0kB mapped:216944kB dirty:0kB writeback:0kB shmem:31520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3319.989648] Node 1 active_anon:256324kB inactive_anon:3142116kB active_file:16kB inactive_file:4kB unevictable:30780kB isolated(anon):0kB isolated(file):0kB mapped:2932kB dirty:0kB writeback:0kB shmem:37460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.024224] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.055926] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3320.060979] Node 0 DMA32 free:35252kB min:35996kB low:44992kB high:53988kB active_anon:1235816kB inactive_anon:320560kB active_file:36kB inactive_file:40kB unevictable:117536kB writepending:0kB present:3129332kB managed:2763456kB mlocked:117536kB kernel_stack:26560kB pagetables:65084kB bounce:0kB free_pcp:392kB local_pcp:304kB free_cma:0kB [ 3320.095440] lowmem_reserve[]: 0 0 1 1 1 [ 3320.099536] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.131951] lowmem_reserve[]: 0 0 0 0 0 [ 3320.136015] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:256324kB inactive_anon:3142116kB active_file:16kB inactive_file:4kB unevictable:30780kB writepending:0kB present:4194304kB managed:4128248kB mlocked:30780kB kernel_stack:96160kB pagetables:300288kB bounce:0kB free_pcp:516kB local_pcp:20kB free_cma:0kB [ 3320.171197] lowmem_reserve[]: 0 0 0 0 0 [ 3320.175208] Node 0 DMA: 14*4kB (UME) 2*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 3320.199073] Node 0 DMA32: 3445*4kB (UE) 716*8kB (UME) 352*16kB (UME) 212*32kB (UME) 52*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35252kB [ 3320.220695] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3320.241549] Node 1 Normal: 1*4kB (M) 12*8kB (U) 1906*16kB (U) 721*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53668kB [ 3320.254604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3320.271674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3320.280362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3320.295715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3320.305977] 19648 total pagecache pages [ 3320.309980] 0 pages in swap cache [ 3320.313425] Swap cache stats: add 0, delete 0, find 0/0 [ 3320.329306] Free swap = 0kB [ 3320.332340] Total swap = 0kB [ 3320.335379] 2097051 pages RAM [ 3320.338524] 0 pages HighMem/MovableOnly [ 3320.342493] 369648 pages reserved [ 3320.354056] 0 pages cma reserved [ 3320.357485] Out of memory (oom_kill_allocating_task): Kill process 845 (syz-executor.0) score 0 or sacrifice child [ 3320.380650] Killed process 856 (syz-executor.0) total-vm:93384kB, anon-rss:248kB, file-rss:35000kB, shmem-rss:0kB [ 3320.405347] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3320.424242] systemd-journal cpuset=/ mems_allowed=0-1 [ 3320.431760] CPU: 1 PID: 554 Comm: systemd-journal Not tainted 4.19.205-syzkaller #0 [ 3320.439590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3320.448938] Call Trace: [ 3320.451533] dump_stack+0x1fc/0x2ef [ 3320.455167] dump_header+0x15d/0xc3f [ 3320.458999] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3320.464102] ? ___ratelimit+0x319/0x590 [ 3320.468171] oom_kill_process.cold+0x10/0x692 [ 3320.472698] ? check_preemption_disabled+0x41/0x280 [ 3320.477719] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3320.482997] out_of_memory+0x1072/0x1390 [ 3320.487069] ? oom_killer_disable+0x270/0x270 [ 3320.491560] ? mutex_trylock+0x15f/0x1a0 [ 3320.495629] __alloc_pages_nodemask+0x23a2/0x2890 [ 3320.500479] ? find_get_entry+0x4cd/0x8a0 [ 3320.504637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3320.509504] alloc_pages_current+0x193/0x2a0 [ 3320.513911] filemap_fault+0x146e/0x2180 [ 3320.517981] ext4_filemap_fault+0x84/0xb0 [ 3320.522130] __do_fault+0x10b/0x4b0 [ 3320.525782] __handle_mm_fault+0x273b/0x41c0 [ 3320.530195] ? vm_insert_page+0x9c0/0x9c0 [ 3320.534345] ? check_preemption_disabled+0x41/0x280 [ 3320.539361] handle_mm_fault+0x436/0xb10 [ 3320.543610] __do_page_fault+0x68e/0xd60 [ 3320.547680] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3320.552691] ? spurious_fault+0x840/0x840 [ 3320.556832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3320.561677] ? page_fault+0x8/0x30 [ 3320.565214] page_fault+0x1e/0x30 [ 3320.568666] RIP: 0033:0x7f28aafcf2e3 [ 3320.572373] Code: Bad RIP value. [ 3320.575726] RSP: 002b:00007ffe46d28c68 EFLAGS: 00010246 [ 3320.581082] RAX: 0000000000000001 RBX: 000055de1aafe1e0 RCX: 00007f28aafcf2e3 [ 3320.588348] RDX: 0000000000000013 RSI: 00007ffe46d28c70 RDI: 000000000000000c [ 3320.595619] RBP: 00007ffe46d28e60 R08: 0000000001312d00 R09: 00000379a140123f [ 3320.602903] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe46d28c70 [ 3320.610170] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005cac071b6316f [ 3320.628613] Mem-Info: [ 3320.632838] active_anon:374088 inactive_anon:865704 isolated_anon:0 [ 3320.632838] active_file:13 inactive_file:11 isolated_file:0 [ 3320.632838] unevictable:37079 dirty:0 writeback:0 unstable:0 [ 3320.632838] slab_reclaimable:21785 slab_unreclaimable:161308 [ 3320.632838] mapped:54969 shmem:17245 pagetables:91383 bounce:0 [ 3320.632838] free:24906 free_pcp:330 free_cma:0 [ 3320.674957] Node 0 active_anon:1240028kB inactive_anon:320700kB active_file:36kB inactive_file:40kB unevictable:117536kB isolated(anon):0kB isolated(file):0kB mapped:216944kB dirty:0kB writeback:0kB shmem:31520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.711804] Node 1 active_anon:256324kB inactive_anon:3142116kB active_file:16kB inactive_file:4kB unevictable:30780kB isolated(anon):0kB isolated(file):0kB mapped:2932kB dirty:0kB writeback:0kB shmem:37460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.749369] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.784931] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3320.790026] Node 0 DMA32 free:35000kB min:35996kB low:44992kB high:53988kB active_anon:1235816kB inactive_anon:320560kB active_file:36kB inactive_file:40kB unevictable:117536kB writepending:0kB present:3129332kB managed:2763456kB mlocked:117536kB kernel_stack:26560kB pagetables:65084kB bounce:0kB free_pcp:632kB local_pcp:292kB free_cma:0kB [ 3320.824343] lowmem_reserve[]: 0 0 1 1 1 [ 3320.828396] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.859971] lowmem_reserve[]: 0 0 0 0 0 [ 3320.863978] Node 1 Normal free:53700kB min:53876kB low:67344kB high:80812kB active_anon:256296kB inactive_anon:3142108kB active_file:4kB inactive_file:16kB unevictable:30780kB writepending:0kB present:4194304kB managed:4128248kB mlocked:30780kB kernel_stack:96128kB pagetables:300192kB bounce:0kB free_pcp:692kB local_pcp:80kB free_cma:0kB [ 3320.898202] lowmem_reserve[]: 0 0 0 0 0 [ 3320.902208] Node 0 DMA: 14*4kB (UME) 2*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 3320.922870] Node 0 DMA32: 3382*4kB (UE) 717*8kB (UME) 352*16kB (UME) 213*32kB (UME) 52*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35040kB [ 3320.943052] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3320.963571] Node 1 Normal: 1*4kB (M) 21*8kB (U) 1906*16kB (U) 722*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53772kB [ 3320.989960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.000068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.014644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.031813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.041875] 19648 total pagecache pages [ 3321.053534] 0 pages in swap cache [ 3321.057060] Swap cache stats: add 0, delete 0, find 0/0 [ 3321.062503] Free swap = 0kB [ 3321.065510] Total swap = 0kB [ 3321.073486] 2097051 pages RAM [ 3321.077568] 0 pages HighMem/MovableOnly [ 3321.081559] 369648 pages reserved [ 3321.085004] 0 pages cma reserved [ 3321.090284] Out of memory (oom_kill_allocating_task): Kill process 554 (systemd-journal) score 0 or sacrifice child [ 3321.105825] Killed process 554 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1452kB [ 3321.122400] oom_reaper: reaped process 554 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1460kB [ 3321.409233] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3321.463965] in:imklog cpuset=/ mems_allowed=0-1 [ 3321.488424] CPU: 1 PID: 7831 Comm: in:imklog Not tainted 4.19.205-syzkaller #0 [ 3321.495801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3321.505145] Call Trace: [ 3321.507734] dump_stack+0x1fc/0x2ef [ 3321.511365] dump_header+0x15d/0xc3f [ 3321.515080] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3321.520180] ? ___ratelimit+0x319/0x590 [ 3321.524157] oom_kill_process.cold+0x10/0x692 [ 3321.528652] ? check_preemption_disabled+0x41/0x280 [ 3321.533673] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3321.539042] out_of_memory+0x1072/0x1390 [ 3321.543115] ? oom_killer_disable+0x270/0x270 [ 3321.547611] ? mutex_trylock+0x15f/0x1a0 [ 3321.551723] __alloc_pages_nodemask+0x23a2/0x2890 [ 3321.556574] ? find_get_entry+0x4cd/0x8a0 [ 3321.560730] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3321.565596] alloc_pages_current+0x193/0x2a0 [ 3321.570003] filemap_fault+0x146e/0x2180 [ 3321.574076] ext4_filemap_fault+0x84/0xb0 [ 3321.578226] __do_fault+0x10b/0x4b0 [ 3321.581854] __handle_mm_fault+0x273b/0x41c0 [ 3321.586264] ? vm_insert_page+0x9c0/0x9c0 [ 3321.590409] ? lock_downgrade+0x720/0x720 [ 3321.594566] ? check_preemption_disabled+0x41/0x280 [ 3321.599590] handle_mm_fault+0x436/0xb10 [ 3321.603673] __do_page_fault+0x68e/0xd60 [ 3321.608258] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3321.613275] ? spurious_fault+0x840/0x840 [ 3321.617425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3321.622269] ? page_fault+0x8/0x30 [ 3321.625817] page_fault+0x1e/0x30 [ 3321.629267] RIP: 0033:0x7f108576d22d [ 3321.632975] Code: Bad RIP value. [ 3321.636333] RSP: 002b:00007f1083109580 EFLAGS: 00010293 [ 3321.641689] RAX: 00000000000000d1 RBX: 0000000000000000 RCX: 00007f108576d22d [ 3321.648951] RDX: 0000000000001fa0 RSI: 00007f1083109da0 RDI: 0000000000000004 [ 3321.656213] RBP: 000055fccde939d0 R08: 0000000000000000 R09: 0000000000000000 [ 3321.663479] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f1083109da0 [ 3321.670744] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f1083109e03 [ 3321.822346] Mem-Info: [ 3321.825474] active_anon:373984 inactive_anon:869392 isolated_anon:0 [ 3321.825474] active_file:183 inactive_file:228 isolated_file:17 [ 3321.825474] unevictable:32480 dirty:0 writeback:0 unstable:0 [ 3321.825474] slab_reclaimable:21779 slab_unreclaimable:161283 [ 3321.825474] mapped:53904 shmem:17245 pagetables:91322 bounce:0 [ 3321.825474] free:25599 free_pcp:345 free_cma:0 [ 3321.869793] Node 0 active_anon:1239852kB inactive_anon:331748kB active_file:760kB inactive_file:1232kB unevictable:102344kB isolated(anon):0kB isolated(file):68kB mapped:211724kB dirty:0kB writeback:0kB shmem:31520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3321.976161] Node 1 active_anon:256060kB inactive_anon:3142048kB active_file:4kB inactive_file:20kB unevictable:16136kB isolated(anon):0kB isolated(file):0kB mapped:2932kB dirty:0kB writeback:0kB shmem:37460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3322.005455] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3322.075649] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3322.080722] Node 0 DMA32 free:44264kB min:35996kB low:44992kB high:53988kB active_anon:1235568kB inactive_anon:320956kB active_file:984kB inactive_file:4152kB unevictable:102340kB writepending:0kB present:3129332kB managed:2763456kB mlocked:102424kB kernel_stack:26496kB pagetables:65024kB bounce:0kB free_pcp:1456kB local_pcp:1444kB free_cma:0kB [ 3322.160668] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3322.190945] lowmem_reserve[]: 0 0 1 1 1 [ 3322.194960] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3322.202272] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3322.255710] lowmem_reserve[]: 0 0 0 0 0 [ 3322.259727] Node 1 Normal free:67012kB min:53876kB low:67344kB high:80812kB active_anon:256060kB inactive_anon:3142288kB active_file:508kB inactive_file:968kB unevictable:16076kB writepending:0kB present:4194304kB managed:4128248kB mlocked:16196kB kernel_stack:95968kB pagetables:300072kB bounce:0kB free_pcp:2036kB local_pcp:1136kB free_cma:0kB [ 3322.360693] lowmem_reserve[]: 0 0 0 0 0 [ 3322.364898] Node 0 DMA: 14*4kB (UME) 2*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 3322.383232] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3322.407698] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3322.418233] Node 0 DMA32: 3092*4kB (UME) 789*8kB (UME) 478*16kB (UME) 221*32kB (UME) 56*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36984kB [ 3322.425667] systemd[1]: Stopped Journal Service. [ 3322.458362] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3322.487817] Node 1 Normal: 167*4kB (UME) 522*8kB (UME) 2083*16kB (UM) 770*32kB (UM) 51*64kB (M) 13*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67740kB [ 3322.509865] systemd[1]: Starting Journal Service... [ 3322.558063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3322.579343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3322.598093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3322.627691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3322.648050] 20854 total pagecache pages [ 3322.652137] 0 pages in swap cache [ 3322.668100] Swap cache stats: add 0, delete 0, find 0/0 [ 3322.673565] Free swap = 0kB [ 3322.707103] Total swap = 0kB [ 3322.716467] 2097051 pages RAM [ 3322.719589] 0 pages HighMem/MovableOnly [ 3322.723551] 369648 pages reserved [ 3322.746270] 0 pages cma reserved [ 3322.749657] Out of memory (oom_kill_allocating_task): Kill process 7831 (in:imklog) score 0 or sacrifice child [ 3322.762036] Killed process 7819 (rsyslogd) total-vm:254332kB, anon-rss:1384kB, file-rss:0kB, shmem-rss:0kB [ 3322.776229] oom_reaper: reaped process 7819 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3322.789155] systemd-journald[901]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3322.826047] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 3322.868849] systemd[1]: rsyslog.service: Unit entered failed state. [ 3322.896543] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 3323.184881] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. 05:52:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) 05:52:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:58 executing program 2: mlockall(0x7) mlockall(0x3) fork() r0 = fork() r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r0, &(0x7f0000000040)) 05:52:58 executing program 0: mlockall(0x3) r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = fork() pipe2$9p(&(0x7f0000000140), 0x80800) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) sched_rr_get_interval(r1, &(0x7f0000000100)) [ 3323.577934] nla_parse: 10 callbacks suppressed [ 3323.577943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3323.665394] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3323.688487] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) [ 3323.745030] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.1'. 05:52:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='1\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:52:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0x2}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:52:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:52:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) [ 3323.952392] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3324.025337] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3324.059241] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3324.104192] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.4'. 05:52:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 05:52:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3324.391476] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3324.459804] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3325.680525] systemd-cgroups invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3325.698799] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 3325.704025] CPU: 1 PID: 965 Comm: systemd-cgroups Not tainted 4.19.205-syzkaller #0 [ 3325.711811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3325.721157] Call Trace: [ 3325.723749] dump_stack+0x1fc/0x2ef [ 3325.727383] dump_header+0x15d/0xc3f [ 3325.731096] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3325.736196] ? ___ratelimit+0x319/0x590 [ 3325.740181] oom_kill_process.cold+0x10/0x692 [ 3325.744680] ? check_preemption_disabled+0x41/0x280 [ 3325.749701] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3325.754983] out_of_memory+0x1072/0x1390 [ 3325.759050] ? oom_killer_disable+0x270/0x270 [ 3325.763549] ? mutex_trylock+0x15f/0x1a0 [ 3325.767613] __alloc_pages_nodemask+0x23a2/0x2890 [ 3325.772461] ? find_get_entry+0x4cd/0x8a0 [ 3325.776616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3325.781483] alloc_pages_current+0x193/0x2a0 [ 3325.785890] filemap_fault+0x146e/0x2180 [ 3325.789973] ext4_filemap_fault+0x84/0xb0 [ 3325.794121] __do_fault+0x10b/0x4b0 [ 3325.797751] __handle_mm_fault+0x273b/0x41c0 [ 3325.802160] ? vm_insert_page+0x9c0/0x9c0 [ 3325.806325] ? check_preemption_disabled+0x41/0x280 [ 3325.811346] handle_mm_fault+0x436/0xb10 [ 3325.815417] __do_page_fault+0x68e/0xd60 [ 3325.819486] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3325.824499] ? spurious_fault+0x840/0x840 [ 3325.828643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3325.833485] ? page_fault+0x8/0x30 [ 3325.837104] page_fault+0x1e/0x30 [ 3325.840553] RIP: 0033:0x7fee1f489415 [ 3325.844263] Code: Bad RIP value. [ 3325.847662] RSP: 002b:00007ffeab110d40 EFLAGS: 00010202 [ 3325.853025] RAX: 00007fee1eca52c8 RBX: 00007fee1f6a19e8 RCX: 00000000000000d6 [ 3325.860288] RDX: 00000000000003f3 RSI: 00007fee1f6a1990 RDI: 000000000d827590 [ 3325.867549] RBP: 0000000000000003 R08: 000000000000ffff R09: 0000000000000007 [ 3325.874801] R10: 00007fee1f499fc0 R11: 00007fee1e877000 R12: 0000000000000012 [ 3325.882101] R13: 0000000000000000 R14: 00007fee1f69b6e0 R15: 0000000000000000 [ 3325.912864] Mem-Info: [ 3325.915358] active_anon:374212 inactive_anon:867713 isolated_anon:0 [ 3325.915358] active_file:18 inactive_file:14 isolated_file:0 [ 3325.915358] unevictable:33158 dirty:0 writeback:0 unstable:0 [ 3325.915358] slab_reclaimable:21674 slab_unreclaimable:163044 [ 3325.915358] mapped:54932 shmem:19293 pagetables:91415 bounce:0 [ 3325.915358] free:25107 free_pcp:185 free_cma:0 [ 3326.113549] Node 0 active_anon:1239896kB inactive_anon:323404kB active_file:100kB inactive_file:48kB unevictable:114628kB isolated(anon):0kB isolated(file):0kB mapped:213428kB dirty:0kB writeback:0kB shmem:34300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3326.285356] Node 1 active_anon:256952kB inactive_anon:3147448kB active_file:0kB inactive_file:4kB unevictable:18704kB isolated(anon):0kB isolated(file):0kB mapped:6300kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3326.373790] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3326.443467] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3326.470570] Node 0 DMA32 free:35296kB min:35996kB low:44992kB high:53988kB active_anon:1235684kB inactive_anon:323264kB active_file:108kB inactive_file:12kB unevictable:114432kB writepending:0kB present:3129332kB managed:2763456kB mlocked:114432kB kernel_stack:26656kB pagetables:65340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3326.570501] lowmem_reserve[]: 0 0 1 1 1 [ 3326.574855] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3326.626814] lowmem_reserve[]: 0 0 0 0 0 [ 3326.631165] Node 1 Normal free:53716kB min:53876kB low:67344kB high:80812kB active_anon:256952kB inactive_anon:3147448kB active_file:0kB inactive_file:4kB unevictable:18704kB writepending:0kB present:4194304kB managed:4128248kB mlocked:18704kB kernel_stack:95968kB pagetables:300160kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 3326.686288] lowmem_reserve[]: 0 0 0 0 0 [ 3326.690627] Node 0 DMA: 14*4kB (UME) 2*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 3326.736101] Node 0 DMA32: 3334*4kB (UME) 1604*8kB (UME) 122*16kB (UME) 165*32kB (UME) 34*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35576kB [ 3326.756650] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3326.798255] Node 1 Normal: 49*4kB (U) 60*8kB (U) 1859*16kB (U) 729*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53748kB [ 3326.838286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3326.871210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3326.882063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3326.919442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3326.965127] 21693 total pagecache pages [ 3326.986181] 0 pages in swap cache [ 3326.989647] Swap cache stats: add 0, delete 0, find 0/0 [ 3326.995000] Free swap = 0kB [ 3327.049056] Total swap = 0kB [ 3327.052091] 2097051 pages RAM [ 3327.079607] 0 pages HighMem/MovableOnly [ 3327.084804] 369648 pages reserved [ 3327.088972] 0 pages cma reserved [ 3327.092341] Out of memory (oom_kill_allocating_task): Kill process 965 (systemd-cgroups) score 0 or sacrifice child [ 3327.130189] Killed process 965 (systemd-cgroups) total-vm:37668kB, anon-rss:324kB, file-rss:0kB, shmem-rss:0kB [ 3327.142208] oom_reaper: reaped process 965 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:53:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:02 executing program 2: mlockall(0x7) mlockall(0x3) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/37) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3}) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/148) 05:53:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 05:53:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x11) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022dbd7000fcdbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="947d39501036ffaf41983d09c201d3764ae1d09adcf70569ce88fe00998a542925dd4434"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) mlockall(0x3) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008011}, 0x4040800) fork() syz_open_procfs$userns(0x0, 0x0) 05:53:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 05:53:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:53:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 3328.585499] nla_parse: 6 callbacks suppressed [ 3328.585509] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3328.686954] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.694010] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3328.727347] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3328.784114] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3329.448012] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3329.481898] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3329.494158] CPU: 0 PID: 1004 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3329.501966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3329.511320] Call Trace: [ 3329.514007] dump_stack+0x1fc/0x2ef [ 3329.517640] dump_header+0x15d/0xc3f [ 3329.521363] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3329.526475] ? ___ratelimit+0x319/0x590 [ 3329.530459] oom_kill_process.cold+0x10/0x692 [ 3329.534958] ? check_preemption_disabled+0x41/0x280 [ 3329.539989] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3329.545276] out_of_memory+0x1072/0x1390 [ 3329.549347] ? oom_killer_disable+0x270/0x270 [ 3329.553849] ? mutex_trylock+0x15f/0x1a0 [ 3329.557916] __alloc_pages_nodemask+0x23a2/0x2890 [ 3329.562795] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3329.567649] ? __lock_acquire+0x6de/0x3ff0 [ 3329.571893] ? mark_held_locks+0xf0/0xf0 [ 3329.575975] alloc_pages_vma+0xf2/0x780 [ 3329.579960] do_anonymous_page+0x7c2/0x1be0 [ 3329.584291] ? __pte_alloc+0x340/0x340 [ 3329.588178] ? __put_compound_page+0xc0/0xc0 [ 3329.592592] ? mark_held_locks+0xf0/0xf0 [ 3329.596671] __handle_mm_fault+0x227a/0x41c0 [ 3329.601089] ? vm_insert_page+0x9c0/0x9c0 [ 3329.605257] ? check_preemption_disabled+0x41/0x280 [ 3329.610284] handle_mm_fault+0x436/0xb10 [ 3329.614353] __get_user_pages+0x6f0/0x1710 [ 3329.618600] ? follow_page_mask+0x1d00/0x1d00 [ 3329.623112] populate_vma_page_range+0x200/0x290 [ 3329.627873] __mm_populate+0x1ea/0x350 [ 3329.631766] ? populate_vma_page_range+0x290/0x290 [ 3329.636695] ? do_mlock+0x6b0/0x6b0 [ 3329.640322] ? security_capable+0x8f/0xc0 [ 3329.644480] __se_sys_mlockall+0x362/0x4e0 [ 3329.648716] do_syscall_64+0xf9/0x620 [ 3329.652521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3329.657705] RIP: 0033:0x4665f9 [ 3329.660894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3329.679881] RSP: 002b:00007fafb8c6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3329.687593] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3329.694864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3329.702138] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3329.709417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3329.716782] R13: 00007ffd8772358f R14: 00007fafb8c6b300 R15: 0000000000022000 [ 3330.784030] Mem-Info: [ 3330.791974] active_anon:374068 inactive_anon:867711 isolated_anon:0 [ 3330.791974] active_file:32 inactive_file:3 isolated_file:0 [ 3330.791974] unevictable:30997 dirty:0 writeback:0 unstable:0 [ 3330.791974] slab_reclaimable:21721 slab_unreclaimable:165364 [ 3330.791974] mapped:54941 shmem:19293 pagetables:91369 bounce:0 [ 3330.791974] free:25120 free_pcp:0 free_cma:0 [ 3330.983124] Node 0 active_anon:1239796kB inactive_anon:323396kB active_file:44kB inactive_file:48kB unevictable:108624kB isolated(anon):0kB isolated(file):0kB mapped:215352kB dirty:0kB writeback:0kB shmem:34296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3331.133414] Node 1 active_anon:256476kB inactive_anon:3147448kB active_file:12kB inactive_file:12kB unevictable:15564kB isolated(anon):0kB isolated(file):0kB mapped:4416kB dirty:0kB writeback:0kB shmem:42876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3331.263820] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3331.418578] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3331.423640] Node 0 DMA32 free:35536kB min:35996kB low:44992kB high:53988kB active_anon:1235584kB inactive_anon:323256kB active_file:28kB inactive_file:0kB unevictable:109528kB writepending:0kB present:3129332kB managed:2763456kB mlocked:109528kB kernel_stack:26688kB pagetables:65288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3331.541499] lowmem_reserve[]: 0 0 1 1 1 [ 3331.552364] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3331.702963] lowmem_reserve[]: 0 0 0 0 0 [ 3331.724512] Node 1 Normal free:53832kB min:53876kB low:67344kB high:80812kB active_anon:256476kB inactive_anon:3147448kB active_file:12kB inactive_file:12kB unevictable:15564kB writepending:0kB present:4194304kB managed:4128248kB mlocked:15564kB kernel_stack:95936kB pagetables:300028kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3331.885089] lowmem_reserve[]: 0 0 0 0 0 [ 3331.889262] Node 0 DMA: 14*4kB (UME) 2*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 3331.945187] Node 0 DMA32: 3224*4kB (UE) 895*8kB (UME) 487*16kB (UME) 173*32kB (UME) 38*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35816kB [ 3331.978836] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3331.991704] Node 1 Normal: 72*4kB (UM) 63*8kB (UM) 1892*16kB (UM) 733*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54648kB [ 3332.013151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3332.023401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3332.083195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3332.145501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3332.154105] 22501 total pagecache pages [ 3332.192395] 0 pages in swap cache [ 3332.196384] Swap cache stats: add 0, delete 0, find 0/0 [ 3332.203051] Free swap = 0kB [ 3332.220400] Total swap = 0kB [ 3332.223528] 2097051 pages RAM [ 3332.244970] 0 pages HighMem/MovableOnly [ 3332.248954] 369648 pages reserved [ 3332.252418] 0 pages cma reserved [ 3332.281519] Out of memory (oom_kill_allocating_task): Kill process 1004 (syz-executor.0) score 0 or sacrifice child [ 3332.302905] Killed process 1004 (syz-executor.0) total-vm:93384kB, anon-rss:12504kB, file-rss:40208kB, shmem-rss:0kB [ 3332.318424] oom_reaper: reaped process 1004 (syz-executor.0), now anon-rss:12504kB, file-rss:40204kB, shmem-rss:0kB 05:53:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:53:07 executing program 2: mlockall(0x5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x104000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="76302c655d85daa01b2cbf999506fe45", 0x10) mlockall(0x6) r1 = fork() syz_open_procfs$userns(r1, &(0x7f0000000000)) 05:53:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0xf}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:07 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:53:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3333.340148] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3333.376567] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3333.428306] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3333.497282] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0xf0}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3333.700539] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3333.754692] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3333.784970] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3333.847036] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0x300}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3333.995001] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3334.244948] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3335.261366] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3335.336353] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3335.341527] CPU: 1 PID: 1068 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3335.349333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3335.358707] Call Trace: [ 3335.361308] dump_stack+0x1fc/0x2ef [ 3335.364945] dump_header+0x15d/0xc3f [ 3335.368668] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3335.373797] ? ___ratelimit+0x319/0x590 [ 3335.377804] oom_kill_process.cold+0x10/0x692 [ 3335.382313] ? check_preemption_disabled+0x41/0x280 [ 3335.387345] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3335.392653] out_of_memory+0x1072/0x1390 [ 3335.396728] ? oom_killer_disable+0x270/0x270 [ 3335.402208] ? mutex_trylock+0x15f/0x1a0 [ 3335.406381] __alloc_pages_nodemask+0x23a2/0x2890 [ 3335.411256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3335.416105] ? __lock_acquire+0x6de/0x3ff0 [ 3335.420350] ? mark_held_locks+0xf0/0xf0 [ 3335.424432] alloc_pages_vma+0xf2/0x780 [ 3335.428416] do_anonymous_page+0x7c2/0x1be0 [ 3335.432749] ? __pte_alloc+0x340/0x340 [ 3335.436636] ? __put_compound_page+0xc0/0xc0 [ 3335.441052] ? mark_held_locks+0xf0/0xf0 [ 3335.445127] __handle_mm_fault+0x227a/0x41c0 [ 3335.449546] ? vm_insert_page+0x9c0/0x9c0 [ 3335.453713] ? check_preemption_disabled+0x41/0x280 [ 3335.458833] handle_mm_fault+0x436/0xb10 [ 3335.462908] __get_user_pages+0x6f0/0x1710 [ 3335.467154] ? follow_page_mask+0x1d00/0x1d00 [ 3335.471665] populate_vma_page_range+0x200/0x290 [ 3335.476435] __mm_populate+0x1ea/0x350 [ 3335.480597] ? populate_vma_page_range+0x290/0x290 [ 3335.485526] ? do_mlock+0x6b0/0x6b0 [ 3335.489334] ? security_capable+0x8f/0xc0 [ 3335.493579] __se_sys_mlockall+0x362/0x4e0 [ 3335.497820] do_syscall_64+0xf9/0x620 [ 3335.501631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3335.506818] RIP: 0033:0x4665f9 [ 3335.510102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3335.528999] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3335.536709] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3335.543982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3335.551247] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3335.558516] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3335.565873] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3335.609390] Mem-Info: [ 3335.612174] active_anon:374146 inactive_anon:867760 isolated_anon:0 [ 3335.612174] active_file:107 inactive_file:102 isolated_file:0 [ 3335.612174] unevictable:30825 dirty:0 writeback:0 unstable:0 [ 3335.612174] slab_reclaimable:21824 slab_unreclaimable:164853 [ 3335.612174] mapped:54081 shmem:19293 pagetables:91421 bounce:0 [ 3335.612174] free:25130 free_pcp:349 free_cma:0 [ 3335.652087] Node 0 active_anon:1240032kB inactive_anon:323536kB active_file:56kB inactive_file:0kB unevictable:114180kB isolated(anon):0kB isolated(file):0kB mapped:214944kB dirty:0kB writeback:0kB shmem:34304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3335.688569] Node 1 active_anon:256552kB inactive_anon:3147504kB active_file:16kB inactive_file:4kB unevictable:9120kB isolated(anon):0kB isolated(file):0kB mapped:780kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3335.759921] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3335.806849] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3335.824237] Node 0 DMA32 free:36020kB min:35996kB low:44992kB high:53988kB active_anon:1235820kB inactive_anon:323396kB active_file:132kB inactive_file:232kB unevictable:114180kB writepending:12kB present:3129332kB managed:2763456kB mlocked:114180kB kernel_stack:26688kB pagetables:65344kB bounce:0kB free_pcp:320kB local_pcp:72kB free_cma:0kB [ 3335.865963] lowmem_reserve[]: 0 0 1 1 1 [ 3335.870843] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3335.934704] lowmem_reserve[]: 0 0 0 0 0 [ 3335.938722] Node 1 Normal free:53576kB min:53876kB low:67344kB high:80812kB active_anon:256564kB inactive_anon:3147504kB active_file:20kB inactive_file:24kB unevictable:9120kB writepending:0kB present:4194304kB managed:4128248kB mlocked:9120kB kernel_stack:96032kB pagetables:300188kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 3336.031491] lowmem_reserve[]: 0 0 0 0 0 [ 3336.036711] Node 0 DMA: 14*4kB (UME) 3*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 3336.054470] Node 0 DMA32: 2913*4kB (UE) 1502*8kB (UME) 273*16kB (UME) 184*32kB (UME) 41*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36804kB [ 3336.095067] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3336.115352] Node 1 Normal: 229*4kB (UME) 6*8kB (UME) 1727*16kB (UM) 737*32kB (UME) 19*64kB (ME) 3*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53780kB [ 3336.168844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3336.205576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3336.217421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3336.233244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3336.242816] 20751 total pagecache pages [ 3336.247734] 0 pages in swap cache [ 3336.253213] Swap cache stats: add 0, delete 0, find 0/0 [ 3336.260079] Free swap = 0kB [ 3336.265773] Total swap = 0kB [ 3336.272646] 2097051 pages RAM [ 3336.281289] 0 pages HighMem/MovableOnly [ 3336.287684] 369648 pages reserved [ 3336.291139] 0 pages cma reserved [ 3336.301507] Out of memory (oom_kill_allocating_task): Kill process 1068 (syz-executor.0) score 0 or sacrifice child [ 3336.312247] Killed process 1068 (syz-executor.0) total-vm:93252kB, anon-rss:27748kB, file-rss:40196kB, shmem-rss:0kB [ 3336.329414] oom_reaper: reaped process 1068 (syz-executor.0), now anon-rss:27748kB, file-rss:40192kB, shmem-rss:0kB 05:53:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0x700}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:13 executing program 0: fork() syz_open_procfs$userns(0x0, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0xc, 0x2, @thr={&(0x7f0000000000)="f77984cb778e0569ad3949066c16b1ab85f499f33c55509d287120f32da973c6", &(0x7f0000000040)="cbf03bea29d44d3a69ba4955c7174f2269f07a927e0d1db87d"}}, &(0x7f00000000c0)) 05:53:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0xf00}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:13 executing program 2: mlockall(0x7) mlockall(0x3) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4acd6de82f336583, 0x14, &(0x7f0000000040)=""/104) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3339.374673] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3339.399733] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3339.422159] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3339.434087] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0x4da1}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0xfffffffffffffffd}, 0x8000) mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) 05:53:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3339.667207] netlink: 39 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3339.728008] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3339.790437] netlink: 39 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3339.830354] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 05:53:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3340.002895] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0xa14d}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 3340.095454] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3340.566002] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3340.617131] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3340.622306] CPU: 1 PID: 1212 Comm: syz-executor.5 Not tainted 4.19.205-syzkaller #0 [ 3340.630095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3340.639443] Call Trace: [ 3340.642040] dump_stack+0x1fc/0x2ef [ 3340.645698] dump_header+0x15d/0xc3f [ 3340.649415] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3340.654524] ? ___ratelimit+0x319/0x590 [ 3340.658504] oom_kill_process.cold+0x10/0x692 [ 3340.663000] ? check_preemption_disabled+0x41/0x280 [ 3340.668021] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3340.673305] out_of_memory+0x1072/0x1390 [ 3340.677380] ? oom_killer_disable+0x270/0x270 [ 3340.681881] ? mutex_trylock+0x15f/0x1a0 [ 3340.685950] __alloc_pages_nodemask+0x23a2/0x2890 [ 3340.690815] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3340.695661] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3340.700769] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3340.705352] ? __free_object+0xdd/0x1e0 [ 3340.709338] ? __lock_acquire+0x6de/0x3ff0 [ 3340.713573] alloc_pages_vma+0xf2/0x780 [ 3340.717553] wp_page_copy+0x219/0x2c40 [ 3340.721448] ? _vm_normal_page+0x132/0x510 [ 3340.725692] ? follow_pte_pmd+0x60/0x60 [ 3340.729685] do_wp_page+0x2d4/0x2210 [ 3340.733491] ? finish_mkwrite_fault+0x640/0x640 [ 3340.738160] ? __handle_mm_fault+0x15f6/0x41c0 [ 3340.742748] ? mark_held_locks+0xf0/0xf0 [ 3340.746815] __handle_mm_fault+0x258b/0x41c0 [ 3340.751229] ? vm_insert_page+0x9c0/0x9c0 [ 3340.755394] ? check_preemption_disabled+0x41/0x280 [ 3340.760419] handle_mm_fault+0x436/0xb10 [ 3340.764524] __do_page_fault+0x68e/0xd60 [ 3340.768594] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3340.773612] ? spurious_fault+0x840/0x840 [ 3340.777763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3340.782619] ? page_fault+0x8/0x30 [ 3340.786160] page_fault+0x1e/0x30 [ 3340.789629] RIP: 0033:0x411dd5 [ 3340.792820] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ee 62 15 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d 19 e2 55 00 4c 39 ea 0f [ 3340.811720] RSP: 002b:00007ffcbd215350 EFLAGS: 00010206 [ 3340.817083] RAX: 0000000000000004 RBX: 000000000056bf80 RCX: 00000000005680c0 [ 3340.824339] RDX: 00000000005680c0 RSI: 0000000000000080 RDI: 000000000056bf80 [ 3340.831591] RBP: 000000000056bf80 R08: 0000037f515f3b8a R09: 0000000000000000 [ 3340.838845] R10: 00007ffcbd215460 R11: 0000000000000246 R12: 000000000032f9ce [ 3340.846203] R13: 00000000000003e8 R14: 000000000056bf80 R15: 000000000032f9cc [ 3340.891696] Mem-Info: [ 3340.894311] active_anon:374191 inactive_anon:867782 isolated_anon:0 [ 3340.894311] active_file:9 inactive_file:8 isolated_file:6 [ 3340.894311] unevictable:31185 dirty:0 writeback:0 unstable:0 [ 3340.894311] slab_reclaimable:21890 slab_unreclaimable:164712 [ 3340.894311] mapped:54974 shmem:19293 pagetables:91518 bounce:0 [ 3340.894311] free:25161 free_pcp:0 free_cma:0 [ 3340.929479] Node 0 active_anon:1240160kB inactive_anon:323624kB active_file:12kB inactive_file:12kB unevictable:117964kB isolated(anon):0kB isolated(file):24kB mapped:219248kB dirty:0kB writeback:0kB shmem:34304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3340.958367] Node 1 active_anon:256604kB inactive_anon:3147504kB active_file:24kB inactive_file:20kB unevictable:6776kB isolated(anon):0kB isolated(file):0kB mapped:648kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3340.986698] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.016026] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3341.021072] Node 0 DMA32 free:35840kB min:35996kB low:44992kB high:53988kB active_anon:1235948kB inactive_anon:323484kB active_file:12kB inactive_file:12kB unevictable:117964kB writepending:0kB present:3129332kB managed:2763456kB mlocked:117964kB kernel_stack:26880kB pagetables:65668kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 3341.051329] lowmem_reserve[]: 0 0 1 1 1 [ 3341.055385] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.081359] lowmem_reserve[]: 0 0 0 0 0 [ 3341.085427] Node 1 Normal free:53588kB min:53876kB low:67344kB high:80812kB active_anon:256604kB inactive_anon:3147504kB active_file:24kB inactive_file:20kB unevictable:6776kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6776kB kernel_stack:96032kB pagetables:300244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.116788] lowmem_reserve[]: 0 0 0 0 0 [ 3341.120781] Node 0 DMA: 14*4kB (UME) 4*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 3341.137462] Node 0 DMA32: 2776*4kB (UME) 760*8kB (UE) 555*16kB (UME) 192*32kB (UME) 50*64kB (UM) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35920kB [ 3341.152346] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3341.166093] Node 1 Normal: 233*4kB (UME) 8*8kB (UME) 1569*16kB (UM) 781*32kB (UME) 27*64kB (ME) 6*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53588kB [ 3341.180810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3341.189700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3341.198461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3341.207366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3341.217255] 21690 total pagecache pages [ 3341.221236] 0 pages in swap cache [ 3341.224821] Swap cache stats: add 0, delete 0, find 0/0 [ 3341.230174] Free swap = 0kB [ 3341.233176] Total swap = 0kB [ 3341.236256] 2097051 pages RAM [ 3341.239350] 0 pages HighMem/MovableOnly [ 3341.243307] 369648 pages reserved [ 3341.247548] 0 pages cma reserved [ 3341.250914] Out of memory (oom_kill_allocating_task): Kill process 1212 (syz-executor.5) score 0 or sacrifice child [ 3341.261572] Killed process 1212 (syz-executor.5) total-vm:93252kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB [ 3341.273244] oom_reaper: reaped process 1212 (syz-executor.5), now anon-rss:0kB, file-rss:33980kB, shmem-rss:0kB [ 3341.524962] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3341.536592] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3341.541363] CPU: 1 PID: 8113 Comm: syz-fuzzer Not tainted 4.19.205-syzkaller #0 [ 3341.548808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3341.558157] Call Trace: [ 3341.560754] dump_stack+0x1fc/0x2ef [ 3341.564388] dump_header+0x15d/0xc3f [ 3341.568108] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3341.573205] ? ___ratelimit+0x319/0x590 [ 3341.577190] oom_kill_process.cold+0x10/0x692 [ 3341.581684] ? check_preemption_disabled+0x41/0x280 [ 3341.586689] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3341.591960] out_of_memory+0x1072/0x1390 [ 3341.596034] ? oom_killer_disable+0x270/0x270 [ 3341.600535] ? mutex_trylock+0x15f/0x1a0 [ 3341.604601] __alloc_pages_nodemask+0x23a2/0x2890 [ 3341.609471] ? find_get_entry+0x4cd/0x8a0 [ 3341.613608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3341.618475] alloc_pages_current+0x193/0x2a0 [ 3341.622889] filemap_fault+0x146e/0x2180 [ 3341.626961] ext4_filemap_fault+0x84/0xb0 [ 3341.631096] __do_fault+0x10b/0x4b0 [ 3341.634718] __handle_mm_fault+0x273b/0x41c0 [ 3341.639119] ? vm_insert_page+0x9c0/0x9c0 [ 3341.643268] ? __fget+0x356/0x510 [ 3341.646735] ? check_preemption_disabled+0x41/0x280 [ 3341.651748] handle_mm_fault+0x436/0xb10 [ 3341.655812] __do_page_fault+0x68e/0xd60 [ 3341.659874] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3341.664883] ? spurious_fault+0x840/0x840 [ 3341.669036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3341.673882] ? page_fault+0x8/0x30 [ 3341.677422] page_fault+0x1e/0x30 [ 3341.680865] RIP: 0033:0x46e380 [ 3341.684045] Code: Bad RIP value. [ 3341.687404] RSP: 002b:000000c0000397f0 EFLAGS: 00010246 [ 3341.692748] RAX: 0000000000000000 RBX: 0000000000000188 RCX: 000000000046e380 [ 3341.699999] RDX: 0000000000000080 RSI: 000000c000039840 RDI: 0000000000000003 [ 3341.707249] RBP: 000000c000039e40 R08: 0000000000000000 R09: 0000000000000000 [ 3341.714505] R10: 0000000000000188 R11: 0000000000000246 R12: 0000000000000003 [ 3341.721765] R13: 000000c000000f00 R14: 000000000094d4c5 R15: 0000000000000000 [ 3341.733528] Mem-Info: [ 3341.736042] active_anon:374178 inactive_anon:867782 isolated_anon:0 [ 3341.736042] active_file:0 inactive_file:18 isolated_file:6 [ 3341.736042] unevictable:31185 dirty:0 writeback:0 unstable:0 [ 3341.736042] slab_reclaimable:21890 slab_unreclaimable:164696 [ 3341.736042] mapped:54974 shmem:19293 pagetables:91493 bounce:0 [ 3341.736042] free:25010 free_pcp:231 free_cma:0 [ 3341.770681] Node 0 active_anon:1240112kB inactive_anon:323624kB active_file:12kB inactive_file:12kB unevictable:117964kB isolated(anon):0kB isolated(file):24kB mapped:219248kB dirty:0kB writeback:0kB shmem:34304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1296384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3341.803519] Node 1 active_anon:256600kB inactive_anon:3147504kB active_file:0kB inactive_file:60kB unevictable:6776kB isolated(anon):0kB isolated(file):0kB mapped:648kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3341.832003] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4212kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.859909] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3341.865430] Node 0 DMA32 free:35480kB min:35996kB low:44992kB high:53988kB active_anon:1235900kB inactive_anon:323484kB active_file:12kB inactive_file:12kB unevictable:117964kB writepending:0kB present:3129332kB managed:2763456kB mlocked:117964kB kernel_stack:26816kB pagetables:65568kB bounce:0kB free_pcp:920kB local_pcp:496kB free_cma:0kB [ 3341.897474] lowmem_reserve[]: 0 0 1 1 1 [ 3341.901838] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.928921] lowmem_reserve[]: 0 0 0 0 0 [ 3341.949438] Node 1 Normal free:53592kB min:53876kB low:67344kB high:80812kB active_anon:256600kB inactive_anon:3147504kB active_file:20kB inactive_file:24kB unevictable:6776kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6776kB kernel_stack:96032kB pagetables:300244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.998303] lowmem_reserve[]: 0 0 0 0 0 [ 3342.002670] Node 0 DMA: 14*4kB (UME) 4*8kB (UM) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 3342.036608] Node 0 DMA32: 2819*4kB (UME) 762*8kB (UME) 557*16kB (UME) 185*32kB (UME) 50*64kB (UM) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35916kB [ 3342.076809] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3342.103705] Node 1 Normal: 234*4kB (UME) 8*8kB (UME) 1569*16kB (UM) 781*32kB (UME) 27*64kB (ME) 6*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53592kB [ 3342.119620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3342.143528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3342.168736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3342.177687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3342.190401] 21715 total pagecache pages [ 3342.201426] 0 pages in swap cache [ 3342.209103] Swap cache stats: add 0, delete 0, find 0/0 [ 3342.218850] Free swap = 0kB [ 3342.222220] Total swap = 0kB [ 3342.229925] 2097051 pages RAM [ 3342.233031] 0 pages HighMem/MovableOnly [ 3342.238802] 369648 pages reserved [ 3342.242491] 0 pages cma reserved [ 3342.249645] Out of memory (oom_kill_allocating_task): Kill process 8113 (syz-fuzzer) score 0 or sacrifice child [ 3342.270283] Killed process 8140 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:312kB, shmem-rss:0kB [ 3342.333047] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3347.417406] in:imklog cpuset=/ mems_allowed=0-1 [ 3347.527307] CPU: 0 PID: 928 Comm: in:imklog Not tainted 4.19.205-syzkaller #0 [ 3347.534604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3347.543954] Call Trace: [ 3347.546546] dump_stack+0x1fc/0x2ef [ 3347.550193] dump_header+0x15d/0xc3f [ 3347.553912] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3347.559364] ? ___ratelimit+0x319/0x590 [ 3347.563345] oom_kill_process.cold+0x10/0x692 [ 3347.567858] ? check_preemption_disabled+0x41/0x280 [ 3347.572886] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3347.578163] out_of_memory+0x1072/0x1390 [ 3347.582230] ? oom_killer_disable+0x270/0x270 [ 3347.586728] ? mutex_trylock+0x15f/0x1a0 [ 3347.590796] __alloc_pages_nodemask+0x23a2/0x2890 [ 3347.595649] ? find_get_entry+0x4cd/0x8a0 [ 3347.599809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3347.604681] alloc_pages_current+0x193/0x2a0 [ 3347.609093] filemap_fault+0x146e/0x2180 [ 3347.613177] ext4_filemap_fault+0x84/0xb0 [ 3347.617330] __do_fault+0x10b/0x4b0 [ 3347.620966] __handle_mm_fault+0x273b/0x41c0 [ 3347.625385] ? vm_insert_page+0x9c0/0x9c0 [ 3347.629550] ? lock_downgrade+0x720/0x720 [ 3347.633739] ? check_preemption_disabled+0x41/0x280 [ 3347.638762] handle_mm_fault+0x436/0xb10 [ 3347.642865] __do_page_fault+0x68e/0xd60 [ 3347.646932] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3347.651982] ? spurious_fault+0x840/0x840 [ 3347.656135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3347.661008] ? page_fault+0x8/0x30 [ 3347.664547] page_fault+0x1e/0x30 [ 3347.667999] RIP: 0033:0x7f6719b2a22d [ 3347.671710] Code: Bad RIP value. [ 3347.675121] RSP: 002b:00007f67174c6580 EFLAGS: 00010293 [ 3347.680476] RAX: 0000000000000b32 RBX: 0000000000000000 RCX: 00007f6719b2a22d [ 3347.687740] RDX: 0000000000001fa0 RSI: 00007f67174c6da0 RDI: 0000000000000004 [ 3347.695004] RBP: 0000557eb85df9d0 R08: 0000000000000000 R09: 0000000004000001 [ 3347.702429] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f67174c6da0 [ 3347.709705] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f67174c6e03 [ 3348.071334] Mem-Info: [ 3348.073838] active_anon:277825 inactive_anon:681094 isolated_anon:0 [ 3348.073838] active_file:604 inactive_file:2025 isolated_file:32 [ 3348.073838] unevictable:22592 dirty:186 writeback:0 unstable:0 [ 3348.073838] slab_reclaimable:21773 slab_unreclaimable:154484 [ 3348.073838] mapped:56738 shmem:19293 pagetables:70867 bounce:0 [ 3348.073838] free:357317 free_pcp:1379 free_cma:0 [ 3348.112273] Node 0 active_anon:908548kB inactive_anon:253892kB active_file:2420kB inactive_file:6424kB unevictable:83592kB isolated(anon):0kB isolated(file):0kB mapped:224392kB dirty:496kB writeback:0kB shmem:34304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 915456kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3348.142238] Node 1 active_anon:202352kB inactive_anon:2470084kB active_file:996kB inactive_file:776kB unevictable:6776kB isolated(anon):0kB isolated(file):0kB mapped:2160kB dirty:248kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3348.170839] Node 0 DMA free:13100kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3348.223448] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3348.228502] Node 0 DMA32 free:510160kB min:35996kB low:44992kB high:53988kB active_anon:906392kB inactive_anon:253752kB active_file:2416kB inactive_file:6824kB unevictable:83392kB writepending:492kB present:3129332kB managed:2763456kB mlocked:83352kB kernel_stack:21344kB pagetables:48268kB bounce:0kB free_pcp:2772kB local_pcp:1320kB free_cma:0kB [ 3348.293448] lowmem_reserve[]: 0 0 1 1 1 [ 3348.297473] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3348.353397] lowmem_reserve[]: 0 0 0 0 0 [ 3348.357408] Node 1 Normal free:906716kB min:53876kB low:67344kB high:80812kB active_anon:202252kB inactive_anon:2470084kB active_file:996kB inactive_file:776kB unevictable:6776kB writepending:248kB present:4194304kB managed:4128248kB mlocked:6776kB kernel_stack:75328kB pagetables:234608kB bounce:0kB free_pcp:2664kB local_pcp:1292kB free_cma:0kB [ 3348.419445] lowmem_reserve[]: 0 0 0 0 0 [ 3348.423538] Node 0 DMA: 16*4kB (UME) 9*8kB (UM) 5*16kB (UME) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 1*4096kB (M) = 13112kB [ 3348.463420] Node 0 DMA32: 8145*4kB (UME) 4905*8kB (UME) 1892*16kB (UME) 614*32kB (UME) 168*64kB (UM) 41*128kB (UM) 8*256kB (UM) 1*512kB (U) 0*1024kB 141*2048kB (M) 22*4096kB (M) = 519180kB [ 3348.485519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3348.496361] Node 1 Normal: 21691*4kB (UME) 13583*8kB (UME) 5903*16kB (UM) 3900*32kB (UME) 1639*64kB (UME) 1013*128kB (UME) 344*256kB (M) 96*512kB (M) 29*1024kB (M) 8*2048kB (M) 19*4096kB (M) = 910356kB [ 3348.514627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3348.524250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3348.532853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3348.543968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3348.553242] 24424 total pagecache pages [ 3348.557724] 0 pages in swap cache [ 3348.561174] Swap cache stats: add 0, delete 0, find 0/0 [ 3348.567415] Free swap = 0kB [ 3348.570438] Total swap = 0kB [ 3348.574322] 2097051 pages RAM [ 3348.577430] 0 pages HighMem/MovableOnly [ 3348.581393] 369648 pages reserved [ 3348.588141] 0 pages cma reserved [ 3348.591970] Out of memory (oom_kill_allocating_task): Kill process 928 (in:imklog) score 0 or sacrifice child [ 3348.605488] Killed process 904 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 3348.631651] oom_reaper: reaped process 904 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:53:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 05:53:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:23 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:53:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc040, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) mlockall(0x6) fork() ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) syz_open_procfs$userns(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) accept4$inet(r1, 0x0, &(0x7f0000000000), 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'wg0\x00'}) 05:53:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3349.236128] nla_parse: 2 callbacks suppressed [ 3349.236139] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 3349.290275] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3349.315609] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:24 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="7300000000000000000000000000000004000800a64cdc20b639438e9be691f03125d716d7a39de8b6374276a0c3b2c7ab9a60063234de8bdd8c9a94e03ee65e8adfe4bb6f9458b706e8def718de95db5b078d853faa2e2a5d9024ecf5c94170e9cf2ab9bf63c23672dc75e798f37933eb6bf0f6be491479e0c795a5727676d7d0b82ae43e9878ccc391bf78a0cea09250226e664c60a598a77d23bf3e277f0bcfbd6cb644f2a04fc888885282ac7b0b217db2ecf15c82e8f45c"], &(0x7f00000002c0)=0x28) sendto$inet(r0, &(0x7f0000000000)="ea909eb0b0787075b391f81806af891c864fa7fade6e197d3f795fb89e6caf10708bd49107de767751457e422648abfda3fd8a5e0e20a975d8289aa4f6910b9edd796a9431f20569dab5c01d5d135b0c1907f7d03cbedbb30e3c8b1a4452bc19f15de2ccbe1e223d7a996be2dd1e7246755e0e9d4dc6edefb9fd3875e6478950cc4f7eb5c5739b2a7a215502af4685c780762ce5d51c636471c8d5478412cc7b7fe3b1b8167f8e807f205bcb3762f45e5b31", 0xb2, 0x4008880, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) [ 3349.384393] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {0xb, 0x0, 0xffff}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 3349.554417] netlink: 42 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3349.600678] netlink: 42 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3349.630635] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3349.702642] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3351.732517] IPVS: ftp: loaded support on port[0] = 21 [ 3352.006361] chnl_net:caif_netlink_parms(): no params data found [ 3352.023897] IPVS: stopping master sync thread 32703 ... [ 3352.029423] IPVS: stopping backup sync thread 25140 ... [ 3352.165133] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.171539] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.179032] device bridge_slave_0 entered promiscuous mode [ 3352.186627] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.193499] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.200636] device bridge_slave_1 entered promiscuous mode [ 3352.327468] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3352.337038] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3352.354760] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3352.362090] team0: Port device team_slave_0 added [ 3352.367892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3352.376590] team0: Port device team_slave_1 added [ 3352.405303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3352.411553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3352.437022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3352.449474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3352.456369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3352.464680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3352.471346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3352.480839] device bridge_slave_1 left promiscuous mode [ 3352.486414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.493638] device bridge_slave_0 left promiscuous mode [ 3352.499075] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.508065] device veth1_macvtap left promiscuous mode [ 3352.513577] device veth0_macvtap left promiscuous mode [ 3352.518875] device veth1_vlan left promiscuous mode [ 3352.524004] device veth0_vlan left promiscuous mode [ 3353.722981] Bluetooth: hci2: command 0x0409 tx timeout [ 3355.812873] Bluetooth: hci2: command 0x041b tx timeout [ 3357.026634] device hsr_slave_1 left promiscuous mode [ 3357.035963] device hsr_slave_0 left promiscuous mode [ 3357.051514] team0 (unregistering): Port device team_slave_1 removed [ 3357.062576] team0 (unregistering): Port device team_slave_0 removed [ 3357.073504] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3357.085597] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3357.119421] bond0 (unregistering): Released all slaves [ 3357.130095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3357.137588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3357.165090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3357.176906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3357.193642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3357.214171] device hsr_slave_0 entered promiscuous mode [ 3357.219810] device hsr_slave_1 entered promiscuous mode [ 3357.226886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3357.237578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3357.363667] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3357.418062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3357.427521] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3357.439388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3357.448641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3357.457275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3357.468085] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3357.475511] 8021q: adding VLAN 0 to HW filter on device team0 [ 3357.486601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3357.494660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3357.510088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3357.518114] bridge0: port 1(bridge_slave_0) entered blocking state [ 3357.524517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3357.541763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3357.549397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3357.564304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3357.572138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3357.586791] bridge0: port 2(bridge_slave_1) entered blocking state [ 3357.593204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3357.610656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3357.618170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3357.635959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3357.651219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3357.669608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3357.676736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3357.693396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3357.705281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3357.719256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3357.727917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3357.742737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3357.758028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3357.773593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3357.789038] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3357.798601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3357.811978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3357.828112] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3357.835487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3357.847346] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3357.858649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3357.866607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3357.884306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3357.891974] Bluetooth: hci2: command 0x040f tx timeout [ 3357.958596] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3357.979026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3358.055953] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3358.065871] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3358.076826] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3358.088922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3358.100068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3358.111267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3358.135273] device veth0_vlan entered promiscuous mode [ 3358.147114] device veth1_vlan entered promiscuous mode [ 3358.153572] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3358.163419] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3358.178028] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3358.189234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3358.197369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3358.205767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3358.217718] device veth0_macvtap entered promiscuous mode [ 3358.228968] device veth1_macvtap entered promiscuous mode [ 3358.239956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3358.251556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3358.263016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3358.273061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.282144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3358.293797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.303603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3358.314642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.324609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3358.334876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.344503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3358.354936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.365761] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3358.372943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3358.380269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3358.388553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3358.398871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3358.408854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.419872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3358.430110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.439450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3358.449241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.458426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3358.468209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.477386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3358.487137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.497294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3358.504636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3358.511910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3358.521225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3358.629635] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 3358.643483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3358.656700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3358.677116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3358.698504] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 3358.705247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3358.713379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3358.720125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:53:34 executing program 2: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x7, 0x4) 05:53:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='G\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 05:53:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x3, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:34 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:smartcard_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c085}, 0x24000841) fork() syz_open_procfs$userns(0x0, 0x0) [ 3359.427597] netlink: 39 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:34 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3359.481001] netlink: 39 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:34 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, 0x0) [ 3359.544514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3359.576739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:53:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0xb, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3359.726482] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3359.767771] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3359.801601] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3359.844706] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3359.880516] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 3359.944091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3359.963542] Bluetooth: hci2: command 0x0419 tx timeout [ 3360.010141] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3360.058204] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 05:53:35 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'ip6gretap0\x00'}) mlockall(0x7) mlockall(0x7) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x14, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='K\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3360.688100] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 05:53:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:35 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3360.728953] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 05:53:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x1d, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:36 executing program 0: mlockall(0x1) fork() syz_open_dev$sndmidi(&(0x7f0000000040), 0x7, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, &(0x7f0000000080)) syz_open_procfs$userns(0x0, 0x0) fork() ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9, 0xfff, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x5, 0xfffff54a}}) 05:53:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x5, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:36 executing program 2: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x4, 0x4) 05:53:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:36 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3362.226255] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 3362.273758] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 05:53:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='O\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x8, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:38 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x80000000, 0x4000) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x400, 0xe0001) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200)) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) sched_rr_get_interval(r0, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000080)) r3 = fork() syz_open_procfs$userns(r3, &(0x7f00000000c0)) 05:53:38 executing program 0: clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x1e5e00) mlockall(0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) fork() getsockname$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) syz_open_procfs$userns(0x0, 0x0) 05:53:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3363.553133] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 3363.619236] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 05:53:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x9, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3363.907882] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 3363.949916] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 05:53:38 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0xa, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='G\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:40 executing program 2: mlockall(0x7) mlockall(0x3) fork() getrusage(0x1, &(0x7f0000000040)) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:40 executing program 0: mlockall(0x3) mlockall(0x2) mlockall(0x1) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @broadcast]}) syz_open_procfs$userns(0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)={'tunl0\x00'}) 05:53:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0xb, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:40 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3366.108913] nla_parse: 44 callbacks suppressed [ 3366.108923] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3366.151307] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3366.169388] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3366.198512] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='V\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x10, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3366.395221] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3366.436398] netlink: 58 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3366.475872] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3366.504108] netlink: 58 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3366.555492] validate_nla: 2 callbacks suppressed [ 3366.555501] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 3366.595477] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 05:53:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 3366.771051] netlink: 54 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3366.819151] netlink: 59 bytes leftover after parsing attributes in process `syz-executor.1'. 05:53:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:42 executing program 0: mlockall(0x3) fork() fork() 05:53:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='K\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x25, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:42 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:42 executing program 2: mlockall(0x7) mlockall(0x3) fork() getuid() r0 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='Z\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x801, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3001, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 05:53:45 executing program 0: mlockall(0x6) fork() syz_open_procfs$userns(0x0, 0x0) 05:53:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0x3}]}, 0x28}}, 0x0) 05:53:45 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() socket$inet6_udp(0xa, 0x2, 0x0) 05:53:45 executing program 2: mlockall(0x7) mlockall(0x3) fork() pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33a) r1 = fork() syz_open_procfs$userns(r1, &(0x7f0000000000)) 05:53:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=']\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='O\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xb}]}, 0x28}}, 0x0) 05:53:45 executing program 0: mlockall(0x3) r0 = fork() fork() syz_open_procfs$userns(r0, 0x0) 05:53:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3370.861875] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 3370.923997] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 05:53:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0x25}]}, 0x28}}, 0x0) 05:53:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3371.202125] nla_parse: 32 callbacks suppressed [ 3371.202134] netlink: 61 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3371.278551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3371.309685] netlink: 61 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3371.366292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:53:46 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() socket$inet6_udp(0xa, 0x2, 0x0) 05:53:47 executing program 2: futex(&(0x7f0000000040)=0x1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) mlockall(0x7) mlockall(0x3) fork() semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x1d}]}, 0x28}}, 0x0) [ 3373.194873] netlink: 62 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3373.227077] netlink: 62 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3373.261208] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 3373.287245] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 05:53:48 executing program 0: mlockall(0x4) r0 = fork() syz_open_procfs$userns(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @ipv6=@tcp={0x8, 0x6, "069948", 0x103c, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x11}, {[@hopopts={0x3a, 0x0, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x8}]}], {{0x4e21, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0xb, 0x20, 0x4, 0x0, 0x4, {[@fastopen={0x22, 0xc, "2416f08778d45c12be6e"}, @timestamp={0x8, 0xa, 0x5, 0x8}]}}, {"2e394285e60652882a8633641ccfd9920af6e528e2c347932e20bd3e8e1bbb75753961c89fcdf54a5be751467158c5562983effd7cbca2bbe12e0bb2f7843fa8f0c94fa1bb5e0f4198970af5de6de88a849cf053f02c3bc088c76bedd6bd5733d04cbb7febaf03c822a30b86fd31977c806b1a3166376e93df21ecb3e6c99ada345c41f3003acbf43388babdb4c72c93536c651135070fba93b964aa482959ecbfbaf275eb921fbead9107243f44347a07d0869af26b4a984adf3aad43efad2ffb1d956f1b03bd66b6a71c5edd44aa156b9c930c3967fbbca40fb1121fc2a47ee0466702e91dbd42ff1d7c763f00ae024439c91922f1077cfa9bea6e82bd0d779ac604d20410ec2316da8ef8a18193272ceb7f23f51ed2fe5b688147b83bc73a1d0b7413df5985adcf84e128603fed09868e25afd74dfafa26255a69031ee673426a2b6f0c0e05b300f3bc431cba3c7920c9a4cfe6c1884df503892183182f57c786c43053bb2e5da662191b3aff9a7d9f1ce263d17f0ad8d82ef36b84a77bc02c558bfe46f7efa905928e987ac95e5478192507a9505029e5cc8513a9ee3659d0b3e39d70407ac9ff2f050d3bd1ad916ec4d00b2b0dd4ce33673803411d73f0db4a9762f1318da9e9d020887e7cde0ae91c677e7e29859a98f313fe5ea58fcbdab83d54cbefb59f1cf1a92b7fa7f94badf1ef6d9b31e50357264b5e516740408f155e5b1a43fa0b2eb85eba64f1a08e7d5283331d3a1cfdb3fe19960817d084fb2b620dcf1150da2e72a04ecc8eb43fbfcfbe48067eae8f17b7dc0d9f4386b119f3d645b623f80ae9524970598a96bad055289a55bafe1d68854f6441dc616ab2624f8bd53849b2d42868a5f05caa3a4eacafa7f39b4e5d7d64a0a736f57410b601e48131c7ca66bf297465c449fea4431b5207bae8b3d0d81045851cba714f1ec8bbe166b992e8c1f0c264819178baf5c007d3caab0103916b1cdbca93057ddd2943bcbb2ed6f7723eed3534d89af35bf57cfe995fc56ccad6830652185613662a0f67b8491eb82352b0c8c68b39e2383fc9735bdaaa4858819bf255d894b8069f67da00bbf093945f4b8ba286e1471015af50c665db44eb6865a1aa11209cac12c19e37daa0d3a4cf5cf7dbb32c3b208f379c75cbcdf4eadf85bf11700c948626d1a866c4c0adad942d1b0d4d46caebe20cf836bd9ff2a5d4c1cc2e67023081d4272dab41dd15f7f67ef0e6d4038d56318544a9a837a51a556f20e1b897c745c2bf8e0179481ee15f8d00e723fefa9edcb1bbce2cc1f18b1a937883aabd400f6f8b5e15bf9cb3c39453623f58339119c297a2a2ee0787ec4b12457cb0e94041baf15b8ff909a865ab8756db6510a599bf8d143cc606ae2566aa71ddb099c648e6f3c2f58808caff586efed0b16dcf2c8c32b9b708730385a96659b6fce409961cdd3ab3d6a4aa785e8fd7c40269037cd6ab93e8d48a23facd628ca91676bc91a877a082530ec4150bf1e31e881c09b813903fc8bd7538c6b8cdba9c6a7f07f45ee3028c2a6aeae6930a04670abcb98675946cda4bc718d4f9f27f824d8dd5df493e273c31c9cdaa048e26bdcff5808204084467c73f9013108c8707b659ffb9b93f5555f9836517bba33caf96f75696040bc60caf085fd5bd6c2c446dd518ee752167dfc636ab44d58bed021a658d953709e11914dd043912f9953ea1c3e5f4684e6ddaeca0dbaf54f002a227eb37edf062e4f6dd56860c0653be4c4f75c7a67d40bedb062cc6d799cc6fbbdc55dce29beeadaba859e1da45dd8ab841018b97e86d98724af135f4470ee7eb2eb7daca9df0a7e5b5da36169439596ac980472cc09366c1becbfc62e8039765430ad1b20ea6110047c0d89b981243fc759b8234c77a4989e675998b76809445d54cb847bdd13fdd3672c36b82865fddfcc3c259ee4f9427cade5c781f84950664959eea8e9a048d1775b4350fa63937de6ba29343a3401f089ae3606f08673b34f2798ef156b42123ee6d449d7bb5adbc2b7d7d68ac718acd5db5f403d97a798a37c0fafb6e58257eb8dc7f05a2ba54054ae662bd65b423f729d5fab703e06a422f1a177aadf7151191bb301f75d2bb39ef30faad7e635d3efc38e699073ae24a4a13a457390feb9df8b8e16b115019781d644c6efa046d475c1c762ea71de3ecd31a4e2f8a108679d1dd80068d8a98d46ff895bbf97fa0ee5d40e19deb15bf7b6e1906bad5cf2cc86cf1620c5ae148fe0a52b8a5d19b9a0911c0310996e2f56945c80f66813251fdeafb43f1d036902adfe2d424f8851582e1eb21fa594a6247ff3f9904813769b2eed92adbab2dab7c212746622f1c589bdc8ac027f3c5c153e723b524836bfd9541619b2d2aa4d2bb3be6d872f4e2de8b0ed4014fa1e2bf6975b2f311d486bc52e632aee6835cc8076017093822aa89ee4c63e00e2c5f894a86cceb6b02cd7c62883ce6873f0b97c341e8d456d003f19977a977d45b2468b390863406748b13669ed2f653c64ca8b7623889c5be18d522493c8e6d58146a7f06b39c555013184b4b952f70c3e5bfa6d2c8839c9c65fc2755813271092fb2830c5de8f79fef5df7756947345c3764344315974779b1d6598f448a2f7b15be9ddbeceea6537c44f3eaec050f944f24f7f4dcb17dfef37c4232de4351d8bb654805a980c4ccdd3af0b8f77f5b54c413e28e2c002c6b43f635ae50c12e721171b54ed335ec742f6319747723d36bef3a5dd61beb2f6d0c52732fccd71bc1707a1f7382a4a9b1d118514f7a5687ae7fde822ccfa042a6fc509baf5e51337b89c05da54ba6a43dafc1ffa382738747633df5ec19108fab22d51646e8aceeef7a40893dd0d92a0bf127df06bc46f28908e093300deee077fe59711b92d5cfcd3fd7e0785d33f71ee3978efec9423028ac1ab4666870020a730b4120464d33502d27eec0e9423093b2778ee385a0a743c468a1b3070a675bfd2d592f5b034e6e3e82af48e76cd056644ece1171af9c7f958edb01275be8aac1c4a010611aac2c773bf811430c3c8d856d4e20b3e5d1db7090d4409a6479446ccc973099956b70133f82fc95e6d5fc970b6326115d1b0fba0f7b08067906880e3975daa581b9b660598026e6826c62bf0a3c6e72bda852529b590148a79c2fc753fa3c7075b0d111c6dec2c5d4227a0fae3e74d93afd612706e284ebadd5c0964b9d8a63a9664c09b72519a13d94fba8b71677e216d793c1357c6f1543ce0ce97d35b4070be8d448725645231fc366345140a3ca78592b964637f7829656a1a7d2e3f1dfd86e90b2f6a08151d472cf86d6937e06cd8c3ee7f169d794401334854bee385a5afccbac77f927e70d7ef36e63cb2b25afca9a17f6e5e8d1ad2be82c86980b9fdf08b1e914948e9e7dabfcc20c10363fd1de92ec1d0dc095dfa8a18aacc2cf5224ef008df39d3129910469a164410178cdf1a3d447839893dc5f86d3f09ba7b140d931ce58eb68f6adcc83cc022361dfb41508da584d5cd8638060df023c1bb2c39663b79aa002820c737a69b70cf1bccbc974e5f3540ac3f23f6571455d8f3608ac0ed3dd54b5bad8220524b0bf15ad36145687678e4104d1aaa04d1be7e34ffed8470de0a9ff14bff49f253bccaf0a8eba68b3cb9e26e666c6c0b7d0009ff4fef4e2ebf3ec829d26d40663a67566656620d2cda7e2b991e17f95a49d1c7b2bf5bc077e702e3ab0be4b045b6552aa7f4ce304ac3fa80615c8857d4ddf7f5d01f47c0a71f76e421bc8cb0f7fbb84624ed007b4cb9d7bfdfea0871f07042d568372210cbadadef603c6735b18198f4870f968b3692fa6a43c91ec0196fa939d05c63c2f2584906a046333c4d5a2020c574dbf6ebfa95a12c4df578e476d12847c8ce18d43d369906814f106cd2d22ef01839f06f48cdb3a67fc50e04601e8a586273bddb468efeaf198efd771d46b6fec5118671e4ee65b2fc161303e998a659667ed75af078e74c3713369ab8a8a59a1f7502ae367e2f1a6b0eebcf31f783d24bb60cb2e928e64fa08e1d66ef644dad9f2601ce9ce78d73072e76b510031d910cbb3298af3c084f725dc274dbb15fe9102887d3dfae0447d7fcb358190195ab668212c770285cc26d82fb9cf8d8249d65a201350a9eef0d9726a73e163ad643abc60baab6c1ecdd1716f0df59a83342310b108fd23b1733616faf8a70751e9a36cc5142b62568eb2bb845b646226b94ccf6153250a6c6118304c5f4a6eada2ec60ffa9835337f88f6fdb1a9b58a352565b1ecdaa5094ff7011b57bb290fd7414f0842dfa91bd04cc6b65f2448703607378cb1025370083c6511fc3c70c7c1cb0c583e6bf09b6dd08fc452d3262fb6a19ac6fc7cdfd6466d844d1126be8a63d1c375b07c5836965fe1a2a577300103408ee2f45bf839c51573a6d531bcc857be3860033fa3d8333b052780b1b1116de1025223b911834c555a1c62943349f65fc694a955ee7f9f403711ff0704e4024e970d0d5f816286b33ec98e689d02d7748cb3d0c063d2b8b17ad78cd1a57ca12cb5a8e2d618e26b0ae500714ab1216ae29e01830792c5d6231811b555df9b1d03687717153d4696b563739d13ae4c027aec9d9d34b944d882ae33fcc1bcfd0fc72f314cb46fe503698178fe21fc8ae26c57767d8a8894798c5e36dcd9542d96d6e7ca4ee5ca036fa95b96dfcecd8240927afa7f095b5a205e7fa15f565ca18d46a7034428f191b7bbc608a8c9b45e778f6fb39b39b378ecd7ac94a9f408ed7a7c0bc3d5093a1bdd1614efa70595ca5975c44cbe3adae6d8ee94611de27863c72cdfbed1e81e099b3f41183b7a5a676ad46fd9ad1421f8df837880b71b4cd8d405c4d942efc40d8a0a5f12d1210e88b65df493bfe67867a237315c207ddceab0669a8e726da7f155cfefe18cace4b31dade7e84192122121dd68a7854cfc011a8b1b15e552a5a70dae1fdb79de67753683857b3e873d8a18f4486f1095fbd2d9682cedc2a7c398427fa94572130c8340ab8d2adc03765cb22a80824857da2fcd237768065fc5afc7eafbfdc14d5e62c7dd93390d051b22fe8b61a14d25e139270d98903cdfb0117ba3533596063136c04346a19b896c712abea987b25e53e973dd315c9e4042f36fedf3044fd303d03ec9845e938e151a58a3dc7403ff85cbd180f2755f11bae3234df0909d9eba3a3ec3850e1ad2838bea2af393fb519a0109059b6c568cea786653d099b77595a0aaa77b8555ab166a6d6bad049a113201d94530e8efb8104d7d15de168ddd462498e8d6adbe2645eb2c5ae770934dbe42a42ff00b9153255e768bf9cb4bb886e250e12fc47bc3d244e744c00ed27ec269b3cd8082dacfe9c44d57bdd6d7ad98c357662bfdae368a8c59cd473617178fadaff6447000f4e5e157a72af1cd097945126b24fa6f9915abd2effca15390d87b762044ba5e4a5ba1e8620f0ec4fb61f3b4039b35d4f614989419e7500742f340fdef849355fb7e7fdaac27a7b9bed93655cb43aee716d4cc8fce14cfeda3f0aaa71683c3445d8174c3b43aac42d171c66e5c8b718eba6bdb3192ef4fe6fa303780e5c6c9371c744b37b0239c6dafb0119078b936961a05d74002e87a9db053102cb66b508e9fb6f380725b540a3feb8b87ad91ff23ca9ef92c1186ec0906410d4168a7b885dc3fd11a7d7312eaeda5291703f9ad1fc35bf4e1ef0cb0e688915af825ba72a44fd15c5f4657913fd10778b7a861407943279bfb7eb3ee54a4884939e1e4ae6b4627d05c49a"}}}}}, 0x1064) syz_open_procfs$userns(r0, &(0x7f00000010c0)) 05:53:48 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() socket$inet6_udp(0xa, 0x2, 0x0) 05:53:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x25}]}, 0x28}}, 0x0) [ 3373.691841] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3373.743041] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60040020", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:48 executing program 0: mlockall(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)="85f808000356577c2341aa8d", 0xc) fork() setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x33, @private=0xa010100, 0x4e21, 0x1, 'fo\x00', 0x0, 0x87, 0x3}, 0x2c) syz_open_procfs$userns(0x0, 0x0) [ 3373.983940] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3374.054265] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x0) 05:53:49 executing program 2: mlockall(0x7) mlockall(0x3) fork() fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, &(0x7f0000000000)) 05:53:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:49 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:53:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='V\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x0) 05:53:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60020000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:51 executing program 0: mlockall(0x3) fork() 05:53:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60030000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}]}, 0x28}}, 0x0) 05:53:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3377.409779] nla_parse: 8 callbacks suppressed [ 3377.409788] netlink: 69 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3377.492613] netlink: 69 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:53 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:53:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='Z\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60050000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf}]}, 0x28}}, 0x0) 05:53:53 executing program 2: mlockall(0x7) mlockall(0x3) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e00)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6fd3da2d26073c6968888508d150c3436b3ee23b835236c2d07e07fb67f0f4937cd601992e3ac20d48ec5f596f8b244d635019fafc2ab3d943adafd4c257453c70c897f2057da22e37f0c437c0ec62fdaedb7aede2fb3bcc5832532ec4172b5bd2eedfbb9e4bdca4ae4f6916c7e9e39a5ba827e2f05d0ea2e087253a7fdefaa0cf18f5c871b990c4ee553f6c00ad1f8641a1f37b7378d8963fe059196cd0ea6309000e8fd94c3aac57f16524f333cf6961615fb04407023843025fd506c93bbdca8788d70a7d52661f6024063394f7840e5fc52759668f7b2dfc900ac2bf6b31d6b500", @ANYRES16=r1, @ANYBLOB="00042abd7000fbdbdf250600000008000400ac1414aa1400060076657468305f746f5f7465616d0000001400060076657468300000000000000000000000d8fb40564317f536db98b89fd4a164c43deaf596d8795dce4b9a9d435f7a91e516fa9c1c8ef088199197b02dae07628b800d3e1f4fa44c372d23a2f1b9fa6bccc706ac9c2e1ce468558d58a63d662780f6447ea98aebe7fcf508"], 0x44}}, 0x0) fork() r2 = fork() syz_open_procfs$userns(r2, &(0x7f00000000c0)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) [ 3378.418472] netlink: 70 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3378.515644] netlink: 70 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60060000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3378.889794] netlink: 71 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3378.978977] netlink: 71 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\n\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf0}]}, 0x28}}, 0x0) 05:53:54 executing program 0: fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) [ 3380.052335] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3380.147618] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="600f0000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`H\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300}]}, 0x28}}, 0x0) 05:53:56 executing program 0: mlockall(0x3) fork() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0xf9b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r2 = fork() ptrace$pokeuser(0x6, r2, 0x1f, 0x80000000) syz_open_procfs$userns(0x0, 0x0) 05:53:57 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:53:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`L\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700}]}, 0x28}}, 0x0) 05:53:57 executing program 2: mlockall(0x7) mlockall(0x2) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:53:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=']\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='``\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3382.726678] netlink: 73 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3382.812626] netlink: 73 bytes leftover after parsing attributes in process `syz-executor.4'. 05:53:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`h\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:53:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`l\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:53:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf00}]}, 0x28}}, 0x0) [ 3383.134593] netlink: 74 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3383.224189] netlink: 74 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3384.622737] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 3384.636003] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3384.664202] CPU: 1 PID: 4699 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3384.671954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3384.681302] Call Trace: [ 3384.683894] dump_stack+0x1fc/0x2ef [ 3384.687553] dump_header+0x15d/0xc3f [ 3384.691266] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3384.696366] ? ___ratelimit+0x319/0x590 [ 3384.700345] oom_kill_process.cold+0x10/0x692 [ 3384.704843] ? lock_downgrade+0x720/0x720 [ 3384.709010] ? check_preemption_disabled+0x41/0x280 [ 3384.714045] out_of_memory+0x34d/0x1390 [ 3384.718024] ? oom_killer_disable+0x270/0x270 [ 3384.722521] ? mutex_trylock+0x15f/0x1a0 [ 3384.726591] __alloc_pages_nodemask+0x23a2/0x2890 [ 3384.731440] ? find_get_entry+0x4cd/0x8a0 [ 3384.735595] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3384.740480] alloc_pages_current+0x193/0x2a0 [ 3384.744890] filemap_fault+0x146e/0x2180 [ 3384.748956] ext4_filemap_fault+0x84/0xb0 [ 3384.753099] __do_fault+0x10b/0x4b0 [ 3384.756724] __handle_mm_fault+0x273b/0x41c0 [ 3384.761130] ? vm_insert_page+0x9c0/0x9c0 [ 3384.765288] ? mnt_set_expiry+0x260/0x260 [ 3384.769451] ? check_preemption_disabled+0x41/0x280 [ 3384.774471] handle_mm_fault+0x436/0xb10 [ 3384.778537] __do_page_fault+0x68e/0xd60 [ 3384.782602] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3384.787614] ? spurious_fault+0x840/0x840 [ 3384.791758] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3384.796599] ? page_fault+0x8/0x30 [ 3384.800138] page_fault+0x1e/0x30 [ 3384.803601] RIP: 0033:0x7faec836d510 [ 3384.807318] Code: Bad RIP value. [ 3384.810674] RSP: 002b:00007ffca3fc6928 EFLAGS: 00010293 [ 3384.816031] RAX: 00000000ffffffea RBX: 0000561baa6d2900 RCX: fffffffffffffe50 [ 3384.823298] RDX: 0000561baa6d2900 RSI: 0000561baa6d1e60 RDI: 0000561baa6d2900 [ 3384.830563] RBP: 0000000000000064 R08: 0000561ba8722670 R09: 0000000000000070 [ 3384.837827] R10: 0000000000000063 R11: 0000000000000206 R12: 0000561baa6d1e60 [ 3384.845090] R13: 00000000ffffff9c R14: 00007ffca3fc6980 R15: 0000000000000063 [ 3384.858747] Mem-Info: [ 3384.861455] active_anon:279843 inactive_anon:964420 isolated_anon:0 [ 3384.861455] active_file:13 inactive_file:40 isolated_file:0 [ 3384.861455] unevictable:65351 dirty:0 writeback:0 unstable:0 [ 3384.861455] slab_reclaimable:20017 slab_unreclaimable:160644 [ 3384.861455] mapped:58087 shmem:19290 pagetables:73385 bounce:0 [ 3384.861455] free:25234 free_pcp:206 free_cma:0 [ 3384.965299] Node 0 active_anon:917044kB inactive_anon:531500kB active_file:136kB inactive_file:168kB unevictable:237168kB isolated(anon):0kB isolated(file):128kB mapped:223352kB dirty:0kB writeback:0kB shmem:34284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3385.063154] Node 1 active_anon:202328kB inactive_anon:3326680kB active_file:8kB inactive_file:0kB unevictable:24236kB isolated(anon):0kB isolated(file):0kB mapped:9296kB dirty:0kB writeback:0kB shmem:42876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3385.122681] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:220kB active_file:0kB inactive_file:0kB unevictable:2104kB writepending:0kB present:15992kB managed:15908kB mlocked:2104kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3385.160050] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3385.167342] Node 0 DMA32 free:43504kB min:35996kB low:44992kB high:53988kB active_anon:914888kB inactive_anon:522512kB active_file:40kB inactive_file:432kB unevictable:235064kB writepending:0kB present:3129332kB managed:2763456kB mlocked:235064kB kernel_stack:22432kB pagetables:52232kB bounce:0kB free_pcp:1588kB local_pcp:280kB free_cma:0kB [ 3385.203580] lowmem_reserve[]: 0 0 1 1 1 [ 3385.207888] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3385.239453] lowmem_reserve[]: 0 0 0 0 0 [ 3385.246574] Node 1 Normal free:56992kB min:53876kB low:67344kB high:80812kB active_anon:202328kB inactive_anon:3322080kB active_file:8kB inactive_file:0kB unevictable:24236kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24236kB kernel_stack:76544kB pagetables:241160kB bounce:0kB free_pcp:1748kB local_pcp:260kB free_cma:0kB [ 3385.283465] lowmem_reserve[]: 0 0 0 0 0 [ 3385.287733] Node 0 DMA: 12*4kB (UE) 9*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 3385.309303] Node 0 DMA32: 5061*4kB (UME) 2157*8kB (UME) 218*16kB (UME) 63*32kB (UME) 12*64kB (UME) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44028kB [ 3385.330204] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3385.348338] Node 1 Normal: 432*4kB (UM) 113*8kB (UM) 963*16kB (UM) 1219*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57048kB [ 3385.366669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3385.376381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3385.389946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3385.399080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3385.420276] 24875 total pagecache pages [ 3385.424279] 0 pages in swap cache [ 3385.427809] Swap cache stats: add 0, delete 0, find 0/0 [ 3385.440265] Free swap = 0kB [ 3385.443292] Total swap = 0kB [ 3385.450351] 2097051 pages RAM [ 3385.453456] 0 pages HighMem/MovableOnly [ 3385.457422] 369648 pages reserved [ 3385.473797] 0 pages cma reserved [ 3385.483003] Out of memory: Kill process 2537 (syz-executor.0) score 1013 or sacrifice child 05:54:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`t\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:01 executing program 0: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x53d5ebadc0d42586}, 0x48800) mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) 05:54:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4da1}]}, 0x28}}, 0x0) 05:54:01 executing program 2: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000040)) 05:54:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:01 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3386.528684] netlink: 75 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3386.583677] netlink: 75 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`z\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa14d}]}, 0x28}}, 0x0) 05:54:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000300", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:01 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000500", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf000}]}, 0x28}}, 0x0) 05:54:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000600", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3387.858580] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3387.884642] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3387.890762] CPU: 1 PID: 2656 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3387.898567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3387.907919] Call Trace: [ 3387.910519] dump_stack+0x1fc/0x2ef [ 3387.914164] dump_header+0x15d/0xc3f [ 3387.917919] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3387.923027] ? ___ratelimit+0x319/0x590 [ 3387.927010] oom_kill_process.cold+0x10/0x692 [ 3387.931515] ? check_preemption_disabled+0x41/0x280 [ 3387.936550] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3387.942272] out_of_memory+0x1072/0x1390 [ 3387.946345] ? oom_killer_disable+0x270/0x270 [ 3387.950848] ? mutex_trylock+0x15f/0x1a0 [ 3387.954918] __alloc_pages_nodemask+0x23a2/0x2890 [ 3387.959872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3387.964719] ? __lock_acquire+0x6de/0x3ff0 [ 3387.968967] ? mark_held_locks+0xf0/0xf0 [ 3387.973047] alloc_pages_vma+0xf2/0x780 [ 3387.977030] do_anonymous_page+0x7c2/0x1be0 [ 3387.981362] ? __pte_alloc+0x340/0x340 [ 3387.985249] ? __put_compound_page+0xc0/0xc0 [ 3387.989662] ? mark_held_locks+0xf0/0xf0 [ 3387.993734] __handle_mm_fault+0x227a/0x41c0 [ 3387.998149] ? vm_insert_page+0x9c0/0x9c0 [ 3388.002336] ? check_preemption_disabled+0x41/0x280 [ 3388.007363] handle_mm_fault+0x436/0xb10 [ 3388.011471] __get_user_pages+0x6f0/0x1710 [ 3388.015714] ? follow_page_mask+0x1d00/0x1d00 [ 3388.020217] ? check_preemption_disabled+0x41/0x280 [ 3388.025248] populate_vma_page_range+0x200/0x290 [ 3388.030039] __mm_populate+0x1ea/0x350 [ 3388.033930] ? populate_vma_page_range+0x290/0x290 [ 3388.038850] ? do_mlock+0x6b0/0x6b0 [ 3388.042463] ? security_capable+0x8f/0xc0 [ 3388.046613] __se_sys_mlockall+0x362/0x4e0 [ 3388.050856] do_syscall_64+0xf9/0x620 [ 3388.054673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3388.059858] RIP: 0033:0x4665f9 [ 3388.063052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3388.081953] RSP: 002b:00007f17a6089188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3388.089751] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3388.097019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3388.104297] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3388.111571] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3388.118844] R13: 00007fff161510cf R14: 00007f17a6089300 R15: 0000000000022000 [ 3388.687486] Mem-Info: [ 3388.711371] active_anon:279875 inactive_anon:961122 isolated_anon:0 [ 3388.711371] active_file:46 inactive_file:18 isolated_file:0 [ 3388.711371] unevictable:66155 dirty:6 writeback:0 unstable:0 [ 3388.711371] slab_reclaimable:20100 slab_unreclaimable:163102 [ 3388.711371] mapped:55262 shmem:19290 pagetables:73437 bounce:0 [ 3388.711371] free:25173 free_pcp:1 free_cma:0 [ 3388.845133] Node 0 active_anon:917228kB inactive_anon:522420kB active_file:56kB inactive_file:52kB unevictable:240556kB isolated(anon):0kB isolated(file):0kB mapped:215216kB dirty:0kB writeback:0kB shmem:34288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3388.898776] Node 1 active_anon:202272kB inactive_anon:3322072kB active_file:0kB inactive_file:4kB unevictable:24128kB isolated(anon):0kB isolated(file):0kB mapped:5896kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3388.928240] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:220kB active_file:0kB inactive_file:0kB unevictable:2104kB writepending:0kB present:15992kB managed:15908kB mlocked:2104kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3388.955815] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3388.966472] Node 0 DMA32 free:35516kB min:35996kB low:44992kB high:53988kB active_anon:915072kB inactive_anon:522200kB active_file:56kB inactive_file:152kB unevictable:238452kB writepending:0kB present:3129332kB managed:2763456kB mlocked:238452kB kernel_stack:22592kB pagetables:52416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3388.999484] lowmem_reserve[]: 0 0 1 1 1 [ 3389.003667] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3389.061695] lowmem_reserve[]: 0 0 0 0 0 [ 3389.074596] Node 1 Normal free:53628kB min:53876kB low:67344kB high:80812kB active_anon:202272kB inactive_anon:3322072kB active_file:0kB inactive_file:4kB unevictable:24128kB writepending:0kB present:4194304kB managed:4128248kB mlocked:24128kB kernel_stack:76544kB pagetables:241184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3389.169113] lowmem_reserve[]: 0 0 0 0 0 [ 3389.187687] Node 0 DMA: 12*4kB (UE) 7*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 3389.253268] Node 0 DMA32: 3726*4kB (UE) 993*8kB (UME) 361*16kB (UME) 159*32kB (UME) 36*64kB (UME) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36144kB [ 3389.315708] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3389.357373] Node 1 Normal: 23*4kB (U) 0*8kB 929*16kB (UM) 1218*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53932kB [ 3389.405565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3389.434306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3389.465042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3389.498672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3389.508560] 22026 total pagecache pages [ 3389.529103] 0 pages in swap cache [ 3389.553557] Swap cache stats: add 0, delete 0, find 0/0 [ 3389.572705] Free swap = 0kB [ 3389.582044] Total swap = 0kB [ 3389.591808] 2097051 pages RAM [ 3389.598287] 0 pages HighMem/MovableOnly [ 3389.606806] 369648 pages reserved [ 3389.613671] 0 pages cma reserved [ 3389.623675] Out of memory (oom_kill_allocating_task): Kill process 2656 (syz-executor.2) score 0 or sacrifice child [ 3389.660300] Killed process 2656 (syz-executor.2) total-vm:93384kB, anon-rss:23012kB, file-rss:40200kB, shmem-rss:0kB [ 3389.684738] oom_reaper: reaped process 2656 (syz-executor.2), now anon-rss:23012kB, file-rss:40192kB, shmem-rss:0kB [ 3390.121494] ieee802154 phy1 wpan1: encryption failed: -22 05:54:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\a\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:05 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60040020", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:05 executing program 2: mlockall(0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'wg0\x00'}) fork() mlockall(0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x9}, 0x8) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:54:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x30000}]}, 0x28}}, 0x0) 05:54:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\n\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:05 executing program 0: mlockall(0x3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0xd8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x8000) fork() syz_open_procfs$userns(0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@afid={'afid', 0x3d, 0x383b}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}, {@access_any}, {@uname={'uname', 0x3d, 'system_u:object_r:hostname_exec_t:s0\x00'}}, {@posixacl}, {@version_9p2000}, {@access_user}, {@privport}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd705be741bd44f9a1d767ddd600fcdbdf250b00000006000a3667b984000c000600010000000200000000000000ff0000", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x11) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) 05:54:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000f00", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00 \x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60020000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:06 executing program 3: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x34000}]}, 0x28}}, 0x0) 05:54:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00H\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60030000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3392.503838] syz-executor.3 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3392.569366] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3392.611892] CPU: 1 PID: 2801 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3392.619719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3392.629332] Call Trace: [ 3392.631930] dump_stack+0x1fc/0x2ef [ 3392.635559] dump_header+0x15d/0xc3f [ 3392.639272] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3392.644388] ? ___ratelimit+0x319/0x590 [ 3392.648367] oom_kill_process.cold+0x10/0x692 [ 3392.652867] ? check_preemption_disabled+0x41/0x280 [ 3392.657891] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3392.663174] out_of_memory+0x1072/0x1390 [ 3392.667240] ? oom_killer_disable+0x270/0x270 [ 3392.671740] ? mutex_trylock+0x15f/0x1a0 [ 3392.675805] __alloc_pages_nodemask+0x23a2/0x2890 [ 3392.680658] ? find_get_entry+0x4cd/0x8a0 [ 3392.684819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3392.689687] alloc_pages_current+0x193/0x2a0 [ 3392.694099] filemap_fault+0x146e/0x2180 [ 3392.698177] ext4_filemap_fault+0x84/0xb0 [ 3392.702327] __do_fault+0x10b/0x4b0 [ 3392.705959] __handle_mm_fault+0x273b/0x41c0 [ 3392.710371] ? vm_insert_page+0x9c0/0x9c0 [ 3392.714535] ? check_preemption_disabled+0x41/0x280 [ 3392.719583] handle_mm_fault+0x436/0xb10 [ 3392.723651] __get_user_pages+0x6f0/0x1710 [ 3392.727901] ? follow_page_mask+0x1d00/0x1d00 [ 3392.732400] ? check_preemption_disabled+0x41/0x280 [ 3392.737427] populate_vma_page_range+0x200/0x290 [ 3392.742188] __mm_populate+0x1ea/0x350 [ 3392.746080] ? populate_vma_page_range+0x290/0x290 [ 3392.751011] ? do_mlock+0x6b0/0x6b0 [ 3392.754638] ? security_capable+0x8f/0xc0 [ 3392.758795] __se_sys_mlockall+0x362/0x4e0 [ 3392.763041] do_syscall_64+0xf9/0x620 [ 3392.766846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3392.772034] RIP: 0033:0x4665f9 [ 3392.775235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3392.794144] RSP: 002b:00007fa4071a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3392.801849] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3392.809115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3392.816382] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3392.823649] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3392.830916] R13: 00007ffc396d572f R14: 00007fa4071a7300 R15: 0000000000022000 [ 3393.768845] Mem-Info: [ 3393.775531] active_anon:280040 inactive_anon:961146 isolated_anon:0 [ 3393.775531] active_file:40 inactive_file:0 isolated_file:0 [ 3393.775531] unevictable:65039 dirty:9 writeback:0 unstable:0 [ 3393.775531] slab_reclaimable:20220 slab_unreclaimable:163830 [ 3393.775531] mapped:55651 shmem:19290 pagetables:73537 bounce:0 [ 3393.775531] free:25031 free_pcp:0 free_cma:0 [ 3394.015993] Node 0 active_anon:917776kB inactive_anon:522528kB active_file:164kB inactive_file:0kB unevictable:239264kB isolated(anon):0kB isolated(file):0kB mapped:219880kB dirty:36kB writeback:0kB shmem:34296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3394.218046] Node 1 active_anon:202384kB inactive_anon:3322056kB active_file:0kB inactive_file:8kB unevictable:20948kB isolated(anon):0kB isolated(file):0kB mapped:2624kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3394.282572] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:220kB active_file:0kB inactive_file:0kB unevictable:2076kB writepending:0kB present:15992kB managed:15908kB mlocked:2076kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.312982] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3394.359632] Node 0 DMA32 free:35524kB min:35996kB low:44992kB high:53988kB active_anon:915620kB inactive_anon:522308kB active_file:156kB inactive_file:8kB unevictable:237188kB writepending:36kB present:3129332kB managed:2763456kB mlocked:237188kB kernel_stack:22656kB pagetables:52604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.548511] lowmem_reserve[]: 0 0 1 1 1 [ 3394.578631] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.758350] lowmem_reserve[]: 0 0 0 0 0 [ 3394.779782] Node 1 Normal free:53808kB min:53876kB low:67344kB high:80812kB active_anon:202384kB inactive_anon:3322056kB active_file:0kB inactive_file:8kB unevictable:20948kB writepending:0kB present:4194304kB managed:4128248kB mlocked:20948kB kernel_stack:76576kB pagetables:241248kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.839305] lowmem_reserve[]: 0 0 0 0 0 [ 3394.844966] Node 0 DMA: 13*4kB (UME) 8*8kB (UM) 7*16kB (UME) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10980kB [ 3394.943424] Node 0 DMA32: 3558*4kB (UME) 1295*8kB (UE) 224*16kB (UE) 168*32kB (UME) 42*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36240kB [ 3394.994562] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3395.019502] Node 1 Normal: 14*4kB (UM) 29*8kB (M) 919*16kB (UM) 1214*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53840kB [ 3395.093580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.113614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3395.140353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.149220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3395.241546] 22545 total pagecache pages [ 3395.245557] 0 pages in swap cache [ 3395.249017] Swap cache stats: add 0, delete 0, find 0/0 [ 3395.273234] Free swap = 0kB [ 3395.278444] Total swap = 0kB [ 3395.281527] 2097051 pages RAM [ 3395.284627] 0 pages HighMem/MovableOnly [ 3395.310130] 369648 pages reserved [ 3395.313605] 0 pages cma reserved [ 3395.316983] Out of memory (oom_kill_allocating_task): Kill process 2801 (syz-executor.3) score 0 or sacrifice child [ 3395.358030] Killed process 2801 (syz-executor.3) total-vm:93384kB, anon-rss:236kB, file-rss:37628kB, shmem-rss:0kB [ 3395.381139] oom_reaper: reaped process 2801 (syz-executor.3), now anon-rss:236kB, file-rss:37620kB, shmem-rss:0kB 05:54:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:10 executing program 2: mlockall(0x3d7e44458f6c8f09) mlockall(0x3) fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:54:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400300}]}, 0x28}}, 0x0) 05:54:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00L\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:10 executing program 0: mlockall(0x3) fork() timer_gettime(0x0, &(0x7f0000000000)) syz_open_procfs$userns(0x0, 0x0) 05:54:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60050000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00`\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:10 executing program 3: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf0ffff}]}, 0x28}}, 0x0) 05:54:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00h\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60060000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1000000}]}, 0x28}}, 0x0) 05:54:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00l\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3397.038372] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3397.088268] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3397.153326] CPU: 0 PID: 2820 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3397.161148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3397.170501] Call Trace: [ 3397.173102] dump_stack+0x1fc/0x2ef [ 3397.176742] dump_header+0x15d/0xc3f [ 3397.180472] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3397.185587] ? ___ratelimit+0x319/0x590 [ 3397.189570] oom_kill_process.cold+0x10/0x692 [ 3397.194071] ? check_preemption_disabled+0x41/0x280 [ 3397.199098] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3397.204383] out_of_memory+0x1072/0x1390 [ 3397.208469] ? oom_killer_disable+0x270/0x270 [ 3397.212985] ? mutex_trylock+0x15f/0x1a0 [ 3397.217062] __alloc_pages_nodemask+0x23a2/0x2890 [ 3397.221937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3397.226788] ? __lock_acquire+0x6de/0x3ff0 [ 3397.231057] ? mark_held_locks+0xf0/0xf0 [ 3397.235137] alloc_pages_vma+0xf2/0x780 [ 3397.239122] do_anonymous_page+0x7c2/0x1be0 [ 3397.243459] ? __pte_alloc+0x340/0x340 [ 3397.247343] ? __put_compound_page+0xc0/0xc0 [ 3397.251759] ? mark_held_locks+0xf0/0xf0 [ 3397.255832] __handle_mm_fault+0x227a/0x41c0 [ 3397.260252] ? vm_insert_page+0x9c0/0x9c0 [ 3397.264419] ? check_preemption_disabled+0x41/0x280 [ 3397.269460] handle_mm_fault+0x436/0xb10 [ 3397.273530] __get_user_pages+0x6f0/0x1710 [ 3397.277780] ? follow_page_mask+0x1d00/0x1d00 [ 3397.282295] populate_vma_page_range+0x200/0x290 [ 3397.287060] __mm_populate+0x1ea/0x350 [ 3397.290965] ? populate_vma_page_range+0x290/0x290 [ 3397.295906] ? do_mlock+0x6b0/0x6b0 [ 3397.299539] ? security_capable+0x8f/0xc0 [ 3397.303699] __se_sys_mlockall+0x362/0x4e0 [ 3397.307940] do_syscall_64+0xf9/0x620 [ 3397.311751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3397.316938] RIP: 0033:0x4665f9 [ 3397.320143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.339051] RSP: 002b:00007f17a60aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3397.346765] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3397.354046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3397.361317] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3397.368618] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3397.375932] R13: 00007fff161510cf R14: 00007f17a60aa300 R15: 0000000000022000 [ 3397.914434] Mem-Info: [ 3397.918499] active_anon:280120 inactive_anon:961129 isolated_anon:0 [ 3397.918499] active_file:64 inactive_file:85 isolated_file:11 [ 3397.918499] unevictable:65117 dirty:0 writeback:0 unstable:0 [ 3397.918499] slab_reclaimable:20291 slab_unreclaimable:163259 [ 3397.918499] mapped:56145 shmem:19290 pagetables:73537 bounce:0 [ 3397.918499] free:25252 free_pcp:148 free_cma:0 [ 3397.962032] Node 0 active_anon:917820kB inactive_anon:522464kB active_file:132kB inactive_file:28kB unevictable:244844kB isolated(anon):0kB isolated(file):44kB mapped:222316kB dirty:0kB writeback:0kB shmem:34300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3397.999015] Node 1 active_anon:202660kB inactive_anon:3322052kB active_file:20kB inactive_file:16kB unevictable:15624kB isolated(anon):0kB isolated(file):0kB mapped:1964kB dirty:0kB writeback:0kB shmem:42860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3398.028258] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:220kB active_file:0kB inactive_file:0kB unevictable:2076kB writepending:0kB present:15992kB managed:15908kB mlocked:2076kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.057379] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3398.062966] Node 0 DMA32 free:35584kB min:35996kB low:44992kB high:53988kB active_anon:915664kB inactive_anon:522244kB active_file:100kB inactive_file:152kB unevictable:242768kB writepending:0kB present:3129332kB managed:2763456kB mlocked:242768kB kernel_stack:22720kB pagetables:52624kB bounce:0kB free_pcp:1612kB local_pcp:436kB free_cma:0kB [ 3398.094167] lowmem_reserve[]: 0 0 1 1 1 [ 3398.098468] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.125348] lowmem_reserve[]: 0 0 0 0 0 [ 3398.129730] Node 1 Normal free:53680kB min:53876kB low:67344kB high:80812kB active_anon:202660kB inactive_anon:3322052kB active_file:20kB inactive_file:16kB unevictable:15624kB writepending:0kB present:4194304kB managed:4128248kB mlocked:15624kB kernel_stack:76608kB pagetables:241228kB bounce:0kB free_pcp:392kB local_pcp:248kB free_cma:0kB [ 3398.162513] lowmem_reserve[]: 0 0 0 0 0 [ 3398.166545] Node 0 DMA: 13*4kB (UME) 8*8kB (UM) 7*16kB (UME) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10980kB [ 3398.182340] Node 0 DMA32: 3312*4kB (UME) 1003*8kB (UME) 236*16kB (UME) 285*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35768kB [ 3398.197025] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3398.208206] Node 1 Normal: 0*4kB 0*8kB 941*16kB (U) 1209*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53744kB [ 3398.220933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3398.229987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3398.238557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3398.248983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3398.257604] 22723 total pagecache pages [ 3398.261845] 0 pages in swap cache [ 3398.265424] Swap cache stats: add 0, delete 0, find 0/0 [ 3398.270953] Free swap = 0kB [ 3398.274112] Total swap = 0kB [ 3398.277208] 2097051 pages RAM [ 3398.281262] 0 pages HighMem/MovableOnly [ 3398.285893] 369648 pages reserved [ 3398.290076] 0 pages cma reserved [ 3398.294161] Out of memory (oom_kill_allocating_task): Kill process 2820 (syz-executor.2) score 0 or sacrifice child [ 3398.305412] Killed process 2819 (syz-executor.2) total-vm:93252kB, anon-rss:23788kB, file-rss:39236kB, shmem-rss:0kB [ 3398.323589] oom_reaper: reaped process 2819 (syz-executor.2), now anon-rss:24072kB, file-rss:40192kB, shmem-rss:0kB 05:54:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00t\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2000000}]}, 0x28}}, 0x0) 05:54:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:15 executing program 2: mlockall(0x6) mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) sched_getscheduler(r0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:54:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00z\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\b\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3000000}]}, 0x28}}, 0x0) 05:54:15 executing program 3: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="600f0000", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:15 executing program 0: mlockall(0x3) r0 = fork() tkill(r0, 0x40) syz_open_procfs$userns(0x0, 0x0) 05:54:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`H\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60004003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7000000}]}, 0x28}}, 0x0) 05:54:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`L\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3401.830563] syz-executor.1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3401.843688] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3401.850177] CPU: 0 PID: 2973 Comm: syz-executor.1 Not tainted 4.19.205-syzkaller #0 [ 3401.858061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3401.867407] Call Trace: [ 3401.870004] dump_stack+0x1fc/0x2ef [ 3401.873624] dump_header+0x15d/0xc3f [ 3401.877330] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3401.882419] ? ___ratelimit+0x319/0x590 [ 3401.886380] oom_kill_process.cold+0x10/0x692 [ 3401.890870] ? check_preemption_disabled+0x41/0x280 [ 3401.895885] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3401.901148] out_of_memory+0x1072/0x1390 [ 3401.905207] ? oom_killer_disable+0x270/0x270 [ 3401.909697] ? mutex_trylock+0x15f/0x1a0 [ 3401.913758] __alloc_pages_nodemask+0x23a2/0x2890 [ 3401.918606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3401.923634] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3401.928749] ? lock_downgrade+0x720/0x720 [ 3401.932891] ? lock_acquire+0x170/0x3c0 [ 3401.936867] alloc_pages_current+0x193/0x2a0 [ 3401.941271] pte_alloc_one+0x16/0x190 [ 3401.945070] __pte_alloc+0x21/0x340 [ 3401.948688] do_anonymous_page+0xff4/0x1be0 [ 3401.953022] ? __pte_alloc+0x340/0x340 [ 3401.956905] ? mark_held_locks+0xf0/0xf0 [ 3401.960965] ? lock_downgrade+0x720/0x720 [ 3401.965108] __handle_mm_fault+0x227a/0x41c0 [ 3401.969517] ? vm_insert_page+0x9c0/0x9c0 [ 3401.973683] ? check_preemption_disabled+0x41/0x280 [ 3401.978692] handle_mm_fault+0x436/0xb10 [ 3401.982739] __do_page_fault+0x68e/0xd60 [ 3401.986790] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3401.991807] ? spurious_fault+0x840/0x840 [ 3401.995947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3402.000788] ? page_fault+0x8/0x30 [ 3402.004345] page_fault+0x1e/0x30 [ 3402.007788] RIP: 0033:0x461d7b [ 3402.010975] Code: 80 fa 01 77 3b 72 05 0f b6 0e 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 48 8b 4c 16 f8 48 8b 36 <48> 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 [ 3402.029863] RSP: 002b:00007ffdb4b44238 EFLAGS: 00010206 [ 3402.035314] RAX: 0000000020000040 RBX: 000000000056cb00 RCX: 004c424c4e555f4c [ 3402.042576] RDX: 000000000000000b RSI: 4c4e555f4c424c4e RDI: 0000000020000040 [ 3402.049828] RBP: 00007ffdb4b442f8 R08: 0000000000970000 R09: 0000038fa9a999ef [ 3402.057082] R10: 0017d7c6b538582c R11: 0000000000000001 R12: 000000000033e815 [ 3402.064344] R13: 00000000000003e8 R14: 000000000056bf80 R15: 000000000033e80f [ 3402.080021] Mem-Info: [ 3402.082463] active_anon:280004 inactive_anon:961128 isolated_anon:0 [ 3402.082463] active_file:58 inactive_file:86 isolated_file:24 [ 3402.082463] unevictable:65962 dirty:0 writeback:0 unstable:0 [ 3402.082463] slab_reclaimable:20401 slab_unreclaimable:162597 [ 3402.082463] mapped:59140 shmem:19290 pagetables:73535 bounce:0 [ 3402.082463] free:25025 free_pcp:169 free_cma:0 [ 3402.117701] Node 0 active_anon:917564kB inactive_anon:522460kB active_file:52kB inactive_file:444kB unevictable:250844kB isolated(anon):0kB isolated(file):96kB mapped:228300kB dirty:0kB writeback:0kB shmem:34300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3402.152613] Node 1 active_anon:202452kB inactive_anon:3322052kB active_file:44kB inactive_file:8kB unevictable:13004kB isolated(anon):0kB isolated(file):0kB mapped:7960kB dirty:0kB writeback:0kB shmem:42860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3402.182708] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:220kB active_file:0kB inactive_file:4kB unevictable:2104kB writepending:0kB present:15992kB managed:15908kB mlocked:2104kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3402.210668] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3402.215705] Node 0 DMA32 free:35708kB min:35996kB low:44992kB high:53988kB active_anon:915408kB inactive_anon:522240kB active_file:316kB inactive_file:384kB unevictable:248740kB writepending:0kB present:3129332kB managed:2763456kB mlocked:248740kB kernel_stack:22688kB pagetables:52580kB bounce:0kB free_pcp:1548kB local_pcp:124kB free_cma:0kB [ 3402.247922] lowmem_reserve[]: 0 0 1 1 1 [ 3402.251961] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3402.279189] lowmem_reserve[]: 0 0 0 0 0 [ 3402.283177] Node 1 Normal free:53256kB min:53876kB low:67344kB high:80812kB active_anon:202452kB inactive_anon:3322052kB active_file:44kB inactive_file:8kB unevictable:13004kB writepending:0kB present:4194304kB managed:4128248kB mlocked:13004kB kernel_stack:76640kB pagetables:241412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3402.313659] lowmem_reserve[]: 0 0 0 0 0 [ 3402.317747] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 5*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 3402.333671] Node 0 DMA32: 3168*4kB (UME) 1143*8kB (UE) 165*16kB (UE) 305*32kB (UE) 21*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35560kB [ 3402.349649] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3402.360916] Node 1 Normal: 22*4kB (U) 16*8kB (UM) 931*16kB (UM) 1200*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53512kB [ 3402.374412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3402.383427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3402.392385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3402.401800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3402.410579] 25865 total pagecache pages [ 3402.414669] 0 pages in swap cache [ 3402.418196] Swap cache stats: add 0, delete 0, find 0/0 [ 3402.423683] Free swap = 0kB [ 3402.426696] Total swap = 0kB [ 3402.430121] 2097051 pages RAM [ 3402.433227] 0 pages HighMem/MovableOnly [ 3402.437188] 369648 pages reserved [ 3402.440690] 0 pages cma reserved [ 3402.445165] Out of memory (oom_kill_allocating_task): Kill process 2973 (syz-executor.1) score 0 or sacrifice child [ 3402.457041] Killed process 2973 (syz-executor.1) total-vm:93252kB, anon-rss:108kB, file-rss:34872kB, shmem-rss:0kB [ 3402.469606] oom_reaper: reaped process 2973 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3402.524132] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3402.535630] in:imklog cpuset=/ mems_allowed=0-1 [ 3402.541730] CPU: 1 PID: 1245 Comm: in:imklog Not tainted 4.19.205-syzkaller #0 [ 3402.549093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3402.558441] Call Trace: [ 3402.561031] dump_stack+0x1fc/0x2ef [ 3402.564664] dump_header+0x15d/0xc3f [ 3402.568385] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3402.573489] ? ___ratelimit+0x319/0x590 [ 3402.577470] oom_kill_process.cold+0x10/0x692 [ 3402.581972] ? check_preemption_disabled+0x41/0x280 [ 3402.586998] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3402.592280] out_of_memory+0x1072/0x1390 [ 3402.596348] ? oom_killer_disable+0x270/0x270 [ 3402.600847] ? mutex_trylock+0x15f/0x1a0 [ 3402.604908] __alloc_pages_nodemask+0x23a2/0x2890 [ 3402.609757] ? find_get_entry+0x4cd/0x8a0 [ 3402.613914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3402.618792] alloc_pages_current+0x193/0x2a0 [ 3402.623202] filemap_fault+0x146e/0x2180 [ 3402.627278] ext4_filemap_fault+0x84/0xb0 [ 3402.631429] __do_fault+0x10b/0x4b0 [ 3402.635067] __handle_mm_fault+0x273b/0x41c0 [ 3402.639484] ? vm_insert_page+0x9c0/0x9c0 [ 3402.643637] ? lock_downgrade+0x720/0x720 [ 3402.647799] ? check_preemption_disabled+0x41/0x280 [ 3402.652823] handle_mm_fault+0x436/0xb10 [ 3402.656923] __do_page_fault+0x68e/0xd60 [ 3402.660994] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3402.666013] ? spurious_fault+0x840/0x840 [ 3402.670163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3402.675012] ? page_fault+0x8/0x30 [ 3402.678553] page_fault+0x1e/0x30 [ 3402.682004] RIP: 0033:0x7f9a3e0e658e [ 3402.685727] Code: Bad RIP value. [ 3402.689085] RSP: 002b:00007f9a3d696470 EFLAGS: 00010207 [ 3402.694445] RAX: 0000000000000034 RBX: 00007f9a3d6964a0 RCX: 0000000000000000 [ 3402.701710] RDX: 0000000000000000 RSI: 00007f9a3d6964ac RDI: 00007f9a3d6964a0 [ 3402.708984] RBP: 00007f9a3d6964ac R08: 00007f9a3ee73940 R09: 0000000000000000 [ 3402.716254] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007f9a3d696da0 [ 3402.723696] R13: 00000000fffff7e7 R14: 0000000000001f9f R15: 00007f9a3d696e34 [ 3402.747860] Mem-Info: [ 3402.755730] active_anon:280004 inactive_anon:961128 isolated_anon:0 [ 3402.755730] active_file:114 inactive_file:70 isolated_file:27 [ 3402.755730] unevictable:65962 dirty:0 writeback:0 unstable:0 [ 3402.755730] slab_reclaimable:20401 slab_unreclaimable:162260 [ 3402.755730] mapped:59215 shmem:19290 pagetables:73498 bounce:0 [ 3402.755730] free:25312 free_pcp:295 free_cma:0 [ 3402.804305] Node 0 active_anon:917564kB inactive_anon:522460kB active_file:164kB inactive_file:336kB unevictable:250844kB isolated(anon):0kB isolated(file):0kB mapped:228600kB dirty:0kB writeback:0kB shmem:34300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3402.839615] Node 1 active_anon:202448kB inactive_anon:3322052kB active_file:32kB inactive_file:16kB unevictable:13008kB isolated(anon):0kB isolated(file):0kB mapped:7964kB dirty:0kB writeback:0kB shmem:42860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3402.920260] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:220kB active_file:8kB inactive_file:0kB unevictable:2104kB writepending:0kB present:15992kB managed:15908kB mlocked:2104kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3402.956622] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3402.962504] Node 0 DMA32 free:36152kB min:35996kB low:44992kB high:53988kB active_anon:915404kB inactive_anon:522240kB active_file:892kB inactive_file:0kB unevictable:249244kB writepending:0kB present:3129332kB managed:2763456kB mlocked:249244kB kernel_stack:22688kB pagetables:52580kB bounce:0kB free_pcp:1140kB local_pcp:256kB free_cma:0kB [ 3403.278961] lowmem_reserve[]: 0 0 1 1 1 [ 3403.319223] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3403.542351] lowmem_reserve[]: 0 0 0 0 0 [ 3403.577432] Node 1 Normal free:53716kB min:53876kB low:67344kB high:80812kB active_anon:202448kB inactive_anon:3322052kB active_file:32kB inactive_file:16kB unevictable:13008kB writepending:0kB present:4194304kB managed:4128248kB mlocked:13008kB kernel_stack:76576kB pagetables:241264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3403.870042] lowmem_reserve[]: 0 0 0 0 0 [ 3403.889145] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 5*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 3403.968544] Node 0 DMA32: 3023*4kB (UME) 1443*8kB (UME) 187*16kB (UE) 285*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36324kB [ 3404.030354] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3404.054155] Node 1 Normal: 53*4kB (U) 24*8kB (UM) 932*16kB (UM) 1202*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53780kB [ 3404.115534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 05:54:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='``\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3404.194053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3404.263391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3404.335450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3404.382055] 25982 total pagecache pages 05:54:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000340", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:19 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3404.418804] 0 pages in swap cache [ 3404.422296] Swap cache stats: add 0, delete 0, find 0/0 [ 3404.427658] Free swap = 0kB [ 3404.482154] Total swap = 0kB [ 3404.505393] 2097051 pages RAM [ 3404.517432] 0 pages HighMem/MovableOnly [ 3404.534002] 369648 pages reserved [ 3404.547582] 0 pages cma reserved [ 3404.568831] Out of memory (oom_kill_allocating_task): Kill process 1245 (in:imklog) score 0 or sacrifice child [ 3404.596669] Killed process 1234 (rsyslogd) total-vm:254332kB, anon-rss:692kB, file-rss:0kB, shmem-rss:0kB [ 3404.636120] oom_reaper: reaped process 1234 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:54:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf000000}]}, 0x28}}, 0x0) 05:54:19 executing program 2: timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000080)) mlockall(0x7) mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:54:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`h\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:19 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x200, 0xc0800) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 05:54:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3405.415977] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3405.460968] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`l\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3405.885878] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3405.994707] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3407.186655] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3407.287271] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3407.322446] CPU: 0 PID: 8143 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3407.330268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.339618] Call Trace: [ 3407.342212] dump_stack+0x1fc/0x2ef [ 3407.345849] dump_header+0x15d/0xc3f [ 3407.349572] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3407.354678] ? ___ratelimit+0x319/0x590 [ 3407.358658] oom_kill_process.cold+0x10/0x692 [ 3407.363157] ? check_preemption_disabled+0x41/0x280 [ 3407.368185] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3407.373463] out_of_memory+0x1072/0x1390 [ 3407.377532] ? oom_killer_disable+0x270/0x270 [ 3407.382031] ? mutex_trylock+0x15f/0x1a0 [ 3407.386101] __alloc_pages_nodemask+0x23a2/0x2890 [ 3407.390965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3407.395812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3407.400670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3407.406127] ? mark_held_locks+0xf0/0xf0 [ 3407.410279] ? ____cache_alloc_node+0x156/0x1d0 [ 3407.414971] ? cache_grow_begin+0x64/0x8a0 [ 3407.419210] cache_grow_begin+0xa4/0x8a0 [ 3407.423367] fallback_alloc+0x213/0x2e0 [ 3407.427347] kmem_cache_alloc+0x1e4/0x370 [ 3407.431501] getname_flags+0xce/0x590 [ 3407.435305] user_path_mountpoint_at+0x23/0x40 [ 3407.439889] ksys_umount+0x156/0x1070 [ 3407.443799] ? do_unlinkat+0x130/0x660 [ 3407.447692] ? __detach_mounts+0x470/0x470 [ 3407.451932] ? strncpy_from_user+0x2a2/0x350 [ 3407.456346] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3407.461712] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3407.466730] __x64_sys_umount+0x50/0x70 [ 3407.470710] do_syscall_64+0xf9/0x620 [ 3407.474862] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3407.480049] RIP: 0033:0x467a57 [ 3407.483243] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3407.502315] RSP: 002b:00007ffc396d4878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3407.510021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000467a57 [ 3407.517282] RDX: 00007ffc396d494d RSI: 0000000000000002 RDI: 00007ffc396d4940 [ 3407.524545] RBP: 00007ffc396d4940 R08: 00000000ffffffff R09: 00007ffc396d4710 [ 3407.531812] R10: 0000000001b4388b R11: 0000000000000246 R12: 00000000004bee90 [ 3407.539083] R13: 00007ffc396d5a10 R14: 0000000001b43810 R15: 00007ffc396d5a50 [ 3407.576554] Mem-Info: [ 3407.608432] active_anon:279929 inactive_anon:968197 isolated_anon:0 [ 3407.608432] active_file:7 inactive_file:27 isolated_file:0 [ 3407.608432] unevictable:59734 dirty:0 writeback:0 unstable:0 [ 3407.608432] slab_reclaimable:20619 slab_unreclaimable:161662 [ 3407.608432] mapped:55078 shmem:19290 pagetables:73529 bounce:0 [ 3407.608432] free:25163 free_pcp:62 free_cma:0 [ 3407.628976] Bluetooth: hci4: command 0x0406 tx timeout [ 3407.880151] Node 0 active_anon:917276kB inactive_anon:549048kB active_file:96kB inactive_file:4kB unevictable:229484kB isolated(anon):0kB isolated(file):0kB mapped:216968kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1259520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3407.910745] Node 1 active_anon:202440kB inactive_anon:3323740kB active_file:0kB inactive_file:4kB unevictable:9452kB isolated(anon):0kB isolated(file):0kB mapped:3348kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3408.150599] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3408.418347] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3408.423410] Node 0 DMA32 free:35868kB min:35996kB low:44992kB high:53988kB active_anon:915120kB inactive_anon:548772kB active_file:96kB inactive_file:0kB unevictable:227436kB writepending:0kB present:3129332kB managed:2763456kB mlocked:227436kB kernel_stack:22496kB pagetables:52696kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 3408.730474] lowmem_reserve[]: 0 0 1 1 1 [ 3408.734488] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3408.857641] lowmem_reserve[]: 0 0 0 0 0 [ 3408.861739] Node 1 Normal free:53996kB min:53876kB low:67344kB high:80812kB active_anon:202424kB inactive_anon:3323724kB active_file:576kB inactive_file:536kB unevictable:8352kB writepending:0kB present:4194304kB managed:4128248kB mlocked:8376kB kernel_stack:76576kB pagetables:241128kB bounce:0kB free_pcp:104kB local_pcp:36kB free_cma:0kB [ 3408.892064] lowmem_reserve[]: 0 0 0 0 0 [ 3408.896052] Node 0 DMA: 11*4kB (UE) 7*8kB (U) 5*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10964kB [ 3408.911817] Node 0 DMA32: 2912*4kB (UME) 1364*8kB (UME) 228*16kB (UME) 315*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36864kB [ 3408.926251] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3408.937390] Node 1 Normal: 0*4kB 1*8kB (M) 948*16kB (U) 1193*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53352kB [ 3408.950813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3408.959999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3409.035381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3409.056708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3409.075340] 21322 total pagecache pages [ 3409.080094] 0 pages in swap cache [ 3409.083547] Swap cache stats: add 0, delete 0, find 0/0 [ 3409.090858] Free swap = 0kB [ 3409.108275] Total swap = 0kB [ 3409.111313] 2097051 pages RAM [ 3409.114416] 0 pages HighMem/MovableOnly [ 3409.157064] 369648 pages reserved [ 3409.170404] 0 pages cma reserved [ 3409.193125] Out of memory (oom_kill_allocating_task): Kill process 8143 (syz-executor.3) score 0 or sacrifice child [ 3409.241919] Killed process 1719 (syz-executor.3) total-vm:93384kB, anon-rss:36772kB, file-rss:34976kB, shmem-rss:0kB [ 3409.299285] oom_reaper: reaped process 1719 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:54:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:24 executing program 2: mlockall(0x7) mlockall(0x7) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:54:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`t\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9effffff}]}, 0x28}}, 0x0) 05:54:24 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3409.581921] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`z\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3409.637205] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa14d0000}]}, 0x28}}, 0x0) 05:54:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000300", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3409.804294] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3409.856052] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf0ffffff}]}, 0x28}}, 0x0) 05:54:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000500", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3410.739843] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3410.831655] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:26 executing program 0: mlockall(0x3) fork() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000009ae0b04e12805346324080623371f91ede33a77978f1", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250100000006000a004e20000008000600ffffffff060001004e2400000400050004000500060001004e220000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = fork() sched_getscheduler(r1) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) syz_open_procfs$userns(0x0, 0x0) 05:54:26 executing program 2: mlockall(0x7) mlockall(0x4) r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000000)) 05:54:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000600", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3411.464546] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3411.525803] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\a\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfffff000}]}, 0x28}}, 0x0) 05:54:26 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:26 executing program 2: mlockall(0x7) mlockall(0x3) r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000000)) [ 3412.000831] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3412.104224] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000f00", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00 \x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3412.358503] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3412.480113] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00H\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffff7f}]}, 0x28}}, 0x0) [ 3412.754434] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3414.051865] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3414.113755] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3414.204139] CPU: 1 PID: 3273 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3414.211880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3414.221677] Call Trace: [ 3414.224286] dump_stack+0x1fc/0x2ef [ 3414.227925] dump_header+0x15d/0xc3f [ 3414.231698] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3414.236807] ? ___ratelimit+0x319/0x590 [ 3414.240880] oom_kill_process.cold+0x10/0x692 [ 3414.245389] ? check_preemption_disabled+0x41/0x280 [ 3414.250429] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3414.255802] out_of_memory+0x1072/0x1390 [ 3414.259878] ? oom_killer_disable+0x270/0x270 [ 3414.264382] ? mutex_trylock+0x15f/0x1a0 [ 3414.268482] __alloc_pages_nodemask+0x23a2/0x2890 [ 3414.273346] ? find_get_entry+0x4cd/0x8a0 [ 3414.277512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3414.282389] alloc_pages_current+0x193/0x2a0 [ 3414.286805] filemap_fault+0x146e/0x2180 [ 3414.290890] ext4_filemap_fault+0x84/0xb0 [ 3414.295065] __do_fault+0x10b/0x4b0 [ 3414.298711] __handle_mm_fault+0x273b/0x41c0 [ 3414.303131] ? vm_insert_page+0x9c0/0x9c0 [ 3414.307407] ? vfs_statx+0x182/0x210 [ 3414.311144] ? check_preemption_disabled+0x41/0x280 [ 3414.316187] handle_mm_fault+0x436/0xb10 [ 3414.320263] __do_page_fault+0x68e/0xd60 [ 3414.324338] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3414.329362] ? spurious_fault+0x840/0x840 [ 3414.333518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3414.338371] ? page_fault+0x8/0x30 [ 3414.341921] page_fault+0x1e/0x30 [ 3414.345475] RIP: 0033:0x7faec8efe2a0 [ 3414.349213] Code: Bad RIP value. [ 3414.352575] RSP: 002b:00007ffca3fc1578 EFLAGS: 00010206 [ 3414.357942] RAX: 00000000ffffffff RBX: 00007ffca3fc1ac0 RCX: 0000000000000000 [ 3414.365215] RDX: 00007faec868dea0 RSI: 00007ffca3fc1ac0 RDI: 0000000000000000 [ 3414.372487] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3414.379758] R10: 00000000000000de R11: 00007faec8efe2a0 R12: 0000000000000000 [ 3414.387029] R13: 0000000000000000 R14: 0000561baa6d4220 R15: 00000000ffffffff [ 3415.177336] Mem-Info: [ 3415.179869] active_anon:280341 inactive_anon:965621 isolated_anon:0 [ 3415.179869] active_file:104 inactive_file:116 isolated_file:32 [ 3415.179869] unevictable:61840 dirty:0 writeback:0 unstable:0 [ 3415.179869] slab_reclaimable:20930 slab_unreclaimable:160514 [ 3415.179869] mapped:55150 shmem:19290 pagetables:73629 bounce:0 [ 3415.179869] free:25445 free_pcp:499 free_cma:0 [ 3415.245375] Node 0 active_anon:918040kB inactive_anon:536100kB active_file:88kB inactive_file:316kB unevictable:239820kB isolated(anon):0kB isolated(file):12kB mapped:216668kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3415.345234] Node 1 active_anon:203324kB inactive_anon:3326384kB active_file:16kB inactive_file:24kB unevictable:7440kB isolated(anon):0kB isolated(file):0kB mapped:3932kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3415.447764] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.507787] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3415.512851] Node 0 DMA32 free:36280kB min:35996kB low:44992kB high:53988kB active_anon:915884kB inactive_anon:535724kB active_file:1076kB inactive_file:1144kB unevictable:237552kB writepending:0kB present:3129332kB managed:2763456kB mlocked:237968kB kernel_stack:22720kB pagetables:52996kB bounce:0kB free_pcp:692kB local_pcp:60kB free_cma:0kB [ 3415.687768] lowmem_reserve[]: 0 0 1 1 1 [ 3415.691818] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.759470] lowmem_reserve[]: 0 0 0 0 0 [ 3415.763960] Node 1 Normal free:56184kB min:53876kB low:67344kB high:80812kB active_anon:203324kB inactive_anon:3326384kB active_file:516kB inactive_file:396kB unevictable:4236kB writepending:0kB present:4194304kB managed:4128248kB mlocked:4212kB kernel_stack:76736kB pagetables:241372kB bounce:0kB free_pcp:2728kB local_pcp:1408kB free_cma:0kB [ 3415.806105] lowmem_reserve[]: 0 0 0 0 0 [ 3415.810632] Node 0 DMA: 11*4kB (UE) 7*8kB (U) 5*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10964kB [ 3415.833978] Node 0 DMA32: 2297*4kB (UME) 2039*8kB (UME) 289*16kB (UME) 349*32kB (UME) 7*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41740kB [ 3415.855205] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3415.872578] Node 1 Normal: 154*4kB (UM) 318*8kB (UM) 978*16kB (U) 1186*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56760kB [ 3415.957495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3415.986998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3416.017357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3416.048450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3416.057059] 22067 total pagecache pages [ 3416.077756] 0 pages in swap cache [ 3416.081241] Swap cache stats: add 0, delete 0, find 0/0 [ 3416.106936] Free swap = 0kB [ 3416.110028] Total swap = 0kB [ 3416.119109] 2097051 pages RAM [ 3416.122232] 0 pages HighMem/MovableOnly [ 3416.126201] 369648 pages reserved [ 3416.160178] 0 pages cma reserved [ 3416.189436] Out of memory (oom_kill_allocating_task): Kill process 3273 (systemd-udevd) score 0 or sacrifice child [ 3416.229873] Killed process 3273 (systemd-udevd) total-vm:45484kB, anon-rss:2848kB, file-rss:0kB, shmem-rss:0kB [ 3416.262158] oom_reaper: reaped process 3273 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:54:31 executing program 0: mlockall(0x6) fork() syz_open_procfs$userns(0x0, 0x0) 05:54:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00L\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffff9e}]}, 0x28}}, 0x0) 05:54:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00001800", @ANYRES16=0x0, @ANYBLOB="10002abd70001421d38914c80900000000000000050005000400000001acf658be000000000000000000008b042292c07d4b3ad1d53712eeb9166057e9ff26789dc448e13aebf7925c7c9992511a6088fa3d56"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) read$usbmon(0xffffffffffffffff, &(0x7f0000000080), 0x0) mlockall(0x7) mlockall(0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000140)="d2f344faba8ebb966ec05dd4d83f502bc220759c760d82c20021d57f417068acb01427c331f6d516630a847e94cc799251ee786701c6e60b8e14f3ec104d4be79b9754f1c1775ef134e80ff8aa316e5726c0fbcba922d26cd899b42f053c5f36634d756f0e5efc550cf14fe5e6c6395187a2ce893cefb0960308148f957da4db930b4bace8f64cdc479ce1744c3059c8ae0853cb961cac3d16248cd63d6a95d7dae0edcc78db15e26db487e3961e2c307ee5915d45ed23132a470bb19c192df18e2c3858d1bb1a1fe58efe6a68dd6a15bcd55ec2cd36f46b49746749f75d40f7547eb201fc7307e5e8a6c6c546feca3ad2", 0xf1, 0x1, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) 05:54:31 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00`\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3417.036632] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:31 executing program 0: mlockall(0x3) r0 = fork() mlockall(0x2) syz_open_dev$vcsn(&(0x7f0000000000), 0x8001, 0x189080) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x1}) syz_open_procfs$userns(r0, 0x0) [ 3417.110670] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfffffff0}]}, 0x28}}, 0x0) 05:54:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00h\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00l\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3417.343620] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3000000000000}]}, 0x28}}, 0x0) [ 3417.421812] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00t\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3417.690887] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00z\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3417.794735] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3418.227294] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3418.325469] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3418.359326] CPU: 0 PID: 32280 Comm: syz-executor.4 Not tainted 4.19.205-syzkaller #0 [ 3418.367234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3418.376590] Call Trace: [ 3418.379186] dump_stack+0x1fc/0x2ef [ 3418.382818] dump_header+0x15d/0xc3f [ 3418.386535] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3418.391720] ? ___ratelimit+0x319/0x590 [ 3418.395700] oom_kill_process.cold+0x10/0x692 [ 3418.400210] ? check_preemption_disabled+0x41/0x280 [ 3418.405236] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3418.410569] out_of_memory+0x1072/0x1390 [ 3418.414638] ? oom_killer_disable+0x270/0x270 [ 3418.419141] ? mutex_trylock+0x15f/0x1a0 [ 3418.423207] __alloc_pages_nodemask+0x23a2/0x2890 [ 3418.428058] ? find_get_entry+0x4cd/0x8a0 [ 3418.432216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3418.437099] alloc_pages_current+0x193/0x2a0 [ 3418.441512] filemap_fault+0x146e/0x2180 [ 3418.445583] ext4_filemap_fault+0x84/0xb0 [ 3418.449728] __do_fault+0x10b/0x4b0 [ 3418.453453] __handle_mm_fault+0x273b/0x41c0 [ 3418.457861] ? debug_object_free+0x1cc/0x380 [ 3418.462296] ? vm_insert_page+0x9c0/0x9c0 [ 3418.466459] ? check_preemption_disabled+0x41/0x280 [ 3418.471477] handle_mm_fault+0x436/0xb10 [ 3418.475558] __do_page_fault+0x68e/0xd60 [ 3418.479625] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3418.484643] ? spurious_fault+0x840/0x840 [ 3418.488793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3418.493642] ? page_fault+0x8/0x30 [ 3418.497180] page_fault+0x1e/0x30 [ 3418.500629] RIP: 0033:0x413397 [ 3418.503819] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 d8 00 00 00 48 8b 05 34 20 09 01 48 69 8c 24 d0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 d1 1f [ 3418.522804] RSP: 002b:00007ffc05984ad0 EFLAGS: 00010206 [ 3418.528166] RAX: 0000001b2bc20000 RBX: 0000000000000141 RCX: 0000000000342790 [ 3418.535438] RDX: 00000000003429a9 RSI: 00007ffc05984ba0 RDI: 00007ffc05984a8c [ 3418.542705] RBP: 00007ffc05984b3c R08: 00007ffc059c3000 R09: 0000039424d97a75 [ 3418.549970] R10: 001005c0eef6f294 R11: 0000000000000001 R12: 0000000000000032 [ 3418.557261] R13: 000000000034280b R14: 0000000000000000 R15: 00007ffc05984ba0 [ 3419.078053] Mem-Info: [ 3419.080519] active_anon:280641 inactive_anon:965580 isolated_anon:0 [ 3419.080519] active_file:31 inactive_file:19 isolated_file:0 [ 3419.080519] unevictable:62655 dirty:0 writeback:0 unstable:0 [ 3419.080519] slab_reclaimable:21106 slab_unreclaimable:160063 [ 3419.080519] mapped:56123 shmem:19289 pagetables:73671 bounce:0 [ 3419.080519] free:25113 free_pcp:0 free_cma:0 [ 3419.166550] Node 0 active_anon:918296kB inactive_anon:535944kB active_file:124kB inactive_file:72kB unevictable:244412kB isolated(anon):0kB isolated(file):0kB mapped:223844kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3419.236755] Node 1 active_anon:204268kB inactive_anon:3326376kB active_file:0kB inactive_file:4kB unevictable:6208kB isolated(anon):0kB isolated(file):0kB mapped:648kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3419.346562] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3419.414154] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3419.509767] Node 0 DMA32 free:35604kB min:35996kB low:44992kB high:53988kB active_anon:916140kB inactive_anon:535668kB active_file:160kB inactive_file:28kB unevictable:242176kB writepending:0kB present:3129332kB managed:2763456kB mlocked:242176kB kernel_stack:23008kB pagetables:53292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3419.541129] lowmem_reserve[]: 0 0 1 1 1 [ 3419.545140] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3419.648878] lowmem_reserve[]: 0 0 0 0 0 [ 3419.652892] Node 1 Normal free:53872kB min:53876kB low:67344kB high:80812kB active_anon:204268kB inactive_anon:3326376kB active_file:0kB inactive_file:4kB unevictable:6208kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6208kB kernel_stack:76608kB pagetables:241244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3419.736967] lowmem_reserve[]: 0 0 0 0 0 [ 3419.780650] Node 0 DMA: 11*4kB (UE) 8*8kB (U) 5*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 3419.849329] Node 0 DMA32: 573*4kB (UME) 1979*8kB (UE) 431*16kB (UE) 338*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35836kB [ 3419.901555] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3419.996555] Node 1 Normal: 32*4kB (M) 46*8kB (UM) 970*16kB (UM) 1183*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53872kB [ 3420.160287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3420.241286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3420.319809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3420.410160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3420.487316] 22714 total pagecache pages [ 3420.491321] 0 pages in swap cache [ 3420.494764] Swap cache stats: add 0, delete 0, find 0/0 [ 3420.551580] Free swap = 0kB [ 3420.554622] Total swap = 0kB [ 3420.615011] 2097051 pages RAM [ 3420.650311] 0 pages HighMem/MovableOnly [ 3420.654305] 369648 pages reserved [ 3420.722978] 0 pages cma reserved [ 3420.726386] Out of memory (oom_kill_allocating_task): Kill process 32280 (syz-executor.4) score 0 or sacrifice child [ 3420.845767] Killed process 3378 (syz-executor.4) total-vm:93120kB, anon-rss:104kB, file-rss:34884kB, shmem-rss:0kB [ 3420.957760] oom_reaper: reaped process 3378 (syz-executor.4), now anon-rss:0kB, file-rss:34116kB, shmem-rss:0kB [ 3420.996883] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3421.121308] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3421.163779] CPU: 1 PID: 3361 Comm: syz-executor.5 Not tainted 4.19.205-syzkaller #0 [ 3421.171605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.180967] Call Trace: [ 3421.183568] dump_stack+0x1fc/0x2ef [ 3421.187197] dump_header+0x15d/0xc3f [ 3421.190907] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3421.196118] ? ___ratelimit+0x319/0x590 [ 3421.200110] oom_kill_process.cold+0x10/0x692 [ 3421.204606] ? check_preemption_disabled+0x41/0x280 [ 3421.209627] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3421.214902] out_of_memory+0x1072/0x1390 [ 3421.218968] ? oom_killer_disable+0x270/0x270 [ 3421.223468] ? mutex_trylock+0x15f/0x1a0 [ 3421.227622] __alloc_pages_nodemask+0x23a2/0x2890 [ 3421.232484] ? find_get_entry+0x4cd/0x8a0 [ 3421.236639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3421.241512] alloc_pages_current+0x193/0x2a0 [ 3421.246012] filemap_fault+0x146e/0x2180 [ 3421.250093] ext4_filemap_fault+0x84/0xb0 [ 3421.254237] __do_fault+0x10b/0x4b0 [ 3421.257866] __handle_mm_fault+0x273b/0x41c0 [ 3421.262279] ? vm_insert_page+0x9c0/0x9c0 [ 3421.266441] ? check_preemption_disabled+0x41/0x280 [ 3421.271468] handle_mm_fault+0x436/0xb10 [ 3421.275537] __do_page_fault+0x68e/0xd60 [ 3421.279697] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3421.284710] ? spurious_fault+0x840/0x840 [ 3421.288855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3421.293697] ? page_fault+0x8/0x30 [ 3421.297237] page_fault+0x1e/0x30 [ 3421.300687] RIP: 0033:0x411e75 [ 3421.303877] Code: 50 ff ff 84 c0 74 16 48 8b 44 24 08 49 c1 e4 04 49 01 ec 41 c6 04 24 01 49 89 44 24 08 48 8b 53 10 4c 39 ea 73 59 4c 8d 4a 08 <48> 83 3a fd 4c 89 4b 10 0f 85 d4 fe ff ff 4d 39 e9 0f 82 74 ff ff [ 3421.322951] RSP: 002b:00007ffcbd215350 EFLAGS: 00010283 [ 3421.328319] RAX: 0000000000000028 RBX: 000000000056c0f0 RCX: 00000000004665f9 [ 3421.335582] RDX: 0000000000570640 RSI: 0000000000000080 RDI: 000000000056c0f0 [ 3421.342843] RBP: 00000000005680c0 R08: 000003945aafcd73 R09: 0000000000570648 [ 3421.350113] R10: 00007ffcbd215460 R11: 0000000000000246 R12: 0000000000342cbb [ 3421.357380] R13: 0000000000970000 R14: 000000000056bf80 R15: 0000000000342710 [ 3421.934367] Mem-Info: [ 3421.963810] active_anon:280662 inactive_anon:965580 isolated_anon:0 [ 3421.963810] active_file:90 inactive_file:50 isolated_file:20 [ 3421.963810] unevictable:62678 dirty:0 writeback:0 unstable:0 [ 3421.963810] slab_reclaimable:21112 slab_unreclaimable:159323 [ 3421.963810] mapped:56245 shmem:19289 pagetables:73650 bounce:0 [ 3421.963810] free:25033 free_pcp:561 free_cma:0 [ 3422.105488] Node 0 active_anon:918392kB inactive_anon:535944kB active_file:208kB inactive_file:60kB unevictable:244504kB isolated(anon):0kB isolated(file):64kB mapped:223920kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3422.167304] Node 1 active_anon:204256kB inactive_anon:3326376kB active_file:48kB inactive_file:20kB unevictable:6208kB isolated(anon):0kB isolated(file):16kB mapped:660kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3422.249212] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3422.342348] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3422.347468] Node 0 DMA32 free:36472kB min:35996kB low:44992kB high:53988kB active_anon:916136kB inactive_anon:535668kB active_file:156kB inactive_file:400kB unevictable:242064kB writepending:0kB present:3129332kB managed:2763456kB mlocked:242040kB kernel_stack:22752kB pagetables:53208kB bounce:0kB free_pcp:800kB local_pcp:384kB free_cma:0kB [ 3422.597207] lowmem_reserve[]: 0 0 1 1 1 [ 3422.601224] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3422.682373] lowmem_reserve[]: 0 0 0 0 0 [ 3422.695127] Node 1 Normal free:54444kB min:53876kB low:67344kB high:80812kB active_anon:204256kB inactive_anon:3326376kB active_file:152kB inactive_file:84kB unevictable:4696kB writepending:0kB present:4194304kB managed:4128248kB mlocked:4600kB kernel_stack:76640kB pagetables:241244kB bounce:0kB free_pcp:1408kB local_pcp:64kB free_cma:0kB [ 3422.727540] lowmem_reserve[]: 0 0 0 0 0 [ 3422.731537] Node 0 DMA: 11*4kB (UE) 8*8kB (U) 5*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 3422.747191] Node 0 DMA32: 755*4kB (UME) 2261*8kB (UME) 529*16kB (UME) 366*32kB (UME) 5*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41604kB [ 3422.777145] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3422.807179] Node 1 Normal: 71*4kB (UM) 191*8kB (UM) 974*16kB (UME) 1181*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55188kB [ 3422.900306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3422.924906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3423.053757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3423.108080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3423.117213] 24299 total pagecache pages [ 3423.121206] 0 pages in swap cache [ 3423.124657] Swap cache stats: add 0, delete 0, find 0/0 [ 3423.177647] Free swap = 0kB [ 3423.180674] Total swap = 0kB [ 3423.183686] 2097051 pages RAM [ 3423.186775] 0 pages HighMem/MovableOnly [ 3423.247132] 369648 pages reserved [ 3423.250630] 0 pages cma reserved [ 3423.253990] Out of memory (oom_kill_allocating_task): Kill process 3361 (syz-executor.5) score 0 or sacrifice child [ 3423.337510] Killed process 3361 (syz-executor.5) total-vm:93516kB, anon-rss:112kB, file-rss:34780kB, shmem-rss:0kB [ 3423.381263] oom_reaper: reaped process 3361 (syz-executor.5), now anon-rss:0kB, file-rss:33828kB, shmem-rss:0kB 05:54:38 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) 05:54:38 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x40030000000000}]}, 0x28}}, 0x0) 05:54:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:38 executing program 2: mlockall(0x7) mlockall(0x3) mlockall(0x2) fork() setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'caif0\x00', 0x2}, 0x18) r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000000)) 05:54:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60004003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3423.699853] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf0ffffffffffff}]}, 0x28}}, 0x0) [ 3423.808549] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000340", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3424.032548] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3424.109813] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000000000}]}, 0x28}}, 0x0) [ 3424.269015] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3424.282935] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3424.871398] modprobe invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3424.935960] modprobe cpuset=/ mems_allowed=0-1 [ 3424.964892] CPU: 1 PID: 3448 Comm: modprobe Not tainted 4.19.205-syzkaller #0 [ 3424.972274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.981627] Call Trace: [ 3424.984219] dump_stack+0x1fc/0x2ef [ 3424.987843] dump_header+0x15d/0xc3f [ 3424.991547] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3424.996631] ? ___ratelimit+0x319/0x590 [ 3425.000737] oom_kill_process.cold+0x10/0x692 [ 3425.005230] ? check_preemption_disabled+0x41/0x280 [ 3425.010282] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3425.015544] out_of_memory+0x1072/0x1390 [ 3425.019594] ? oom_killer_disable+0x270/0x270 [ 3425.024074] ? mutex_trylock+0x15f/0x1a0 [ 3425.028138] __alloc_pages_nodemask+0x23a2/0x2890 [ 3425.032974] ? find_get_entry+0x4cd/0x8a0 [ 3425.037112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3425.041957] alloc_pages_current+0x193/0x2a0 [ 3425.046356] filemap_fault+0x146e/0x2180 [ 3425.050428] ext4_filemap_fault+0x84/0xb0 [ 3425.054565] __do_fault+0x10b/0x4b0 [ 3425.058188] __handle_mm_fault+0x273b/0x41c0 [ 3425.062594] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3425.067177] ? vm_insert_page+0x9c0/0x9c0 [ 3425.071324] ? debug_object_active_state+0x254/0x330 [ 3425.076426] ? check_preemption_disabled+0x41/0x280 [ 3425.081460] handle_mm_fault+0x436/0xb10 [ 3425.085520] __do_page_fault+0x68e/0xd60 [ 3425.089578] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3425.094635] ? spurious_fault+0x840/0x840 [ 3425.098791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3425.103649] ? page_fault+0x8/0x30 [ 3425.107279] page_fault+0x1e/0x30 [ 3425.110729] RIP: 0033:0x7fb31ff2508e [ 3425.114433] Code: Bad RIP value. [ 3425.117785] RSP: 002b:00007fffec75d7c8 EFLAGS: 00010246 [ 3425.123140] RAX: 000055cd11f73118 RBX: 0000000000000010 RCX: 00007fb320195b00 [ 3425.130397] RDX: 0000000000000010 RSI: 000055cd10f4fe99 RDI: 000055cd11f73118 [ 3425.137653] RBP: 000055cd10f4fe99 R08: 00007fb320195bb8 R09: 0000000000000020 [ 3425.144908] R10: 0000000000000030 R11: 0000000000000206 R12: 000055cd11f73110 [ 3425.152163] R13: 0000000000000000 R14: 000055cd11157068 R15: 00054486b145c780 [ 3425.193292] Mem-Info: [ 3425.206575] active_anon:280678 inactive_anon:965594 isolated_anon:0 [ 3425.206575] active_file:33 inactive_file:0 isolated_file:0 [ 3425.206575] unevictable:62987 dirty:0 writeback:0 unstable:0 [ 3425.206575] slab_reclaimable:21139 slab_unreclaimable:159694 [ 3425.206575] mapped:56141 shmem:19289 pagetables:73677 bounce:0 [ 3425.206575] free:25049 free_pcp:0 free_cma:0 [ 3425.258914] Node 0 active_anon:918524kB inactive_anon:535996kB active_file:136kB inactive_file:0kB unevictable:245820kB isolated(anon):0kB isolated(file):0kB mapped:223660kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3425.300793] Node 1 active_anon:204188kB inactive_anon:3326380kB active_file:8kB inactive_file:0kB unevictable:6128kB isolated(anon):0kB isolated(file):0kB mapped:908kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3425.334891] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.371667] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3425.376717] Node 0 DMA32 free:35604kB min:35996kB low:44992kB high:53988kB active_anon:916368kB inactive_anon:535720kB active_file:84kB inactive_file:28kB unevictable:243692kB writepending:0kB present:3129332kB managed:2763456kB mlocked:243692kB kernel_stack:23072kB pagetables:53380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.411148] lowmem_reserve[]: 0 0 1 1 1 [ 3425.415238] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.446323] lowmem_reserve[]: 0 0 0 0 0 [ 3425.450371] Node 1 Normal free:53480kB min:53876kB low:67344kB high:80812kB active_anon:204188kB inactive_anon:3326380kB active_file:8kB inactive_file:0kB unevictable:5928kB writepending:0kB present:4194304kB managed:4128248kB mlocked:5928kB kernel_stack:76544kB pagetables:241180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.483203] lowmem_reserve[]: 0 0 0 0 0 [ 3425.487271] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3425.506784] Node 0 DMA32: 2219*4kB (UME) 951*8kB (UME) 507*16kB (UME) 340*32kB (UME) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35860kB [ 3425.536038] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3425.559010] Node 1 Normal: 5*4kB (M) 10*8kB (UM) 984*16kB (UM) 1184*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53732kB [ 3425.572947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3425.599115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3425.608519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3425.622654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3425.660863] 22709 total pagecache pages [ 3425.664858] 0 pages in swap cache [ 3425.684029] Swap cache stats: add 0, delete 0, find 0/0 [ 3425.689883] Free swap = 0kB [ 3425.692924] Total swap = 0kB [ 3425.695933] 2097051 pages RAM [ 3425.715237] 0 pages HighMem/MovableOnly [ 3425.723319] 369648 pages reserved [ 3425.726775] 0 pages cma reserved [ 3425.745897] Out of memory (oom_kill_allocating_task): Kill process 3448 (modprobe) score 0 or sacrifice child [ 3425.756047] Killed process 3448 (modprobe) total-vm:4304kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 3425.796678] oom_reaper: reaped process 3448 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3425.814592] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3425.883461] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3425.892388] CPU: 0 PID: 3450 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3425.900110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.909644] Call Trace: [ 3425.912267] dump_stack+0x1fc/0x2ef [ 3425.915991] dump_header+0x15d/0xc3f [ 3425.919712] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3425.924811] ? ___ratelimit+0x319/0x590 [ 3425.928799] oom_kill_process.cold+0x10/0x692 [ 3425.933301] ? check_preemption_disabled+0x41/0x280 [ 3425.938322] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3425.943593] out_of_memory+0x1072/0x1390 [ 3425.947661] ? oom_killer_disable+0x270/0x270 [ 3425.952178] ? mutex_trylock+0x15f/0x1a0 [ 3425.956226] __alloc_pages_nodemask+0x23a2/0x2890 [ 3425.961063] ? find_get_entry+0x4cd/0x8a0 [ 3425.965211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3425.970062] alloc_pages_current+0x193/0x2a0 [ 3425.974461] filemap_fault+0x146e/0x2180 [ 3425.978516] ext4_filemap_fault+0x84/0xb0 [ 3425.982825] __do_fault+0x10b/0x4b0 [ 3425.986440] ? do_raw_spin_unlock+0x171/0x230 [ 3425.990920] __handle_mm_fault+0x273b/0x41c0 [ 3425.995312] ? vm_insert_page+0x9c0/0x9c0 [ 3425.999465] ? check_preemption_disabled+0x41/0x280 [ 3426.004486] handle_mm_fault+0x436/0xb10 [ 3426.008555] __do_page_fault+0x68e/0xd60 [ 3426.012609] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3426.017621] ? spurious_fault+0x840/0x840 [ 3426.021759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3426.026613] ? page_fault+0x8/0x30 [ 3426.030137] page_fault+0x1e/0x30 [ 3426.033607] RIP: 0033:0x7faec8366190 [ 3426.037306] Code: Bad RIP value. [ 3426.040655] RSP: 002b:00007ffca3fc6048 EFLAGS: 00010297 [ 3426.046024] RAX: 0000000000000008 RBX: 0000561baa6e4c20 RCX: 00007faec83cd6f0 [ 3426.053275] RDX: 00000000fbad2488 RSI: 0000000000080000 RDI: 0000561baa6e4c20 [ 3426.060532] RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000000000001 [ 3426.067789] R10: 0000000000080000 R11: 0000000000000246 R12: 000000000000000f [ 3426.075045] R13: 0000000000000001 R14: 0000561baa6e52e0 R15: 00007ffca3fc6270 [ 3426.088369] Mem-Info: [ 3426.091060] active_anon:280656 inactive_anon:965594 isolated_anon:0 [ 3426.091060] active_file:23 inactive_file:3 isolated_file:9 [ 3426.091060] unevictable:63210 dirty:0 writeback:0 unstable:0 [ 3426.091060] slab_reclaimable:21139 slab_unreclaimable:159360 [ 3426.091060] mapped:56141 shmem:19289 pagetables:73677 bounce:0 [ 3426.091060] free:25246 free_pcp:62 free_cma:0 [ 3426.127095] Node 0 active_anon:918436kB inactive_anon:535996kB active_file:88kB inactive_file:112kB unevictable:246656kB isolated(anon):0kB isolated(file):36kB mapped:223660kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3426.156110] Node 1 active_anon:204188kB inactive_anon:3326380kB active_file:4kB inactive_file:0kB unevictable:6184kB isolated(anon):0kB isolated(file):0kB mapped:904kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3426.183774] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.218610] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3426.223697] Node 0 DMA32 free:35852kB min:35996kB low:44992kB high:53988kB active_anon:916280kB inactive_anon:535720kB active_file:212kB inactive_file:172kB unevictable:244208kB writepending:0kB present:3129332kB managed:2763456kB mlocked:244208kB kernel_stack:23072kB pagetables:53380kB bounce:0kB free_pcp:592kB local_pcp:120kB free_cma:0kB [ 3426.254116] lowmem_reserve[]: 0 0 1 1 1 [ 3426.258151] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.284123] lowmem_reserve[]: 0 0 0 0 0 [ 3426.288307] Node 1 Normal free:53732kB min:53876kB low:67344kB high:80812kB active_anon:204188kB inactive_anon:3326380kB active_file:4kB inactive_file:0kB unevictable:6184kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6184kB kernel_stack:76544kB pagetables:241180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.319178] lowmem_reserve[]: 0 0 0 0 0 [ 3426.323189] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3426.339633] Node 0 DMA32: 2187*4kB (UE) 1006*8kB (UME) 509*16kB (UME) 337*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35852kB [ 3426.353944] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3426.365067] Node 1 Normal: 5*4kB (M) 10*8kB (UM) 984*16kB (UM) 1184*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53732kB [ 3426.378368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.387268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.395847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.406848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.415433] 22754 total pagecache pages [ 3426.419433] 0 pages in swap cache [ 3426.422984] Swap cache stats: add 0, delete 0, find 0/0 [ 3426.428497] Free swap = 0kB [ 3426.431508] Total swap = 0kB [ 3426.434529] 2097051 pages RAM [ 3426.437736] 0 pages HighMem/MovableOnly [ 3426.441702] 369648 pages reserved [ 3426.445148] 0 pages cma reserved [ 3426.448630] Out of memory (oom_kill_allocating_task): Kill process 3450 (systemd-udevd) score 0 or sacrifice child [ 3426.460198] Killed process 3450 (systemd-udevd) total-vm:45484kB, anon-rss:2848kB, file-rss:0kB, shmem-rss:0kB [ 3426.472249] oom_reaper: reaped process 3450 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:54:42 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:42 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) 05:54:42 executing program 2: mlockall(0x7) mlockall(0x3) fork() fork() r0 = fork() sched_getscheduler(r0) r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r1, &(0x7f0000000000)) 05:54:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000000000}]}, 0x28}}, 0x0) 05:54:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3427.677262] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3427.701799] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3427.722749] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3427.753002] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000000000}]}, 0x28}}, 0x0) 05:54:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="607fffff", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3428.517284] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3428.547604] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3428.561315] CPU: 1 PID: 3469 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3428.569136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3428.578487] Call Trace: [ 3428.581087] dump_stack+0x1fc/0x2ef [ 3428.584724] dump_header+0x15d/0xc3f [ 3428.588445] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3428.593551] ? ___ratelimit+0x319/0x590 [ 3428.597534] oom_kill_process.cold+0x10/0x692 [ 3428.602023] ? check_preemption_disabled+0x41/0x280 [ 3428.607039] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3428.612315] out_of_memory+0x1072/0x1390 [ 3428.616387] ? oom_killer_disable+0x270/0x270 [ 3428.620895] ? mutex_trylock+0x15f/0x1a0 [ 3428.624967] __alloc_pages_nodemask+0x23a2/0x2890 [ 3428.629836] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3428.634695] ? __lock_acquire+0x6de/0x3ff0 [ 3428.638940] ? mark_held_locks+0xf0/0xf0 [ 3428.643019] alloc_pages_vma+0xf2/0x780 [ 3428.647008] do_anonymous_page+0x7c2/0x1be0 [ 3428.651340] ? __pte_alloc+0x340/0x340 [ 3428.655238] ? __put_compound_page+0xc0/0xc0 [ 3428.659656] ? mark_held_locks+0xf0/0xf0 [ 3428.663744] __handle_mm_fault+0x227a/0x41c0 [ 3428.668175] ? vm_insert_page+0x9c0/0x9c0 [ 3428.672348] ? check_preemption_disabled+0x41/0x280 [ 3428.677464] handle_mm_fault+0x436/0xb10 [ 3428.681547] __get_user_pages+0x6f0/0x1710 [ 3428.685802] ? follow_page_mask+0x1d00/0x1d00 [ 3428.690355] populate_vma_page_range+0x200/0x290 [ 3428.695145] __mm_populate+0x1ea/0x350 [ 3428.699043] ? populate_vma_page_range+0x290/0x290 [ 3428.703981] ? do_mlock+0x6b0/0x6b0 [ 3428.707634] ? security_capable+0x8f/0xc0 [ 3428.711797] __se_sys_mlockall+0x362/0x4e0 [ 3428.716041] do_syscall_64+0xf9/0x620 [ 3428.719855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3428.725085] RIP: 0033:0x4665f9 [ 3428.728283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.747389] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3428.755109] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3428.762388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3428.769758] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3428.777032] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3428.784471] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3428.861192] Mem-Info: [ 3428.874355] active_anon:280679 inactive_anon:965581 isolated_anon:0 [ 3428.874355] active_file:7 inactive_file:30 isolated_file:0 [ 3428.874355] unevictable:62727 dirty:0 writeback:0 unstable:0 [ 3428.874355] slab_reclaimable:21110 slab_unreclaimable:159835 [ 3428.874355] mapped:56208 shmem:19289 pagetables:73653 bounce:0 [ 3428.874355] free:25008 free_pcp:0 free_cma:0 [ 3428.979750] Node 0 active_anon:918532kB inactive_anon:535948kB active_file:128kB inactive_file:68kB unevictable:243672kB isolated(anon):0kB isolated(file):0kB mapped:222920kB dirty:0kB writeback:0kB shmem:34296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3429.241065] Node 1 active_anon:204184kB inactive_anon:3326376kB active_file:0kB inactive_file:44kB unevictable:7236kB isolated(anon):0kB isolated(file):0kB mapped:1912kB dirty:0kB writeback:0kB shmem:42860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3429.423345] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3429.459604] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3429.464953] Node 0 DMA32 free:35528kB min:35996kB low:44992kB high:53988kB active_anon:916376kB inactive_anon:535672kB active_file:60kB inactive_file:0kB unevictable:241432kB writepending:0kB present:3129332kB managed:2763456kB mlocked:241436kB kernel_stack:23040kB pagetables:53256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3429.730568] lowmem_reserve[]: 0 0 1 1 1 [ 3429.762955] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3430.024097] lowmem_reserve[]: 0 0 0 0 0 [ 3430.063174] Node 1 Normal free:53468kB min:53876kB low:67344kB high:80812kB active_anon:204184kB inactive_anon:3326376kB active_file:12kB inactive_file:80kB unevictable:7296kB writepending:0kB present:4194304kB managed:4128248kB mlocked:7296kB kernel_stack:76544kB pagetables:241208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3430.309883] lowmem_reserve[]: 0 0 0 0 0 [ 3430.341359] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3430.454013] Node 0 DMA32: 2217*4kB (UME) 1109*8kB (UME) 174*16kB (UME) 303*32kB (UE) 39*64kB (UME) 23*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35916kB [ 3430.601568] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3430.709622] Node 1 Normal: 8*4kB (M) 39*8kB (UM) 1003*16kB (UM) 1173*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53928kB [ 3430.770320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3430.794169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3430.821256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3430.874712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3430.899765] 21731 total pagecache pages [ 3430.907147] 0 pages in swap cache [ 3430.912165] Swap cache stats: add 0, delete 0, find 0/0 [ 3430.920490] Free swap = 0kB [ 3430.923850] Total swap = 0kB [ 3430.927206] 2097051 pages RAM [ 3430.930547] 0 pages HighMem/MovableOnly [ 3430.934781] 369648 pages reserved [ 3430.938565] 0 pages cma reserved [ 3430.942212] Out of memory (oom_kill_allocating_task): Kill process 3469 (syz-executor.0) score 0 or sacrifice child [ 3430.953393] Killed process 3469 (syz-executor.0) total-vm:93252kB, anon-rss:20632kB, file-rss:40196kB, shmem-rss:0kB [ 3430.965317] oom_reaper: reaped process 3469 (syz-executor.0), now anon-rss:20848kB, file-rss:40192kB, shmem-rss:0kB [ 3431.308389] nla_parse: 10 callbacks suppressed [ 3431.308398] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3431.381805] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:46 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3431.466776] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3431.526575] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "a64cdc20"}, &(0x7f00000002c0)=0x28) sendto$inet(r0, &(0x7f00000000c0)="63aae6b1e95f7f16cd963e94e9a0678ceab01bf9556fcd92a1dc04d751915f575a9ef9add03f81fd3bf5c4340d5a43fcb010b3c579d26de7f75dd88065e7f89f0dba2d156979f221315b029e8a2a2dc61642facc425985b9ceb253223f2f13e9435970e157528c574b069f731dda2543e3d12b0c0fccc5b053c0e579bc978165d05898d5ff452f20efe850a1d9ad9785bcc2b2c1a93a4cda58d110614d82176616a8b69f8d56bb4607a66ac8ddf7668c8bd7461ef5e286e5e5ccac0b", 0xbc, 0x400c001, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mlockall(0x7) syz_open_dev$admmidi(&(0x7f0000000080), 0x800, 0x0) mlockall(0x3) fork() r1 = fork() syz_open_procfs$userns(r1, &(0x7f0000000000)) connect$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x3}}, 0x10) mlockall(0x3) 05:54:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000000000000}]}, 0x28}}, 0x0) 05:54:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:46 executing program 0: fork() r0 = fork() ptrace$pokeuser(0x6, r0, 0x1, 0x80) syz_open_procfs$userns(0x0, 0x0) [ 3432.078600] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3432.102431] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3432.154284] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3432.182526] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3432.676007] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3432.742221] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3433.783611] kworker/u4:1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3433.807009] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 3433.812303] CPU: 1 PID: 3582 Comm: kworker/u4:1 Not tainted 4.19.205-syzkaller #0 [ 3433.819921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3433.829311] Call Trace: [ 3433.832077] dump_stack+0x1fc/0x2ef [ 3433.835716] dump_header+0x15d/0xc3f [ 3433.839433] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3433.844628] ? ___ratelimit+0x319/0x590 [ 3433.848606] oom_kill_process.cold+0x10/0x692 [ 3433.853179] ? lock_downgrade+0x720/0x720 [ 3433.857339] ? check_preemption_disabled+0x41/0x280 [ 3433.862368] out_of_memory+0x34d/0x1390 [ 3433.866341] ? oom_killer_disable+0x270/0x270 [ 3433.870841] ? mutex_trylock+0x15f/0x1a0 [ 3433.874903] __alloc_pages_nodemask+0x23a2/0x2890 [ 3433.879767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3433.884602] ? kmem_cache_alloc+0x122/0x370 [ 3433.888942] ? mm_alloc+0x19/0xc0 [ 3433.892386] ? __do_execve_file+0xaad/0x2360 [ 3433.896803] ? call_usermodehelper_exec_async+0x50e/0x6a0 [ 3433.902341] ? ret_from_fork+0x24/0x30 [ 3433.906228] ? mark_held_locks+0xf0/0xf0 [ 3433.910286] ? select_task_rq_fair+0x6a1/0x2750 [ 3433.915378] ? sched_ttwu_pending+0x1d0/0x1d0 [ 3433.919866] alloc_pages_current+0x193/0x2a0 [ 3433.925094] __get_free_pages+0x8/0x40 [ 3433.929078] pgd_alloc+0x7e/0x3e0 [ 3433.932888] ? pgd_page_get_mm+0x40/0x40 [ 3433.936949] ? __lockdep_init_map+0x100/0x5a0 [ 3433.941434] mm_init+0x59f/0x9c0 [ 3433.944805] mm_alloc+0xa2/0xc0 [ 3433.948077] __do_execve_file+0xaad/0x2360 [ 3433.952315] ? open_exec+0x70/0x70 [ 3433.955847] ? check_preemption_disabled+0x41/0x280 [ 3433.961014] do_execve+0x35/0x50 [ 3433.964374] call_usermodehelper_exec_async+0x50e/0x6a0 [ 3433.969723] ? umh_complete+0x90/0x90 [ 3433.973510] ret_from_fork+0x24/0x30 [ 3433.984797] Mem-Info: [ 3433.987389] active_anon:280759 inactive_anon:965582 isolated_anon:0 [ 3433.987389] active_file:15 inactive_file:2 isolated_file:15 [ 3433.987389] unevictable:63111 dirty:0 writeback:0 unstable:0 [ 3433.987389] slab_reclaimable:21084 slab_unreclaimable:159586 [ 3433.987389] mapped:56451 shmem:19289 pagetables:73709 bounce:0 [ 3433.987389] free:25101 free_pcp:0 free_cma:0 [ 3434.022843] Node 0 active_anon:918592kB inactive_anon:535952kB active_file:60kB inactive_file:4kB unevictable:245432kB isolated(anon):0kB isolated(file):60kB mapped:223764kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3434.051512] Node 1 active_anon:204444kB inactive_anon:3326376kB active_file:0kB inactive_file:8kB unevictable:7012kB isolated(anon):0kB isolated(file):0kB mapped:2040kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3434.079265] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3434.108129] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3434.113176] Node 0 DMA32 free:35736kB min:35996kB low:44992kB high:53988kB active_anon:916436kB inactive_anon:535676kB active_file:60kB inactive_file:4kB unevictable:243384kB writepending:0kB present:3129332kB managed:2763456kB mlocked:243384kB kernel_stack:22944kB pagetables:53132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3434.143470] lowmem_reserve[]: 0 0 1 1 1 [ 3434.147514] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3434.173487] lowmem_reserve[]: 0 0 0 0 0 [ 3434.177525] Node 1 Normal free:53688kB min:53876kB low:67344kB high:80812kB active_anon:204444kB inactive_anon:3326376kB active_file:0kB inactive_file:8kB unevictable:7012kB writepending:0kB present:4194304kB managed:4128248kB mlocked:7012kB kernel_stack:76640kB pagetables:241556kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3434.207783] lowmem_reserve[]: 0 0 0 0 0 [ 3434.211772] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3434.228011] Node 0 DMA32: 2116*4kB (UME) 1378*8kB (UME) 154*16kB (UME) 298*32kB (UE) 39*64kB (UME) 10*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35520kB [ 3434.243830] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3434.254918] Node 1 Normal: 10*4kB (UM) 36*8kB (UM) 985*16kB (U) 1175*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53688kB [ 3434.268672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3434.277604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3434.286811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3434.295647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3434.304252] 23001 total pagecache pages [ 3434.308299] 0 pages in swap cache [ 3434.311741] Swap cache stats: add 0, delete 0, find 0/0 [ 3434.317119] Free swap = 0kB [ 3434.320119] Total swap = 0kB [ 3434.323144] 2097051 pages RAM [ 3434.326299] 0 pages HighMem/MovableOnly [ 3434.330260] 369648 pages reserved [ 3434.333699] 0 pages cma reserved [ 3434.337145] Out of memory: Kill process 3524 (syz-executor.3) score 1010 or sacrifice child [ 3434.346527] Killed process 3558 (syz-executor.3) total-vm:93384kB, anon-rss:28220kB, file-rss:35084kB, shmem-rss:0kB [ 3434.364104] oom_reaper: reaped process 3558 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3434.477439] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3434.488983] in:imklog cpuset=/ mems_allowed=0-1 [ 3434.494542] CPU: 0 PID: 3087 Comm: in:imklog Not tainted 4.19.205-syzkaller #0 [ 3434.501906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.511259] Call Trace: [ 3434.513869] dump_stack+0x1fc/0x2ef [ 3434.517511] dump_header+0x15d/0xc3f [ 3434.521238] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3434.526346] ? ___ratelimit+0x319/0x590 [ 3434.530328] oom_kill_process.cold+0x10/0x692 [ 3434.534833] ? check_preemption_disabled+0x41/0x280 [ 3434.539864] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3434.545156] out_of_memory+0x1072/0x1390 [ 3434.549227] ? oom_killer_disable+0x270/0x270 [ 3434.553730] ? mutex_trylock+0x15f/0x1a0 [ 3434.557813] __alloc_pages_nodemask+0x23a2/0x2890 [ 3434.562757] ? find_get_entry+0x4cd/0x8a0 [ 3434.566920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3434.571796] alloc_pages_current+0x193/0x2a0 [ 3434.576301] filemap_fault+0x146e/0x2180 [ 3434.580378] ext4_filemap_fault+0x84/0xb0 [ 3434.584528] __do_fault+0x10b/0x4b0 [ 3434.588152] ? do_raw_spin_unlock+0x171/0x230 [ 3434.592651] __handle_mm_fault+0x273b/0x41c0 [ 3434.597073] ? vm_insert_page+0x9c0/0x9c0 [ 3434.601242] ? lock_downgrade+0x720/0x720 [ 3434.605402] ? check_preemption_disabled+0x41/0x280 [ 3434.610423] handle_mm_fault+0x436/0xb10 [ 3434.614512] __do_page_fault+0x68e/0xd60 [ 3434.618582] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3434.623604] ? spurious_fault+0x840/0x840 [ 3434.627754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3434.632610] ? page_fault+0x8/0x30 [ 3434.636178] page_fault+0x1e/0x30 [ 3434.639636] RIP: 0033:0x7fa4ab9ecb40 [ 3434.643351] Code: Bad RIP value. [ 3434.646707] RSP: 002b:00007fa4aa2f21c8 EFLAGS: 00010246 [ 3434.652065] RAX: 00007fa4aa2f21f0 RBX: 00007fa4a40052bb RCX: 00007fa4aa2f22cc [ 3434.659330] RDX: 00007fa4aa2f21d8 RSI: 00007fa4abae5fe6 RDI: 00007fa4a40052bb [ 3434.666597] RBP: 0000000000000000 R08: 00007fa4aa2f22c8 R09: 00007fa4aa2f22cc [ 3434.673875] R10: 0000000000000000 R11: 00000000000a3a58 R12: 00007fa4aa2f2308 [ 3434.681146] R13: ffffffffffffffff R14: 0000000000001f9f R15: 00007fa4aa2f23d0 [ 3434.728700] Mem-Info: [ 3434.731163] active_anon:280759 inactive_anon:965582 isolated_anon:0 [ 3434.731163] active_file:15 inactive_file:2 isolated_file:15 [ 3434.731163] unevictable:63111 dirty:0 writeback:0 unstable:0 [ 3434.731163] slab_reclaimable:21084 slab_unreclaimable:159587 [ 3434.731163] mapped:56451 shmem:19289 pagetables:73672 bounce:0 [ 3434.731163] free:25029 free_pcp:118 free_cma:0 [ 3434.765620] Node 0 active_anon:918592kB inactive_anon:535952kB active_file:60kB inactive_file:4kB unevictable:245332kB isolated(anon):0kB isolated(file):60kB mapped:223764kB dirty:0kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3434.794229] Node 1 active_anon:204444kB inactive_anon:3326376kB active_file:0kB inactive_file:4kB unevictable:7012kB isolated(anon):0kB isolated(file):0kB mapped:2040kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3434.823480] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3434.858890] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3434.863941] Node 0 DMA32 free:35348kB min:35996kB low:44992kB high:53988kB active_anon:916436kB inactive_anon:535672kB active_file:48kB inactive_file:72kB unevictable:243300kB writepending:0kB present:3129332kB managed:2763456kB mlocked:243336kB kernel_stack:22848kB pagetables:53132kB bounce:0kB free_pcp:500kB local_pcp:280kB free_cma:0kB [ 3434.906749] lowmem_reserve[]: 0 0 1 1 1 [ 3434.910747] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3434.960168] lowmem_reserve[]: 0 0 0 0 0 [ 3434.964184] Node 1 Normal free:53868kB min:53876kB low:67344kB high:80812kB active_anon:204432kB inactive_anon:3326376kB active_file:4kB inactive_file:0kB unevictable:7012kB writepending:0kB present:4194304kB managed:4128248kB mlocked:7012kB kernel_stack:76640kB pagetables:241408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3435.011217] lowmem_reserve[]: 0 0 0 0 0 [ 3435.015240] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3435.040191] Node 0 DMA32: 2049*4kB (UME) 1381*8kB (UME) 154*16kB (UME) 303*32kB (UE) 39*64kB (UME) 10*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35436kB [ 3435.151243] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3435.240187] Node 1 Normal: 53*4kB (UM) 37*8kB (UM) 985*16kB (U) 1176*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53900kB [ 3435.333623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3435.389424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3435.470175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3435.501481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3435.562074] 23001 total pagecache pages [ 3435.592310] 0 pages in swap cache [ 3435.595796] Swap cache stats: add 0, delete 0, find 0/0 [ 3435.645782] Free swap = 0kB [ 3435.667915] Total swap = 0kB [ 3435.670952] 2097051 pages RAM [ 3435.674047] 0 pages HighMem/MovableOnly [ 3435.745645] 369648 pages reserved [ 3435.766045] 0 pages cma reserved [ 3435.769435] Out of memory (oom_kill_allocating_task): Kill process 3087 (in:imklog) score 0 or sacrifice child [ 3435.866126] Killed process 3020 (rsyslogd) total-vm:254332kB, anon-rss:780kB, file-rss:0kB, shmem-rss:0kB [ 3435.878905] oom_reaper: reaped process 3020 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:54:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf00000000000000}]}, 0x28}}, 0x0) 05:54:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:50 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:50 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xa4c38, 0xc00) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0x4, 0xa, 0xb, 0xffffffffffffffdc, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000080)='GPL\x00', 0x10001, 0x4, &(0x7f00000000c0)=""/4, 0x41100, 0x1, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xd, 0xd7, 0x6}, 0x10}, 0x78) [ 3436.375612] nla_parse: 3 callbacks suppressed [ 3436.375621] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:51 executing program 2: mlockall(0x7) mlockall(0x4) fork() pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:54:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9effffff00000000}]}, 0x28}}, 0x0) 05:54:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3436.734096] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3436.781237] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3436.806810] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3436.857452] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa14d000000000000}]}, 0x28}}, 0x0) [ 3437.088157] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3437.161006] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3437.228130] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3437.332381] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf0ffffff00000000}]}, 0x28}}, 0x0) [ 3437.971356] systemd-udevd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 3438.010241] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3438.015772] CPU: 1 PID: 4699 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3438.023480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3438.032831] Call Trace: [ 3438.035419] dump_stack+0x1fc/0x2ef [ 3438.039046] dump_header+0x15d/0xc3f [ 3438.042756] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3438.047847] ? ___ratelimit+0x319/0x590 [ 3438.051811] oom_kill_process.cold+0x10/0x692 [ 3438.056294] ? lock_downgrade+0x720/0x720 [ 3438.060430] ? check_preemption_disabled+0x41/0x280 [ 3438.065433] out_of_memory+0x34d/0x1390 [ 3438.069396] ? oom_killer_disable+0x270/0x270 [ 3438.073887] ? mutex_trylock+0x15f/0x1a0 [ 3438.077946] __alloc_pages_nodemask+0x23a2/0x2890 [ 3438.082789] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3438.087614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3438.092533] ? __put_seccomp_filter+0xa0/0xa0 [ 3438.097018] ? putname+0xe1/0x120 [ 3438.100471] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 3438.105646] ? ____cache_alloc_node+0x156/0x1d0 [ 3438.110317] ? cache_grow_begin+0x64/0x8a0 [ 3438.114550] cache_grow_begin+0xa4/0x8a0 [ 3438.118608] fallback_alloc+0x213/0x2e0 [ 3438.122578] kmem_cache_alloc+0x1e4/0x370 [ 3438.126723] getname_flags+0xce/0x590 [ 3438.130519] do_sys_open+0x26c/0x520 [ 3438.134235] ? filp_open+0x70/0x70 [ 3438.137766] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3438.143116] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3438.148118] ? do_syscall_64+0x21/0x620 [ 3438.152084] do_syscall_64+0xf9/0x620 [ 3438.155876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3438.161053] RIP: 0033:0x7faec83a59b1 [ 3438.164751] Code: Bad RIP value. [ 3438.168101] RSP: 002b:00007ffca3fc6988 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 3438.175931] RAX: ffffffffffffffda RBX: 0000561baa6fb330 RCX: 00007faec83a59b1 [ 3438.183201] RDX: 00000000000000fe RSI: 0000000000090800 RDI: 0000561baa6e51f0 [ 3438.190544] RBP: 00007faec955b710 R08: 0000561baa6e3ba0 R09: 0000000000001010 [ 3438.197797] R10: 00007faec868bb58 R11: 0000000000000202 R12: 0000000000000000 [ 3438.205062] R13: 0000561baa6e51f0 R14: 00000000000000fe R15: 0000561baa6e51f0 [ 3438.230796] Mem-Info: [ 3438.238207] active_anon:280715 inactive_anon:965594 isolated_anon:0 [ 3438.238207] active_file:94 inactive_file:118 isolated_file:0 [ 3438.238207] unevictable:62548 dirty:25 writeback:0 unstable:0 [ 3438.238207] slab_reclaimable:21061 slab_unreclaimable:159529 [ 3438.238207] mapped:55244 shmem:19289 pagetables:73710 bounce:0 [ 3438.238207] free:25546 free_pcp:284 free_cma:0 [ 3438.274424] Node 0 active_anon:918544kB inactive_anon:535992kB active_file:136kB inactive_file:312kB unevictable:243872kB isolated(anon):0kB isolated(file):0kB mapped:218104kB dirty:96kB writeback:0kB shmem:34292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3438.311353] Node 1 active_anon:204316kB inactive_anon:3326384kB active_file:4kB inactive_file:4kB unevictable:6320kB isolated(anon):0kB isolated(file):0kB mapped:2572kB dirty:4kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3438.348891] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3438.385937] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3438.392154] Node 0 DMA32 free:37364kB min:35996kB low:44992kB high:53988kB active_anon:916388kB inactive_anon:535716kB active_file:620kB inactive_file:156kB unevictable:241732kB writepending:0kB present:3129332kB managed:2763456kB mlocked:241732kB kernel_stack:22816kB pagetables:53188kB bounce:0kB free_pcp:592kB local_pcp:264kB free_cma:0kB [ 3438.423891] lowmem_reserve[]: 0 0 1 1 1 [ 3438.429236] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3438.456139] lowmem_reserve[]: 0 0 0 0 0 [ 3438.460726] Node 1 Normal free:53700kB min:53876kB low:67344kB high:80812kB active_anon:204316kB inactive_anon:3326384kB active_file:4kB inactive_file:4kB unevictable:6320kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6320kB kernel_stack:76640kB pagetables:241504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3438.502117] lowmem_reserve[]: 0 0 0 0 0 [ 3438.507089] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3438.529814] Node 0 DMA32: 2104*4kB (UME) 1677*8kB (UME) 236*16kB (UMEH) 229*32kB (UMEH) 37*64kB (UME) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36456kB [ 3438.551322] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3438.562983] Node 1 Normal: 86*4kB (UM) 4*8kB (U) 977*16kB (U) 1178*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53704kB [ 3438.582739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3438.596103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3438.605422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3438.619869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3438.628510] 21744 total pagecache pages [ 3438.633378] 0 pages in swap cache [ 3438.637614] Swap cache stats: add 0, delete 0, find 0/0 [ 3438.643719] Free swap = 0kB [ 3438.647440] Total swap = 0kB [ 3438.652948] 2097051 pages RAM [ 3438.656121] 0 pages HighMem/MovableOnly [ 3438.660089] 369648 pages reserved [ 3438.663529] 0 pages cma reserved [ 3438.666985] Out of memory: Kill process 2273 (syz-executor.2) score 1010 or sacrifice child [ 3438.675506] Killed process 2273 (syz-executor.2) total-vm:93648kB, anon-rss:37028kB, file-rss:34968kB, shmem-rss:0kB [ 3438.715437] oom_reaper: reaped process 2273 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3438.929949] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:54:54 executing program 2: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mlockall(0x7) mlockall(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000180)={0x2, 0x1}) [ 3440.072713] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3440.091740] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3440.097077] CPU: 1 PID: 3704 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3440.104880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3440.114232] Call Trace: [ 3440.116834] dump_stack+0x1fc/0x2ef [ 3440.120483] dump_header+0x15d/0xc3f [ 3440.124229] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3440.129348] ? ___ratelimit+0x319/0x590 [ 3440.133334] oom_kill_process.cold+0x10/0x692 [ 3440.137841] ? check_preemption_disabled+0x41/0x280 [ 3440.142868] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3440.148148] out_of_memory+0x1072/0x1390 [ 3440.152222] ? oom_killer_disable+0x270/0x270 [ 3440.156746] ? mutex_trylock+0x15f/0x1a0 [ 3440.160824] __alloc_pages_nodemask+0x23a2/0x2890 [ 3440.165693] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3440.170620] ? __lock_acquire+0x6de/0x3ff0 [ 3440.174876] ? mark_held_locks+0xf0/0xf0 [ 3440.178958] alloc_pages_vma+0xf2/0x780 [ 3440.182950] do_anonymous_page+0x7c2/0x1be0 [ 3440.187284] ? __pte_alloc+0x340/0x340 [ 3440.191174] ? __put_compound_page+0xc0/0xc0 [ 3440.195592] ? mark_held_locks+0xf0/0xf0 [ 3440.199666] __handle_mm_fault+0x227a/0x41c0 [ 3440.204088] ? vm_insert_page+0x9c0/0x9c0 [ 3440.208256] ? check_preemption_disabled+0x41/0x280 [ 3440.213288] handle_mm_fault+0x436/0xb10 [ 3440.217377] __get_user_pages+0x6f0/0x1710 [ 3440.221627] ? follow_page_mask+0x1d00/0x1d00 [ 3440.226138] ? check_preemption_disabled+0x41/0x280 [ 3440.231172] populate_vma_page_range+0x200/0x290 [ 3440.236030] __mm_populate+0x1ea/0x350 [ 3440.239924] ? populate_vma_page_range+0x290/0x290 [ 3440.244858] ? do_mlock+0x6b0/0x6b0 [ 3440.248491] ? security_capable+0x8f/0xc0 [ 3440.252656] __se_sys_mlockall+0x362/0x4e0 [ 3440.256901] do_syscall_64+0xf9/0x620 [ 3440.260712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3440.265901] RIP: 0033:0x4665f9 [ 3440.269092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3440.288003] RSP: 002b:00007f17a6089188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3440.295733] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3440.303001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3440.310270] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3440.317552] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3440.324821] R13: 00007fff161510cf R14: 00007f17a6089300 R15: 0000000000022000 [ 3440.333360] Mem-Info: [ 3440.336077] active_anon:280772 inactive_anon:959789 isolated_anon:0 [ 3440.336077] active_file:403 inactive_file:494 isolated_file:0 [ 3440.336077] unevictable:67504 dirty:2 writeback:0 unstable:0 [ 3440.336077] slab_reclaimable:21073 slab_unreclaimable:159496 [ 3440.336077] mapped:59129 shmem:19289 pagetables:73656 bounce:0 [ 3440.336077] free:25771 free_pcp:63 free_cma:0 [ 3440.409792] Node 0 active_anon:918232kB inactive_anon:558284kB active_file:1796kB inactive_file:2200kB unevictable:222136kB isolated(anon):0kB isolated(file):0kB mapped:218996kB dirty:0kB writeback:0kB shmem:34284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3440.484336] Node 1 active_anon:204856kB inactive_anon:3294672kB active_file:6876kB inactive_file:7004kB unevictable:20280kB isolated(anon):0kB isolated(file):0kB mapped:17220kB dirty:8kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3440.548688] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3440.606249] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3440.616910] Node 0 DMA32 free:64252kB min:35996kB low:44992kB high:53988kB active_anon:916076kB inactive_anon:540756kB active_file:148kB inactive_file:1532kB unevictable:210776kB writepending:0kB present:3129332kB managed:2763456kB mlocked:210984kB kernel_stack:22624kB pagetables:52920kB bounce:0kB free_pcp:1360kB local_pcp:0kB free_cma:0kB [ 3440.648091] lowmem_reserve[]: 0 0 1 1 1 [ 3440.652645] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3440.680067] lowmem_reserve[]: 0 0 0 0 0 05:54:55 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:54:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:55 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x20}, 0x10) 05:54:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3440.684185] Node 1 Normal free:61400kB min:53876kB low:67344kB high:80812kB active_anon:204956kB inactive_anon:3289244kB active_file:5148kB inactive_file:5116kB unevictable:19892kB writepending:4kB present:4194304kB managed:4128248kB mlocked:19772kB kernel_stack:76736kB pagetables:241556kB bounce:0kB free_pcp:2912kB local_pcp:1488kB free_cma:0kB [ 3440.717083] lowmem_reserve[]: 0 0 0 0 0 [ 3440.721410] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB 05:54:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffff7f00000000}]}, 0x28}}, 0x0) [ 3440.754378] Node 0 DMA32: 2782*4kB (UME) 3021*8kB (UMEH) 747*16kB (UMEH) 379*32kB (UMEH) 49*64kB (UME) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62640kB 05:54:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3440.816633] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB 05:54:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3440.868116] Node 1 Normal: 920*4kB (UM) 351*8kB (UM) 1116*16kB (UM) 1261*32kB (UME) 29*64kB (M) 30*128kB (M) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71672kB [ 3440.971971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 05:54:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3441.039556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3441.061832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 05:54:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3441.101161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 05:54:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfffffffffffff000}]}, 0x28}}, 0x0) [ 3441.174437] 25941 total pagecache pages [ 3441.186657] 0 pages in swap cache [ 3441.208136] Swap cache stats: add 0, delete 0, find 0/0 [ 3441.235625] Free swap = 0kB [ 3441.250401] Total swap = 0kB [ 3441.276475] 2097051 pages RAM [ 3441.291641] 0 pages HighMem/MovableOnly [ 3441.329220] 369648 pages reserved [ 3441.344418] 0 pages cma reserved [ 3441.358924] Out of memory (oom_kill_allocating_task): Kill process 3704 (syz-executor.2) score 0 or sacrifice child [ 3441.402071] Killed process 3699 (syz-executor.2) total-vm:93384kB, anon-rss:21344kB, file-rss:39300kB, shmem-rss:0kB [ 3441.433847] oom_reaper: reaped process 3699 (syz-executor.2), now anon-rss:21396kB, file-rss:40208kB, shmem-rss:0kB 05:54:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3441.722635] nla_parse: 15 callbacks suppressed [ 3441.722645] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3441.817551] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3442.344223] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 3442.423833] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3442.460645] CPU: 1 PID: 4699 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3442.468386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3442.477737] Call Trace: [ 3442.480336] dump_stack+0x1fc/0x2ef [ 3442.483972] dump_header+0x15d/0xc3f [ 3442.487696] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3442.492800] ? ___ratelimit+0x319/0x590 [ 3442.496869] oom_kill_process.cold+0x10/0x692 [ 3442.501461] ? lock_downgrade+0x720/0x720 [ 3442.505789] ? check_preemption_disabled+0x41/0x280 [ 3442.510813] out_of_memory+0x34d/0x1390 [ 3442.514892] ? oom_killer_disable+0x270/0x270 [ 3442.519394] ? mutex_trylock+0x15f/0x1a0 [ 3442.523465] __alloc_pages_nodemask+0x23a2/0x2890 [ 3442.528317] ? find_get_entry+0x4cd/0x8a0 [ 3442.532564] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3442.537442] alloc_pages_current+0x193/0x2a0 [ 3442.541857] filemap_fault+0x146e/0x2180 [ 3442.546024] ext4_filemap_fault+0x84/0xb0 [ 3442.550176] __do_fault+0x10b/0x4b0 [ 3442.553807] __handle_mm_fault+0x273b/0x41c0 [ 3442.558223] ? vm_insert_page+0x9c0/0x9c0 [ 3442.562374] ? fsnotify+0x84e/0xe10 [ 3442.566018] ? check_preemption_disabled+0x41/0x280 [ 3442.571040] handle_mm_fault+0x436/0xb10 [ 3442.575282] __do_page_fault+0x68e/0xd60 [ 3442.579361] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3442.584381] ? spurious_fault+0x840/0x840 [ 3442.588540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3442.593422] ? page_fault+0x8/0x30 [ 3442.596974] page_fault+0x1e/0x30 [ 3442.600428] RIP: 0033:0x7faec8338d30 [ 3442.604136] Code: Bad RIP value. [ 3442.607494] RSP: 002b:00007ffca3fc6828 EFLAGS: 00010202 [ 3442.612852] RAX: 00000000fbad8001 RBX: 00007ffca3fc6830 RCX: 0000000000000000 [ 3442.620121] RDX: 00007ffca3fc69a8 RSI: 0000561ba87227ca RDI: 00007ffca3fc6830 [ 3442.627389] RBP: 000000000000001c R08: 0000000000000000 R09: 00007ffca3fc69a8 [ 3442.634656] R10: 0000000000000004 R11: 0000000000000009 R12: 00007ffca3fc6af0 [ 3442.641923] R13: 0000561ba87227ca R14: 00007ffca3fc69a8 R15: 0000000000000001 [ 3443.040708] Mem-Info: [ 3443.043504] active_anon:280771 inactive_anon:956345 isolated_anon:0 [ 3443.043504] active_file:14 inactive_file:14 isolated_file:0 [ 3443.043504] unevictable:72739 dirty:0 writeback:0 unstable:0 [ 3443.043504] slab_reclaimable:21092 slab_unreclaimable:159157 [ 3443.043504] mapped:60210 shmem:19289 pagetables:73720 bounce:0 [ 3443.043504] free:25178 free_pcp:2 free_cma:0 [ 3443.109383] Node 0 active_anon:918316kB inactive_anon:536000kB active_file:24kB inactive_file:28kB unevictable:249936kB isolated(anon):0kB isolated(file):0kB mapped:229344kB dirty:0kB writeback:0kB shmem:34284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3443.275129] Node 1 active_anon:204768kB inactive_anon:3289380kB active_file:32kB inactive_file:28kB unevictable:41020kB isolated(anon):0kB isolated(file):0kB mapped:11496kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3443.419751] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3443.537360] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3443.542414] Node 0 DMA32 free:35892kB min:35996kB low:44992kB high:53988kB active_anon:916160kB inactive_anon:535724kB active_file:24kB inactive_file:28kB unevictable:247888kB writepending:0kB present:3129332kB managed:2763456kB mlocked:247888kB kernel_stack:22784kB pagetables:53252kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 3443.748395] lowmem_reserve[]: 0 0 1 1 1 [ 3443.785730] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3443.893308] lowmem_reserve[]: 0 0 0 0 0 [ 3443.897406] Node 1 Normal free:53944kB min:53876kB low:67344kB high:80812kB active_anon:204756kB inactive_anon:3289372kB active_file:164kB inactive_file:0kB unevictable:41020kB writepending:0kB present:4194304kB managed:4128248kB mlocked:41020kB kernel_stack:76608kB pagetables:241464kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 3443.957078] lowmem_reserve[]: 0 0 0 0 0 [ 3443.961091] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3444.055762] Node 0 DMA32: 1940*4kB (UME) 1725*8kB (UME) 348*16kB (UE) 255*32kB (UE) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35800kB [ 3444.110120] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3444.163678] Node 1 Normal: 606*4kB (UM) 257*8kB (UM) 1030*16kB (UM) 1241*32kB (UME) 16*64kB (M) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62080kB [ 3444.183814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3444.193478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3444.214395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3444.234637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3444.294239] 26320 total pagecache pages [ 3444.306799] 0 pages in swap cache [ 3444.325369] Swap cache stats: add 0, delete 0, find 0/0 [ 3444.330757] Free swap = 0kB [ 3444.333769] Total swap = 0kB [ 3444.345378] 2097051 pages RAM [ 3444.348594] 0 pages HighMem/MovableOnly [ 3444.352556] 369648 pages reserved [ 3444.365510] 0 pages cma reserved [ 3444.368888] Out of memory: Kill process 3711 (syz-executor.0) score 1011 or sacrifice child 05:54:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xf}}, 0x0) 05:54:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:54:59 executing program 2: mlockall(0x5) mlockall(0x3) r0 = fork() ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x7, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) mlockall(0x5) ptrace$pokeuser(0x6, r0, 0x8, 0x401) 05:54:59 executing program 0: mlockall(0x3) fork() r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x200800) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) syz_open_procfs$userns(0x0, 0x0) 05:54:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:54:59 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x0) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3445.089778] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3445.120379] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3445.167565] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3445.185579] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:54:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="607fffff", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x14}}, 0x0) 05:55:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3445.413505] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3445.483907] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3445.547773] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3445.620634] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xc0}}, 0x0) 05:55:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3446.343991] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3446.357829] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3446.363333] CPU: 1 PID: 3806 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3446.371130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.380485] Call Trace: [ 3446.383085] dump_stack+0x1fc/0x2ef [ 3446.386723] dump_header+0x15d/0xc3f [ 3446.390451] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3446.395555] ? ___ratelimit+0x319/0x590 [ 3446.399534] oom_kill_process.cold+0x10/0x692 [ 3446.404038] ? check_preemption_disabled+0x41/0x280 [ 3446.409069] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3446.414358] out_of_memory+0x1072/0x1390 [ 3446.418429] ? oom_killer_disable+0x270/0x270 [ 3446.422933] ? mutex_trylock+0x15f/0x1a0 [ 3446.427002] __alloc_pages_nodemask+0x23a2/0x2890 [ 3446.432011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3446.436880] ? __lock_acquire+0x6de/0x3ff0 [ 3446.441126] ? mark_held_locks+0xf0/0xf0 [ 3446.445203] alloc_pages_vma+0xf2/0x780 [ 3446.449190] do_anonymous_page+0x7c2/0x1be0 [ 3446.453520] ? __pte_alloc+0x340/0x340 [ 3446.457410] ? __put_compound_page+0xc0/0xc0 [ 3446.461823] ? mark_held_locks+0xf0/0xf0 [ 3446.465894] __handle_mm_fault+0x227a/0x41c0 [ 3446.470309] ? vm_insert_page+0x9c0/0x9c0 [ 3446.474476] ? check_preemption_disabled+0x41/0x280 [ 3446.479505] handle_mm_fault+0x436/0xb10 [ 3446.483579] __get_user_pages+0x6f0/0x1710 [ 3446.487826] ? follow_page_mask+0x1d00/0x1d00 [ 3446.492337] ? check_preemption_disabled+0x41/0x280 [ 3446.497366] populate_vma_page_range+0x200/0x290 [ 3446.502135] __mm_populate+0x1ea/0x350 [ 3446.506028] ? populate_vma_page_range+0x290/0x290 [ 3446.510964] ? do_mlock+0x6b0/0x6b0 [ 3446.514590] ? security_capable+0x8f/0xc0 [ 3446.518752] __se_sys_mlockall+0x362/0x4e0 [ 3446.522990] do_syscall_64+0xf9/0x620 [ 3446.526798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3446.532008] RIP: 0033:0x4665f9 [ 3446.535204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3446.554103] RSP: 002b:00007f17a6089188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3446.561813] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3446.569085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3446.576442] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3446.583729] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3446.590994] R13: 00007fff161510cf R14: 00007f17a6089300 R15: 0000000000022000 [ 3446.617681] Mem-Info: [ 3446.620318] active_anon:280870 inactive_anon:956339 isolated_anon:0 [ 3446.620318] active_file:24 inactive_file:23 isolated_file:0 [ 3446.620318] unevictable:72652 dirty:14 writeback:0 unstable:0 [ 3446.620318] slab_reclaimable:21101 slab_unreclaimable:159158 [ 3446.620318] mapped:57909 shmem:19289 pagetables:73725 bounce:0 [ 3446.620318] free:24901 free_pcp:0 free_cma:0 [ 3446.688086] Node 0 active_anon:918468kB inactive_anon:535984kB active_file:0kB inactive_file:12kB unevictable:251492kB isolated(anon):0kB isolated(file):0kB mapped:226528kB dirty:36kB writeback:0kB shmem:34284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3446.717680] Node 1 active_anon:205012kB inactive_anon:3289372kB active_file:8kB inactive_file:80kB unevictable:39116kB isolated(anon):0kB isolated(file):0kB mapped:5108kB dirty:20kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3446.763135] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3446.809218] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3446.814290] Node 0 DMA32 free:35364kB min:35996kB low:44992kB high:53988kB active_anon:916112kB inactive_anon:535708kB active_file:44kB inactive_file:44kB unevictable:249012kB writepending:236kB present:3129332kB managed:2763456kB mlocked:249012kB kernel_stack:22912kB pagetables:53232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3446.857009] lowmem_reserve[]: 0 0 1 1 1 [ 3446.861036] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3446.899614] lowmem_reserve[]: 0 0 0 0 0 [ 3446.903618] Node 1 Normal free:53564kB min:53876kB low:67344kB high:80812kB active_anon:205056kB inactive_anon:3289376kB active_file:32kB inactive_file:36kB unevictable:39212kB writepending:0kB present:4194304kB managed:4128248kB mlocked:39212kB kernel_stack:76800kB pagetables:241476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3446.949867] lowmem_reserve[]: 0 0 0 0 0 [ 3446.953900] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3446.984882] Node 0 DMA32: 1950*4kB (UME) 1174*8kB (UME) 500*16kB (UME) 324*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35560kB [ 3447.012679] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3447.038218] Node 1 Normal: 29*4kB (M) 87*8kB (UM) 933*16kB (UM) 1182*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53564kB [ 3447.054921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3447.078076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3447.089030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3447.111468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3447.124249] 24459 total pagecache pages [ 3447.154474] 0 pages in swap cache [ 3447.180378] Swap cache stats: add 0, delete 0, find 0/0 [ 3447.207288] Free swap = 0kB [ 3447.210336] Total swap = 0kB [ 3447.213441] 2097051 pages RAM [ 3447.253660] 0 pages HighMem/MovableOnly [ 3447.263065] 369648 pages reserved [ 3447.290592] 0 pages cma reserved [ 3447.293995] Out of memory (oom_kill_allocating_task): Kill process 3806 (syz-executor.2) score 0 or sacrifice child [ 3447.326820] Killed process 3786 (syz-executor.2) total-vm:93384kB, anon-rss:15340kB, file-rss:39244kB, shmem-rss:0kB [ 3447.363984] oom_reaper: reaped process 3786 (syz-executor.2), now anon-rss:15352kB, file-rss:40192kB, shmem-rss:0kB [ 3447.368681] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3447.435970] in:imklog cpuset=/ mems_allowed=0-1 [ 3447.440694] CPU: 0 PID: 3664 Comm: in:imklog Not tainted 4.19.205-syzkaller #0 [ 3447.448054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3447.457403] Call Trace: [ 3447.459999] dump_stack+0x1fc/0x2ef [ 3447.463633] dump_header+0x15d/0xc3f [ 3447.467352] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3447.472460] ? ___ratelimit+0x319/0x590 [ 3447.476539] oom_kill_process.cold+0x10/0x692 [ 3447.481134] ? check_preemption_disabled+0x41/0x280 [ 3447.486344] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3447.491630] out_of_memory+0x1072/0x1390 [ 3447.495693] ? oom_killer_disable+0x270/0x270 [ 3447.500195] ? mutex_trylock+0x15f/0x1a0 [ 3447.504255] __alloc_pages_nodemask+0x23a2/0x2890 [ 3447.509102] ? find_get_entry+0x4cd/0x8a0 [ 3447.513256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3447.518125] alloc_pages_current+0x193/0x2a0 [ 3447.522540] filemap_fault+0x146e/0x2180 [ 3447.526618] ext4_filemap_fault+0x84/0xb0 [ 3447.530768] __do_fault+0x10b/0x4b0 [ 3447.534416] __handle_mm_fault+0x273b/0x41c0 [ 3447.538829] ? vm_insert_page+0x9c0/0x9c0 [ 3447.542978] ? lock_downgrade+0x720/0x720 [ 3447.547135] ? check_preemption_disabled+0x41/0x280 [ 3447.552246] handle_mm_fault+0x436/0xb10 [ 3447.556310] __do_page_fault+0x68e/0xd60 [ 3447.560371] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3447.565377] ? spurious_fault+0x840/0x840 [ 3447.569520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3447.574352] ? page_fault+0x8/0x30 [ 3447.577884] page_fault+0x1e/0x30 [ 3447.581326] RIP: 0033:0x7f02ced1b22d [ 3447.585024] Code: Bad RIP value. [ 3447.588373] RSP: 002b:00007f02cc6b7580 EFLAGS: 00010293 [ 3447.593714] RAX: 0000000000000b66 RBX: 0000000000000000 RCX: 00007f02ced1b22d [ 3447.600983] RDX: 0000000000001fa0 RSI: 00007f02cc6b7da0 RDI: 0000000000000004 [ 3447.608238] RBP: 00005632d37cc9d0 R08: 0000000000000000 R09: 0000000004000001 [ 3447.615488] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f02cc6b7da0 [ 3447.622749] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f02cc6b7e03 [ 3447.633279] Mem-Info: 05:55:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3447.706465] active_anon:280863 inactive_anon:956339 isolated_anon:0 [ 3447.706465] active_file:334 inactive_file:1236 isolated_file:0 [ 3447.706465] unevictable:68430 dirty:0 writeback:0 unstable:0 [ 3447.706465] slab_reclaimable:21111 slab_unreclaimable:159075 [ 3447.706465] mapped:58099 shmem:19289 pagetables:73687 bounce:0 [ 3447.706465] free:26939 free_pcp:937 free_cma:0 [ 3447.825511] nla_parse: 4 callbacks suppressed [ 3447.825519] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3447.893884] Node 0 active_anon:918380kB inactive_anon:535988kB active_file:3568kB inactive_file:2788kB unevictable:244732kB isolated(anon):0kB isolated(file):128kB mapped:230888kB dirty:84kB writeback:0kB shmem:34284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3447.947908] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3448.078067] Node 1 active_anon:205100kB inactive_anon:3289372kB active_file:52kB inactive_file:88kB unevictable:35772kB isolated(anon):0kB isolated(file):0kB mapped:5976kB dirty:32kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3448.194099] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3448.325004] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3448.330066] Node 0 DMA32 free:35388kB min:35996kB low:44992kB high:53988kB active_anon:916224kB inactive_anon:535712kB active_file:2376kB inactive_file:3200kB unevictable:243692kB writepending:84kB present:3129332kB managed:2763456kB mlocked:243692kB kernel_stack:22720kB pagetables:53132kB bounce:0kB free_pcp:736kB local_pcp:424kB free_cma:0kB [ 3448.475000] lowmem_reserve[]: 0 0 1 1 1 [ 3448.479019] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3448.573945] lowmem_reserve[]: 0 0 0 0 0 [ 3448.584005] Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:205100kB inactive_anon:3289372kB active_file:276kB inactive_file:260kB unevictable:35208kB writepending:32kB present:4194304kB managed:4128248kB mlocked:35712kB kernel_stack:76672kB pagetables:241688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3448.627996] lowmem_reserve[]: 0 0 0 0 0 [ 3448.660389] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3448.700088] Node 0 DMA32: 1706*4kB (UE) 1104*8kB (UE) 572*16kB (UME) 360*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36328kB [ 3448.740047] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3448.779618] Node 1 Normal: 337*4kB (UME) 29*8kB (UM) 838*16kB (UM) 1187*32kB (UME) 18*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54508kB [ 3448.804977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3448.813854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3448.855018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3448.863890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3448.898963] 25848 total pagecache pages [ 3448.902966] 0 pages in swap cache [ 3448.919161] Swap cache stats: add 0, delete 0, find 0/0 [ 3448.924549] Free swap = 0kB [ 3448.945846] Total swap = 0kB [ 3448.948890] 2097051 pages RAM [ 3448.951982] 0 pages HighMem/MovableOnly [ 3448.979071] 369648 pages reserved [ 3448.982582] 0 pages cma reserved [ 3449.001622] Out of memory (oom_kill_allocating_task): Kill process 3664 (in:imklog) score 0 or sacrifice child [ 3449.026098] Killed process 3602 (rsyslogd) total-vm:254332kB, anon-rss:856kB, file-rss:0kB, shmem-rss:0kB [ 3449.084863] oom_reaper: reaped process 3602 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:55:03 executing program 2: mlockall(0x7) mlockall(0x3) fork() semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/210) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xec0}}, 0x0) 05:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:03 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x0) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:55:03 executing program 0: mlockall(0x3) r0 = fork() r1 = syz_open_procfs$userns(r0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="619bbd3a990c633d4cc0480dd122e791f307803510f1afbe148c1beb760f5e96c2ef51c41f46792bbfd3a936c807fdf7d8d087930b8d1ec274e3b2b4dde702cddfc5b1588f07b62b1feb752860bfed3826539a0a6d9b973ed1eec63c2305a43d18cc338c2fc9e705adf6c6d4931465233af3e7347612f46c1b6ad700a0f9c5bfa02544f0f72897f41fb3f54a", 0x8c}, {&(0x7f0000000180)="b98c9c1c98aa36d7fc3cf51e83014cd1a8318517a802938f499bcaff35c010e90e1d8a7a00022989990954c120fb5416048d920c180e6a1939dfcfa897282b9b8b3748bd145f3fa1cb73ca87a002c04cd4c3f92051a41e55f73dfa55af7a870344c2823cdfb3b91a6ac3071dda8ac0dfbffda48677a7004764623d909ccc3c0044ce28da56cd11615a859ebcbbc046212428bdf161dccfe7046b0e3a3e0bb557e912697c", 0xa4}, {&(0x7f0000000240)="b988bcc44d8074ea3965765ac56d94dc7c800d858fb8ba3c008336bcacf74c5e33f6c294a8102bf63294c047f8f40157b68697bb11", 0x35}], 0x3, 0x0, 0x0, 0x8841}, 0x4000041) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 3449.293420] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3449.327971] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3449.386000] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3449.412549] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x33fe0}}, 0x0) 05:55:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3449.619401] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3449.669635] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3449.728651] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3449.757993] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20000128}}, 0x0) 05:55:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000200", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3450.681820] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3450.742012] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3450.777011] CPU: 0 PID: 8110 Comm: syz-fuzzer Not tainted 4.19.205-syzkaller #0 [ 3450.784477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3450.793854] Call Trace: [ 3450.796450] dump_stack+0x1fc/0x2ef [ 3450.800083] dump_header+0x15d/0xc3f [ 3450.803796] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3450.808887] ? ___ratelimit+0x319/0x590 [ 3450.812847] oom_kill_process.cold+0x10/0x692 [ 3450.817330] ? check_preemption_disabled+0x41/0x280 [ 3450.823027] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3450.828287] out_of_memory+0x1072/0x1390 [ 3450.832464] ? oom_killer_disable+0x270/0x270 [ 3450.836947] ? mutex_trylock+0x15f/0x1a0 [ 3450.841009] __alloc_pages_nodemask+0x23a2/0x2890 [ 3450.845841] ? find_get_entry+0x4cd/0x8a0 [ 3450.849977] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3450.854827] alloc_pages_current+0x193/0x2a0 [ 3450.859217] filemap_fault+0x146e/0x2180 [ 3450.863268] ext4_filemap_fault+0x84/0xb0 [ 3450.867435] __do_fault+0x10b/0x4b0 [ 3450.871045] __handle_mm_fault+0x273b/0x41c0 [ 3450.875451] ? vm_insert_page+0x9c0/0x9c0 [ 3450.879577] ? __fget+0x356/0x510 [ 3450.883107] ? check_preemption_disabled+0x41/0x280 [ 3450.888130] handle_mm_fault+0x436/0xb10 [ 3450.892188] __do_page_fault+0x68e/0xd60 [ 3450.896239] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3450.901238] ? spurious_fault+0x840/0x840 [ 3450.905368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3450.910203] ? page_fault+0x8/0x30 [ 3450.913726] page_fault+0x1e/0x30 [ 3450.917173] RIP: 0033:0x46e380 [ 3450.920350] Code: Bad RIP value. [ 3450.923699] RSP: 002b:00007ffe25c6ede0 EFLAGS: 00010246 [ 3450.929045] RAX: 0000000000000000 RBX: 00000000000000f8 RCX: 000000000046e380 [ 3450.936311] RDX: 0000000000000080 RSI: 00007ffe25c6ee30 RDI: 0000000000000003 [ 3450.943578] RBP: 00007ffe25c6f430 R08: 0000000000000000 R09: 0000000000000000 [ 3450.950834] R10: 00000000000000f8 R11: 0000000000000246 R12: 0000000000000003 [ 3450.958093] R13: 0000000001853360 R14: 0000000000000000 R15: 0000000000000000 [ 3450.970780] Mem-Info: [ 3450.973311] active_anon:280758 inactive_anon:956339 isolated_anon:0 [ 3450.973311] active_file:43 inactive_file:38 isolated_file:0 [ 3450.973311] unevictable:72404 dirty:11 writeback:0 unstable:0 [ 3450.973311] slab_reclaimable:21127 slab_unreclaimable:159453 [ 3450.973311] mapped:56250 shmem:19289 pagetables:73747 bounce:0 [ 3450.973311] free:25030 free_pcp:8 free_cma:0 [ 3451.037682] Node 0 active_anon:918248kB inactive_anon:535988kB active_file:60kB inactive_file:8kB unevictable:252640kB isolated(anon):0kB isolated(file):0kB mapped:220864kB dirty:0kB writeback:0kB shmem:34288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3451.071211] Node 1 active_anon:204844kB inactive_anon:3289368kB active_file:28kB inactive_file:24kB unevictable:37132kB isolated(anon):0kB isolated(file):0kB mapped:4040kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3451.121889] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15908kB mlocked:2048kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3451.160656] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3451.186063] Node 0 DMA32 free:35836kB min:35996kB low:44992kB high:53988kB active_anon:916092kB inactive_anon:535712kB active_file:60kB inactive_file:8kB unevictable:250592kB writepending:0kB present:3129332kB managed:2763456kB mlocked:250592kB kernel_stack:22816kB pagetables:53220kB bounce:0kB free_pcp:32kB local_pcp:4kB free_cma:0kB [ 3451.234330] lowmem_reserve[]: 0 0 1 1 1 [ 3451.238712] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3451.279031] lowmem_reserve[]: 0 0 0 0 0 [ 3451.297867] Node 1 Normal free:53712kB min:53876kB low:67344kB high:80812kB active_anon:204844kB inactive_anon:3289368kB active_file:28kB inactive_file:24kB unevictable:37132kB writepending:0kB present:4194304kB managed:4128248kB mlocked:37132kB kernel_stack:76736kB pagetables:241424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3451.341814] lowmem_reserve[]: 0 0 0 0 0 [ 3451.346075] Node 0 DMA: 10*4kB (UE) 7*8kB (U) 6*16kB (UE) 3*32kB (UE) 1*64kB (E) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3451.375264] Node 0 DMA32: 1925*4kB (UME) 1169*8kB (UME) 432*16kB (UE) 369*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35836kB [ 3451.403245] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3451.428208] Node 1 Normal: 406*4kB (UM) 61*8kB (UM) 855*16kB (U) 1185*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53712kB [ 3451.442058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3451.464593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3451.482551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3451.522220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3451.560704] 22712 total pagecache pages [ 3451.566371] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.566551] 0 pages in swap cache [ 3451.610304] Swap cache stats: add 0, delete 0, find 0/0 [ 3451.641154] Free swap = 0kB [ 3451.644472] Total swap = 0kB [ 3451.647928] 2097051 pages RAM [ 3451.651464] 0 pages HighMem/MovableOnly [ 3451.680692] 369648 pages reserved [ 3451.684435] 0 pages cma reserved [ 3451.688248] Out of memory (oom_kill_allocating_task): Kill process 8110 (syz-fuzzer) score 0 or sacrifice child [ 3451.722964] Killed process 1291 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:656kB, shmem-rss:0kB [ 3451.771350] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3451.821142] systemd-journal cpuset=/ mems_allowed=0-1 [ 3452.043457] CPU: 1 PID: 901 Comm: systemd-journal Not tainted 4.19.205-syzkaller #0 [ 3452.051278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3452.060638] Call Trace: [ 3452.063233] dump_stack+0x1fc/0x2ef [ 3452.066871] dump_header+0x15d/0xc3f [ 3452.070590] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3452.075696] ? ___ratelimit+0x319/0x590 [ 3452.079678] oom_kill_process.cold+0x10/0x692 [ 3452.084266] ? check_preemption_disabled+0x41/0x280 [ 3452.089296] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3452.094665] out_of_memory+0x1072/0x1390 [ 3452.098734] ? oom_killer_disable+0x270/0x270 [ 3452.103232] ? mutex_trylock+0x15f/0x1a0 [ 3452.107306] __alloc_pages_nodemask+0x23a2/0x2890 [ 3452.112162] ? find_get_entry+0x4cd/0x8a0 [ 3452.116406] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3452.121297] alloc_pages_current+0x193/0x2a0 [ 3452.125838] filemap_fault+0x146e/0x2180 [ 3452.129913] ext4_filemap_fault+0x84/0xb0 [ 3452.134086] __do_fault+0x10b/0x4b0 [ 3452.137716] ? do_raw_spin_unlock+0x171/0x230 [ 3452.142220] __handle_mm_fault+0x273b/0x41c0 [ 3452.146640] ? vm_insert_page+0x9c0/0x9c0 [ 3452.150803] ? check_preemption_disabled+0x41/0x280 [ 3452.155830] handle_mm_fault+0x436/0xb10 [ 3452.159901] __do_page_fault+0x68e/0xd60 [ 3452.163973] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3452.168993] ? spurious_fault+0x840/0x840 [ 3452.173151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3452.178000] ? page_fault+0x8/0x30 [ 3452.181564] page_fault+0x1e/0x30 [ 3452.185039] RIP: 0033:0x7fe4065710e0 [ 3452.188772] Code: Bad RIP value. [ 3452.192136] RSP: 002b:00007ffc39b0fce8 EFLAGS: 00010246 [ 3452.197498] RAX: 0000000000000001 RBX: 000055ffd0d3c310 RCX: 00007fe405c342e3 [ 3452.204856] RDX: 0000000000000013 RSI: 00007ffc39b0fd00 RDI: 0000000000000000 [ 3452.212125] RBP: 00007ffc39b0fef0 R08: 00007ffc39b76000 R09: 0000039cbedd8e53 [ 3452.219393] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc39b0fd00 [ 3452.226658] R13: 0000000000000001 R14: 0000000000000001 R15: 0005cac07987876d [ 3452.644396] Mem-Info: [ 3452.647104] active_anon:280747 inactive_anon:861783 isolated_anon:0 [ 3452.647104] active_file:3135 inactive_file:1801 isolated_file:0 [ 3452.647104] unevictable:41543 dirty:25 writeback:0 unstable:0 [ 3452.647104] slab_reclaimable:21128 slab_unreclaimable:158837 [ 3452.647104] mapped:47229 shmem:19289 pagetables:72540 bounce:0 [ 3452.647104] free:149978 free_pcp:1071 free_cma:0 [ 3452.683111] Node 0 active_anon:917848kB inactive_anon:459036kB active_file:8436kB inactive_file:3848kB unevictable:152740kB isolated(anon):0kB isolated(file):0kB mapped:185876kB dirty:100kB writeback:0kB shmem:34288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1177600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3452.712858] Node 1 active_anon:204740kB inactive_anon:2988096kB active_file:5404kB inactive_file:2356kB unevictable:13432kB isolated(anon):0kB isolated(file):0kB mapped:3140kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 05:55:07 executing program 2: mlockall(0x5) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:07 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x0) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 05:55:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7ffff000}}, 0x0) 05:55:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3452.743847] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:276kB active_file:1820kB inactive_file:0kB unevictable:140kB writepending:28kB present:15992kB managed:15908kB mlocked:124kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3452.850842] nla_parse: 4 callbacks suppressed [ 3452.850853] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3452.912749] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3452.912982] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3452.997413] Node 0 DMA32 free:188924kB min:35996kB low:44992kB high:53988kB active_anon:920296kB inactive_anon:458724kB active_file:3332kB inactive_file:17564kB unevictable:185292kB writepending:204kB present:3129332kB managed:2763456kB mlocked:185328kB kernel_stack:22336kB pagetables:51448kB bounce:0kB free_pcp:1560kB local_pcp:272kB free_cma:0kB [ 3453.144867] lowmem_reserve[]: 0 0 1 1 1 [ 3453.154210] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3453.224586] lowmem_reserve[]: 0 0 0 0 0 [ 3453.230318] Node 1 Normal free:372392kB min:53876kB low:67344kB high:80812kB active_anon:203764kB inactive_anon:2987940kB active_file:3920kB inactive_file:2848kB unevictable:15080kB writepending:44kB present:4194304kB managed:4128248kB mlocked:15080kB kernel_stack:76160kB pagetables:238684kB bounce:0kB free_pcp:2896kB local_pcp:1428kB free_cma:0kB [ 3453.299279] lowmem_reserve[]: 0 0 0 0 0 [ 3453.303313] Node 0 DMA: 4*4kB (UE) 2*8kB (UM) 1*16kB (E) 4*32kB (UME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11056kB [ 3453.320337] Node 0 DMA32: 4714*4kB (UE) 2602*8kB (UME) 2133*16kB (UME) 659*32kB (UME) 99*64kB (UM) 22*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 18*2048kB (M) 7*4096kB (M) = 172648kB [ 3453.381839] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3453.426775] Node 1 Normal: 5952*4kB (UME) 7911*8kB (UM) 3543*16kB (UM) 2912*32kB (UME) 1088*64kB (UM) 468*128kB (UM) 11*256kB (M) 4*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 372392kB [ 3453.450138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3453.473159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3453.486398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3453.496482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3453.505796] 33608 total pagecache pages [ 3453.510033] 0 pages in swap cache [ 3453.513722] Swap cache stats: add 0, delete 0, find 0/0 [ 3453.520397] Free swap = 0kB [ 3453.523688] Total swap = 0kB [ 3453.527263] 2097051 pages RAM [ 3453.530545] 0 pages HighMem/MovableOnly [ 3453.546131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3453.554242] 369648 pages reserved [ 3453.562968] 0 pages cma reserved [ 3453.569313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3453.578446] Out of memory (oom_kill_allocating_task): Kill process 901 (systemd-journal) score 0 or sacrifice child [ 3453.600162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3453.613148] Killed process 901 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:0kB, shmem-rss:2428kB 05:55:08 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) read$usbmon(r1, &(0x7f0000000000)=""/49, 0x31) 05:55:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000300", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xfffffdef}}, 0x0) [ 3453.627579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3453.641967] device bridge_slave_1 left promiscuous mode [ 3453.648053] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3453.654442] bridge0: port 2(bridge_slave_1) entered disabled state [ 3453.656435] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3453.688667] device bridge_slave_0 left promiscuous mode 05:55:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000400", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3453.729328] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3453.738813] bridge0: port 1(bridge_slave_0) entered disabled state [ 3453.752571] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3453.771854] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3453.811247] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3453.821330] systemd[1]: Stopped Journal Service. [ 3453.828724] device veth1_macvtap left promiscuous mode [ 3453.851966] device veth0_macvtap left promiscuous mode 05:55:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x8}, 0x0) [ 3453.883162] device veth1_vlan left promiscuous mode 05:55:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3453.915436] systemd[1]: Starting Journal Service... [ 3453.921796] device veth0_vlan left promiscuous mode 05:55:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000500", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3454.009267] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:08 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x0) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3454.195357] systemd-journald[4081]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3454.540246] device hsr_slave_1 left promiscuous mode [ 3454.551893] device hsr_slave_0 left promiscuous mode [ 3454.576832] team0 (unregistering): Port device team_slave_1 removed [ 3454.584081] team0 (unregistering): Port device team_slave_0 removed [ 3454.597994] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3454.612074] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3454.672371] bond0 (unregistering): Released all slaves [ 3454.710027] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3454.964172] systemd[1]: Started Journal Service. [ 3455.522528] IPVS: ftp: loaded support on port[0] = 21 [ 3455.794270] chnl_net:caif_netlink_parms(): no params data found [ 3455.923594] bridge0: port 1(bridge_slave_0) entered blocking state [ 3455.935680] bridge0: port 1(bridge_slave_0) entered disabled state [ 3455.943156] device bridge_slave_0 entered promiscuous mode [ 3455.956683] bridge0: port 2(bridge_slave_1) entered blocking state [ 3455.963093] bridge0: port 2(bridge_slave_1) entered disabled state [ 3455.976182] device bridge_slave_1 entered promiscuous mode [ 3456.009222] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3456.020172] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3456.058616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3456.072689] team0: Port device team_slave_0 added [ 3456.079994] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3456.092956] team0: Port device team_slave_1 added [ 3456.118920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3456.127678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3456.155067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3456.175789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3456.182051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3456.210070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3456.221736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3456.229844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3456.251602] device hsr_slave_0 entered promiscuous mode [ 3456.257500] device hsr_slave_1 entered promiscuous mode [ 3456.263585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3456.271585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3456.342100] bridge0: port 2(bridge_slave_1) entered blocking state [ 3456.348709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3456.355652] bridge0: port 1(bridge_slave_0) entered blocking state [ 3456.362024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3456.395421] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3456.401508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3456.411944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3456.421981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3456.429499] bridge0: port 1(bridge_slave_0) entered disabled state [ 3456.437172] bridge0: port 2(bridge_slave_1) entered disabled state [ 3456.444131] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3456.455642] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3456.461889] 8021q: adding VLAN 0 to HW filter on device team0 [ 3456.471463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3456.479374] bridge0: port 1(bridge_slave_0) entered blocking state [ 3456.485806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3456.506140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3456.513737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3456.520159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3456.528689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3456.537422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3456.546439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3456.559913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3456.567379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3456.579124] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3456.585541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3456.600380] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3456.609128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3456.616304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3456.627377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3456.642176] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3456.652027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3456.689421] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3456.697140] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3456.703827] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3456.715642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3456.723184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3456.730449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3456.739233] device veth0_vlan entered promiscuous mode [ 3456.750730] device veth1_vlan entered promiscuous mode [ 3456.765463] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3456.775128] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3456.781952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3456.790565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3456.800798] device veth0_macvtap entered promiscuous mode [ 3456.807430] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3456.816843] device veth1_macvtap entered promiscuous mode [ 3456.822896] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3456.831935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3456.842884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3456.851822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3456.861913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3456.871342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3456.881146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3456.890436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3456.900169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3456.909324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3456.920473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3456.929823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3456.939565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3456.949672] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3456.957034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3456.964180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3456.971641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3456.979049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3456.987005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3456.998391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3457.008503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3457.017664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3457.028363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3457.037686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3457.047768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3457.056944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3457.066840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3457.076222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3457.086256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3457.096557] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3457.103437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3457.111560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3457.120755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3457.231924] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 3457.238635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3457.254513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3457.267918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3457.280766] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 3457.287735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3457.295263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3457.302236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3457.554540] Bluetooth: hci2: command 0x0409 tx timeout 05:55:12 executing program 2: mlockall(0x7) mlockall(0x4) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:12 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x0) fork() syz_open_procfs$userns(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 05:55:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xb}, 0x0) 05:55:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000600", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:12 executing program 0: mlockall(0x3) fork() r0 = fork() fork() sched_getscheduler(r0) sched_getscheduler(r0) fork() r1 = fork() sched_getscheduler(r1) fork() r2 = fork() sched_getscheduler(r2) fork() fork() fork() r3 = fork() pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r4}, 0x10) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000000)=""/27) syz_open_procfs$userns(r3, 0x0) 05:55:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\a\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3458.311247] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\n\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1d}, 0x0) [ 3458.408676] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000f00", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:13 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x0) fork() syz_open_procfs$userns(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) [ 3458.626547] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3458.679614] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:13 executing program 2: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1) mlockall(0x7) mlockall(0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f00000000c0)=""/208, 0xd0}) 05:55:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00H\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:13 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) mlockall(0x7) mlockall(0x0) fork() syz_open_procfs$userns(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) [ 3458.875686] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3458.927032] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3459.634101] Bluetooth: hci2: command 0x041b tx timeout 05:55:15 executing program 0: fork() fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 05:55:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00L\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x2}, 0x0) 05:55:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:15 executing program 2: mlockall(0x7) mlockall(0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e00)={'wpan0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf2505000000080004000102e1ff1cef743d0000000014000300fc0100000000000000000000000000000500010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) timer_getoverrun(0x0) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3460.661608] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3460.701140] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00`\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x3}, 0x0) 05:55:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00h\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3460.879106] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:15 executing program 0: mlockall(0x3) fork() mlockall(0x4) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) mlockall(0x6) syz_open_procfs$userns(0x0, 0x0) [ 3460.939207] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00l\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x7}, 0x0) 05:55:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00t\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:16 executing program 2: mlockall(0xa) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf}, 0x0) 05:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00z\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3461.723997] Bluetooth: hci2: command 0x040f tx timeout [ 3463.793753] Bluetooth: hci2: command 0x0419 tx timeout 05:55:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000005", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:18 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) syz_open_procfs$userns(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) 05:55:18 executing program 2: mlockall(0x1) mlockall(0x2) r0 = semget$private(0x0, 0x0, 0x1a8) semctl$IPC_RMID(r0, 0x0, 0x0) mlockall(0x3) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SEM_STAT_ANY(r1, 0x4, 0x14, &(0x7f0000000040)=""/106) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0}, 0x0) 05:55:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000006", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) [ 3464.375566] nla_parse: 4 callbacks suppressed [ 3464.375575] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\a', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:19 executing program 3: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) [ 3464.449073] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x300}, 0x0) 05:55:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\n', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3464.670536] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3464.712454] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3465.378112] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3465.390307] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3465.402150] CPU: 0 PID: 4690 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3465.409988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3465.419324] Call Trace: [ 3465.421901] dump_stack+0x1fc/0x2ef [ 3465.425607] dump_header+0x15d/0xc3f [ 3465.429310] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3465.434419] ? ___ratelimit+0x319/0x590 [ 3465.438393] oom_kill_process.cold+0x10/0x692 [ 3465.442883] ? check_preemption_disabled+0x41/0x280 [ 3465.447886] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3465.453160] out_of_memory+0x1072/0x1390 [ 3465.457219] ? oom_killer_disable+0x270/0x270 [ 3465.461792] ? mutex_trylock+0x15f/0x1a0 [ 3465.465857] __alloc_pages_nodemask+0x23a2/0x2890 [ 3465.470705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3465.475542] ? page_mkclean+0x2b0/0x2b0 [ 3465.479503] ? munlock_vma_page+0x422/0x640 [ 3465.483828] ? __lock_acquire+0x6de/0x3ff0 [ 3465.488058] alloc_pages_vma+0xf2/0x780 [ 3465.492034] wp_page_copy+0x219/0x2c40 [ 3465.495939] ? _vm_normal_page+0x132/0x510 [ 3465.500168] ? follow_pte_pmd+0x60/0x60 [ 3465.504130] do_wp_page+0x2d4/0x2210 [ 3465.507836] ? finish_mkwrite_fault+0x640/0x640 [ 3465.512487] ? __handle_mm_fault+0x15f6/0x41c0 [ 3465.517056] ? mark_held_locks+0xf0/0xf0 [ 3465.521104] __handle_mm_fault+0x258b/0x41c0 [ 3465.525511] ? vm_insert_page+0x9c0/0x9c0 [ 3465.529667] ? check_preemption_disabled+0x41/0x280 [ 3465.534670] handle_mm_fault+0x436/0xb10 [ 3465.538731] __get_user_pages+0x6f0/0x1710 [ 3465.542979] ? follow_page_mask+0x1d00/0x1d00 [ 3465.547461] ? mark_held_locks+0xf0/0xf0 [ 3465.551508] ? check_preemption_disabled+0x41/0x280 [ 3465.556513] populate_vma_page_range+0x200/0x290 [ 3465.561256] __mm_populate+0x1ea/0x350 [ 3465.565141] ? populate_vma_page_range+0x290/0x290 [ 3465.570127] ? do_mlock+0x6b0/0x6b0 [ 3465.573743] ? security_capable+0x8f/0xc0 [ 3465.577939] __se_sys_mlockall+0x362/0x4e0 [ 3465.582177] do_syscall_64+0xf9/0x620 [ 3465.585966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3465.591138] RIP: 0033:0x4665f9 [ 3465.594314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3465.613237] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3465.620927] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3465.628185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3465.635450] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3465.642709] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3465.649960] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3465.669126] Mem-Info: [ 3465.671573] active_anon:279981 inactive_anon:959307 isolated_anon:0 [ 3465.671573] active_file:16 inactive_file:15 isolated_file:0 [ 3465.671573] unevictable:71440 dirty:0 writeback:0 unstable:0 [ 3465.671573] slab_reclaimable:20608 slab_unreclaimable:157999 [ 3465.671573] mapped:63131 shmem:21338 pagetables:74300 bounce:0 [ 3465.671573] free:25016 free_pcp:124 free_cma:0 [ 3465.706768] Node 0 active_anon:915820kB inactive_anon:569664kB active_file:32kB inactive_file:32kB unevictable:218072kB isolated(anon):0kB isolated(file):0kB mapped:232752kB dirty:0kB writeback:0kB shmem:42480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3465.741732] Node 1 active_anon:204104kB inactive_anon:3267564kB active_file:32kB inactive_file:28kB unevictable:67688kB isolated(anon):0kB isolated(file):0kB mapped:19772kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3465.773787] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1160kB active_file:0kB inactive_file:0kB unevictable:528kB writepending:0kB present:15992kB managed:15908kB mlocked:528kB kernel_stack:64kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3465.801395] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3465.806504] Node 0 DMA32 free:35508kB min:35996kB low:44992kB high:53988kB active_anon:913664kB inactive_anon:568304kB active_file:36kB inactive_file:28kB unevictable:217572kB writepending:0kB present:3129332kB managed:2763456kB mlocked:217572kB kernel_stack:22560kB pagetables:52628kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3465.836698] lowmem_reserve[]: 0 0 1 1 1 [ 3465.840672] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3465.866793] lowmem_reserve[]: 0 0 0 0 0 [ 3465.870773] Node 1 Normal free:53576kB min:53876kB low:67344kB high:80812kB active_anon:204104kB inactive_anon:3267564kB active_file:68kB inactive_file:0kB unevictable:67688kB writepending:0kB present:4194304kB managed:4128248kB mlocked:67688kB kernel_stack:77472kB pagetables:244420kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3465.908275] lowmem_reserve[]: 0 0 0 0 0 [ 3465.912461] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 1*512kB (E) 3*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3465.928482] Node 0 DMA32: 2683*4kB (UE) 1139*8kB (UE) 205*16kB (UE) 217*32kB (UME) 29*64kB (UM) 2*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 35508kB [ 3465.944880] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3465.956419] Node 1 Normal: 0*4kB 1*8kB (M) 904*16kB (U) 1222*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 3465.969463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3465.978705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3465.987647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3465.996737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3466.005595] 31927 total pagecache pages [ 3466.009801] 0 pages in swap cache [ 3466.013508] Swap cache stats: add 0, delete 0, find 0/0 [ 3466.019094] Free swap = 0kB [ 3466.022322] Total swap = 0kB [ 3466.025618] 2097051 pages RAM [ 3466.029405] 0 pages HighMem/MovableOnly [ 3466.033372] 369648 pages reserved [ 3466.036849] 0 pages cma reserved [ 3466.040218] Out of memory (oom_kill_allocating_task): Kill process 4690 (syz-executor.0) score 0 or sacrifice child [ 3466.050894] Killed process 4744 (syz-executor.0) total-vm:93384kB, anon-rss:36772kB, file-rss:35084kB, shmem-rss:0kB [ 3466.066894] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3466.079144] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3466.084407] CPU: 0 PID: 4690 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3466.092195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3466.101628] Call Trace: [ 3466.101743] oom_reaper: reaped process 4744 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3466.104213] dump_stack+0x1fc/0x2ef [ 3466.118075] dump_header+0x15d/0xc3f [ 3466.121884] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3466.126982] ? ___ratelimit+0x319/0x590 [ 3466.131055] oom_kill_process.cold+0x10/0x692 [ 3466.135543] ? check_preemption_disabled+0x41/0x280 [ 3466.140557] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3466.145819] out_of_memory+0x1072/0x1390 [ 3466.149863] ? oom_killer_disable+0x270/0x270 [ 3466.154347] ? mutex_trylock+0x15f/0x1a0 [ 3466.158416] __alloc_pages_nodemask+0x23a2/0x2890 [ 3466.163251] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3466.168111] ? page_mkclean+0x2b0/0x2b0 [ 3466.172082] ? munlock_vma_page+0x422/0x640 [ 3466.176397] ? __lock_acquire+0x6de/0x3ff0 [ 3466.180629] alloc_pages_vma+0xf2/0x780 [ 3466.184596] wp_page_copy+0x219/0x2c40 [ 3466.188481] ? _vm_normal_page+0x132/0x510 [ 3466.192717] ? follow_pte_pmd+0x60/0x60 [ 3466.196677] do_wp_page+0x2d4/0x2210 [ 3466.200373] ? finish_mkwrite_fault+0x640/0x640 [ 3466.205023] ? __handle_mm_fault+0x15f6/0x41c0 [ 3466.209591] ? mark_held_locks+0xf0/0xf0 [ 3466.213638] __handle_mm_fault+0x258b/0x41c0 [ 3466.218049] ? vm_insert_page+0x9c0/0x9c0 [ 3466.222191] ? check_preemption_disabled+0x41/0x280 [ 3466.227190] handle_mm_fault+0x436/0xb10 [ 3466.231242] __get_user_pages+0x6f0/0x1710 [ 3466.235472] ? follow_page_mask+0x1d00/0x1d00 [ 3466.239951] ? mark_held_locks+0xf0/0xf0 [ 3466.243996] ? check_preemption_disabled+0x41/0x280 [ 3466.249083] populate_vma_page_range+0x200/0x290 [ 3466.253822] __mm_populate+0x1ea/0x350 [ 3466.257693] ? populate_vma_page_range+0x290/0x290 [ 3466.262601] ? do_mlock+0x6b0/0x6b0 [ 3466.266229] ? security_capable+0x8f/0xc0 [ 3466.270368] __se_sys_mlockall+0x362/0x4e0 [ 3466.274592] do_syscall_64+0xf9/0x620 [ 3466.278478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3466.283659] RIP: 0033:0x4665f9 [ 3466.286846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3466.305853] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3466.313545] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3466.320805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3466.328066] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3466.335335] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3466.342584] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3466.352856] Mem-Info: [ 3466.355447] active_anon:279981 inactive_anon:959328 isolated_anon:0 [ 3466.355447] active_file:15 inactive_file:16 isolated_file:0 [ 3466.355447] unevictable:71440 dirty:0 writeback:0 unstable:0 [ 3466.355447] slab_reclaimable:20608 slab_unreclaimable:157999 [ 3466.355447] mapped:63131 shmem:21338 pagetables:74263 bounce:0 [ 3466.355447] free:24953 free_pcp:248 free_cma:0 [ 3466.389447] Node 0 active_anon:915820kB inactive_anon:569748kB active_file:32kB inactive_file:32kB unevictable:218072kB isolated(anon):0kB isolated(file):0kB mapped:232752kB dirty:0kB writeback:0kB shmem:42480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3466.418013] Node 1 active_anon:204104kB inactive_anon:3267564kB active_file:28kB inactive_file:32kB unevictable:67688kB isolated(anon):0kB isolated(file):0kB mapped:19772kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3466.447928] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1160kB active_file:0kB inactive_file:0kB unevictable:528kB writepending:0kB present:15992kB managed:15908kB mlocked:528kB kernel_stack:64kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3466.475381] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3466.480409] Node 0 DMA32 free:35256kB min:35996kB low:44992kB high:53988kB active_anon:913664kB inactive_anon:568588kB active_file:32kB inactive_file:32kB unevictable:217544kB writepending:0kB present:3129332kB managed:2763456kB mlocked:217544kB kernel_stack:22528kB pagetables:52480kB bounce:0kB free_pcp:744kB local_pcp:248kB free_cma:0kB [ 3466.510585] lowmem_reserve[]: 0 0 1 1 1 [ 3466.514972] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3466.542124] lowmem_reserve[]: 0 0 0 0 0 [ 3466.546183] Node 1 Normal free:53576kB min:53876kB low:67344kB high:80812kB active_anon:204104kB inactive_anon:3267564kB active_file:28kB inactive_file:32kB unevictable:67688kB writepending:0kB present:4194304kB managed:4128248kB mlocked:67688kB kernel_stack:77472kB pagetables:244420kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3466.576686] lowmem_reserve[]: 0 0 0 0 0 [ 3466.580656] Node 0 DMA: 14*4kB (UME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 1*512kB (E) 3*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 3466.596393] Node 0 DMA32: 2620*4kB (UE) 1139*8kB (UE) 205*16kB (UE) 218*32kB (UME) 29*64kB (UM) 2*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 35288kB [ 3466.612404] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3466.623525] Node 1 Normal: 0*4kB 1*8kB (M) 904*16kB (U) 1222*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 3466.636222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3466.647138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3466.655782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3466.664701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3466.673266] 31927 total pagecache pages [ 3466.677275] 0 pages in swap cache [ 3466.680721] Swap cache stats: add 0, delete 0, find 0/0 [ 3466.686148] Free swap = 0kB [ 3466.689162] Total swap = 0kB [ 3466.692176] 2097051 pages RAM [ 3466.695324] 0 pages HighMem/MovableOnly [ 3466.699311] 369648 pages reserved [ 3466.702740] 0 pages cma reserved [ 3466.706151] Out of memory (oom_kill_allocating_task): Kill process 4690 (syz-executor.0) score 0 or sacrifice child [ 3466.716811] Killed process 4743 (syz-executor.0) total-vm:93384kB, anon-rss:36772kB, file-rss:35084kB, shmem-rss:0kB [ 3466.754485] oom_reaper: reaped process 4743 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3467.114545] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3467.142955] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3467.156645] CPU: 0 PID: 4698 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3467.164458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.173819] Call Trace: [ 3467.176427] dump_stack+0x1fc/0x2ef [ 3467.180073] dump_header+0x15d/0xc3f [ 3467.183797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3467.188900] ? ___ratelimit+0x319/0x590 [ 3467.192882] oom_kill_process.cold+0x10/0x692 [ 3467.197385] ? check_preemption_disabled+0x41/0x280 [ 3467.202412] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3467.207692] out_of_memory+0x1072/0x1390 [ 3467.211769] ? oom_killer_disable+0x270/0x270 [ 3467.216269] ? mutex_trylock+0x15f/0x1a0 [ 3467.220335] __alloc_pages_nodemask+0x23a2/0x2890 [ 3467.225194] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3467.230048] ? find_next_bit+0x105/0x130 [ 3467.234116] ? munlock_vma_page+0x422/0x640 [ 3467.238450] ? __lock_acquire+0x6de/0x3ff0 [ 3467.242689] alloc_pages_vma+0xf2/0x780 [ 3467.246673] wp_page_copy+0x219/0x2c40 [ 3467.250568] ? _vm_normal_page+0x132/0x510 [ 3467.254812] ? follow_pte_pmd+0x60/0x60 [ 3467.258800] do_wp_page+0x2d4/0x2210 [ 3467.262525] ? finish_mkwrite_fault+0x640/0x640 [ 3467.267194] ? __handle_mm_fault+0x15f6/0x41c0 [ 3467.271781] ? mark_held_locks+0xf0/0xf0 [ 3467.275846] __handle_mm_fault+0x258b/0x41c0 [ 3467.280257] ? vm_insert_page+0x9c0/0x9c0 [ 3467.284430] ? check_preemption_disabled+0x41/0x280 [ 3467.289539] handle_mm_fault+0x436/0xb10 [ 3467.293607] __get_user_pages+0x6f0/0x1710 [ 3467.297857] ? follow_page_mask+0x1d00/0x1d00 [ 3467.302394] populate_vma_page_range+0x200/0x290 [ 3467.307164] __mm_populate+0x1ea/0x350 [ 3467.311061] ? populate_vma_page_range+0x290/0x290 [ 3467.315995] ? do_mlock+0x6b0/0x6b0 [ 3467.319631] ? security_capable+0x8f/0xc0 [ 3467.323788] __se_sys_mlockall+0x362/0x4e0 [ 3467.328028] do_syscall_64+0xf9/0x620 [ 3467.331843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3467.337061] RIP: 0033:0x4665f9 [ 3467.340338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3467.359233] RSP: 002b:00007fc823417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3467.366943] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3467.374213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 3467.381483] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3467.388751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3467.396022] R13: 00007ffdec45443f R14: 00007fc823417300 R15: 0000000000022000 [ 3467.408623] Mem-Info: [ 3467.411769] active_anon:279992 inactive_anon:954124 isolated_anon:0 [ 3467.411769] active_file:22 inactive_file:39 isolated_file:0 [ 3467.411769] unevictable:71464 dirty:4 writeback:20 unstable:0 [ 3467.411769] slab_reclaimable:20583 slab_unreclaimable:158518 [ 3467.411769] mapped:63159 shmem:21338 pagetables:74300 bounce:0 [ 3467.411769] free:28740 free_pcp:1076 free_cma:0 [ 3467.446708] Node 0 active_anon:915864kB inactive_anon:552860kB active_file:72kB inactive_file:224kB unevictable:228160kB isolated(anon):0kB isolated(file):0kB mapped:232864kB dirty:16kB writeback:76kB shmem:42480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3467.478705] Node 1 active_anon:204104kB inactive_anon:3263636kB active_file:16kB inactive_file:32kB unevictable:57696kB isolated(anon):0kB isolated(file):0kB mapped:19772kB dirty:0kB writeback:4kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3467.507417] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:488kB active_file:0kB inactive_file:660kB unevictable:528kB writepending:0kB present:15992kB managed:15908kB mlocked:528kB kernel_stack:32kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.535460] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3467.541139] Node 0 DMA32 free:36872kB min:35996kB low:44992kB high:53988kB active_anon:913708kB inactive_anon:552688kB active_file:44kB inactive_file:776kB unevictable:227448kB writepending:92kB present:3129332kB managed:2763456kB mlocked:227448kB kernel_stack:22496kB pagetables:52624kB bounce:0kB free_pcp:2136kB local_pcp:1156kB free_cma:0kB [ 3467.574452] lowmem_reserve[]: 0 0 1 1 1 [ 3467.578906] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.605580] lowmem_reserve[]: 0 0 0 0 0 [ 3467.609983] Node 1 Normal free:66848kB min:53876kB low:67344kB high:80812kB active_anon:204104kB inactive_anon:3263928kB active_file:16kB inactive_file:32kB unevictable:57696kB writepending:4kB present:4194304kB managed:4128248kB mlocked:57696kB kernel_stack:77472kB pagetables:244424kB bounce:0kB free_pcp:1544kB local_pcp:260kB free_cma:0kB [ 3467.644969] lowmem_reserve[]: 0 0 0 0 0 [ 3467.650314] Node 0 DMA: 14*4kB (UME) 0*8kB 3*16kB (UME) 1*32kB (E) 2*64kB (UE) 4*128kB (UME) 2*256kB (UE) 1*512kB (E) 3*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11016kB [ 3467.670498] Node 0 DMA32: 2783*4kB (UME) 1382*8kB (UME) 179*16kB (UME) 185*32kB (UME) 29*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 36668kB [ 3467.687611] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3467.699374] Node 1 Normal: 278*4kB (UM) 148*8kB (UM) 990*16kB (UM) 1295*32kB (UME) 37*64kB (M) 39*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66936kB [ 3467.715069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3467.733391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3467.741976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3467.770458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3467.780276] 32916 total pagecache pages [ 3467.784754] 0 pages in swap cache [ 3467.788204] Swap cache stats: add 0, delete 0, find 0/0 [ 3467.794824] Free swap = 0kB [ 3467.797845] Total swap = 0kB [ 3467.801001] 2097051 pages RAM [ 3467.805662] 0 pages HighMem/MovableOnly [ 3467.809819] 369648 pages reserved [ 3467.814179] 0 pages cma reserved [ 3467.817613] Out of memory (oom_kill_allocating_task): Kill process 4698 (syz-executor.2) score 0 or sacrifice child [ 3467.829231] Killed process 4698 (syz-executor.2) total-vm:93384kB, anon-rss:36772kB, file-rss:56580kB, shmem-rss:0kB [ 3467.841788] oom_reaper: reaped process 4698 (syz-executor.2), now anon-rss:36772kB, file-rss:56572kB, shmem-rss:0kB 05:55:22 executing program 2: mlockall(0x7) mlockall(0x1) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000f", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x700}, 0x0) 05:55:22 executing program 3: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:23 executing program 0: mlockall(0x3) fork() mlockall(0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) mmap$usbmon(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, 0xffffffffffffffff, 0x7fffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x40800) syz_open_procfs$userns(0x0, 0x0) 05:55:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00 ', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:23 executing program 3: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) [ 3468.393169] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3468.451920] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:23 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00H', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf00}, 0x0) 05:55:23 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) [ 3468.674339] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3468.749297] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3469.423156] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3469.435578] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3469.440842] CPU: 0 PID: 4762 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3469.448621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3469.457957] Call Trace: [ 3469.460537] dump_stack+0x1fc/0x2ef [ 3469.464159] dump_header+0x15d/0xc3f [ 3469.467859] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3469.472947] ? ___ratelimit+0x319/0x590 [ 3469.476914] oom_kill_process.cold+0x10/0x692 [ 3469.481410] ? check_preemption_disabled+0x41/0x280 [ 3469.486416] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3469.491683] out_of_memory+0x1072/0x1390 [ 3469.495731] ? oom_killer_disable+0x270/0x270 [ 3469.500213] ? mutex_trylock+0x15f/0x1a0 [ 3469.504260] __alloc_pages_nodemask+0x23a2/0x2890 [ 3469.509182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3469.514023] ? find_next_bit+0x105/0x130 [ 3469.518066] ? munlock_vma_page+0x422/0x640 [ 3469.522393] ? __lock_acquire+0x6de/0x3ff0 [ 3469.526633] alloc_pages_vma+0xf2/0x780 [ 3469.530609] wp_page_copy+0x219/0x2c40 [ 3469.534565] ? _vm_normal_page+0x132/0x510 [ 3469.538791] ? follow_pte_pmd+0x60/0x60 [ 3469.542753] do_wp_page+0x2d4/0x2210 [ 3469.546453] ? finish_mkwrite_fault+0x640/0x640 [ 3469.551101] ? __handle_mm_fault+0x15f6/0x41c0 [ 3469.555668] ? mark_held_locks+0xf0/0xf0 [ 3469.559731] __handle_mm_fault+0x258b/0x41c0 [ 3469.564137] ? vm_insert_page+0x9c0/0x9c0 [ 3469.568276] ? check_preemption_disabled+0x41/0x280 [ 3469.573275] handle_mm_fault+0x436/0xb10 [ 3469.577320] __get_user_pages+0x6f0/0x1710 [ 3469.581557] ? follow_page_mask+0x1d00/0x1d00 [ 3469.586039] ? mark_held_locks+0xf0/0xf0 [ 3469.590083] ? debug_object_init_on_stack+0x20/0x20 [ 3469.595194] populate_vma_page_range+0x200/0x290 [ 3469.599944] __mm_populate+0x1ea/0x350 [ 3469.603815] ? populate_vma_page_range+0x290/0x290 [ 3469.608725] ? do_mlock+0x6b0/0x6b0 [ 3469.612334] ? security_capable+0x8f/0xc0 [ 3469.616465] __se_sys_mlockall+0x362/0x4e0 [ 3469.620692] do_syscall_64+0xf9/0x620 [ 3469.624482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3469.629653] RIP: 0033:0x4665f9 [ 3469.632839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3469.651730] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3469.659443] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3469.666710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3469.673973] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3469.681240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3469.688512] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3469.720301] Mem-Info: [ 3469.727886] active_anon:280038 inactive_anon:958294 isolated_anon:0 [ 3469.727886] active_file:53 inactive_file:35 isolated_file:0 [ 3469.727886] unevictable:71444 dirty:6 writeback:0 unstable:0 [ 3469.727886] slab_reclaimable:20526 slab_unreclaimable:158947 [ 3469.727886] mapped:63201 shmem:21338 pagetables:74187 bounce:0 [ 3469.727886] free:25176 free_pcp:62 free_cma:0 [ 3469.828446] Node 0 active_anon:916072kB inactive_anon:569632kB active_file:32kB inactive_file:32kB unevictable:212776kB isolated(anon):0kB isolated(file):0kB mapped:232968kB dirty:0kB writeback:48kB shmem:42476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3469.909665] Node 1 active_anon:204080kB inactive_anon:3263648kB active_file:16kB inactive_file:0kB unevictable:73080kB isolated(anon):0kB isolated(file):0kB mapped:19772kB dirty:0kB writeback:0kB shmem:42876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3469.949132] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:468kB active_file:0kB inactive_file:0kB unevictable:872kB writepending:0kB present:15992kB managed:15908kB mlocked:872kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3469.990981] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3470.008775] Node 0 DMA32 free:35932kB min:35996kB low:44992kB high:53988kB active_anon:913916kB inactive_anon:569232kB active_file:156kB inactive_file:0kB unevictable:211828kB writepending:0kB present:3129332kB managed:2763456kB mlocked:211828kB kernel_stack:22560kB pagetables:52476kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3470.150627] lowmem_reserve[]: 0 0 1 1 1 [ 3470.174899] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3470.274487] lowmem_reserve[]: 0 0 0 0 0 [ 3470.295377] Node 1 Normal free:53828kB min:53876kB low:67344kB high:80812kB active_anon:204080kB inactive_anon:3263648kB active_file:16kB inactive_file:0kB unevictable:73080kB writepending:0kB present:4194304kB managed:4128248kB mlocked:73080kB kernel_stack:77472kB pagetables:244416kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3470.422046] lowmem_reserve[]: 0 0 0 0 0 [ 3470.446148] Node 0 DMA: 14*4kB (UE) 2*8kB (UM) 3*16kB (UME) 5*32kB (ME) 3*64kB (UME) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 3*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 3470.510288] Node 0 DMA32: 2867*4kB (UE) 1062*8kB (UE) 192*16kB (UME) 131*32kB (UME) 58*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 35932kB [ 3470.581521] Node 0 Normal: 1*4kB (E) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3470.630687] Node 1 Normal: 1*4kB (M) 0*8kB 922*16kB (U) 1221*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53828kB [ 3470.697775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3470.717887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3470.727586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3470.757415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3470.793693] 31925 total pagecache pages [ 3470.808045] 0 pages in swap cache [ 3470.825805] Swap cache stats: add 0, delete 0, find 0/0 [ 3470.834052] Free swap = 0kB [ 3470.837134] Total swap = 0kB [ 3470.840202] 2097051 pages RAM [ 3470.843399] 0 pages HighMem/MovableOnly [ 3470.847402] 369648 pages reserved [ 3470.850867] 0 pages cma reserved [ 3470.854311] Out of memory (oom_kill_allocating_task): Kill process 4762 (syz-executor.0) score 0 or sacrifice child [ 3470.865047] Killed process 4806 (syz-executor.0) total-vm:93384kB, anon-rss:36772kB, file-rss:35084kB, shmem-rss:0kB [ 3470.886999] oom_reaper: reaped process 4806 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:55:26 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0xffffff1f}, 0x0) 05:55:26 executing program 2: mlockall(0x7) mlockall(0x4) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00L', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x4da1}, 0x0) 05:55:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:26 executing program 0: mlockall(0x3) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x80000) fork() r0 = fork() sched_getscheduler(r0) sched_rr_get_interval(r0, &(0x7f0000000080)) syz_open_procfs$userns(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "a64cdc20"}, &(0x7f00000002c0)=0x28) sendto$inet(r1, &(0x7f00000000c0)="c37a2103e831", 0x6, 0x80, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 05:55:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) [ 3472.299574] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00`', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) [ 3472.396198] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:55:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xa14d}, 0x0) 05:55:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) 05:55:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000200", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00h', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 05:55:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00l', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000300", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00`', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf000}, 0x0) 05:55:28 executing program 2: mlockall(0x7) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x6bbce88144fe68ca, 0x6, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40094}, 0x20040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffaa9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd640}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c080) mlockall(0x3) fork() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb108}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4081) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00t', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000400", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:28 executing program 3: mlockall(0x3) fork() mlockall(0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) mmap$usbmon(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, 0xffffffffffffffff, 0x7fffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x40800) syz_open_procfs$userns(0x0, 0x0) 05:55:28 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) ptrace$pokeuser(0x6, r0, 0xcdf, 0x8) mlockall(0x1) syz_open_procfs$userns(r0, 0x0) 05:55:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00z', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000500", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x30000}, 0x0) 05:55:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000600", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3473.779267] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3473.816397] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\a\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x34000}, 0x0) [ 3474.986534] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3475.042978] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3475.076218] CPU: 1 PID: 8112 Comm: syz-fuzzer Not tainted 4.19.205-syzkaller #0 [ 3475.083689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3475.093039] Call Trace: [ 3475.095640] dump_stack+0x1fc/0x2ef [ 3475.099276] dump_header+0x15d/0xc3f [ 3475.102994] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3475.108092] ? ___ratelimit+0x319/0x590 [ 3475.112070] oom_kill_process.cold+0x10/0x692 [ 3475.116569] ? check_preemption_disabled+0x41/0x280 [ 3475.121589] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3475.126868] out_of_memory+0x1072/0x1390 [ 3475.130934] ? oom_killer_disable+0x270/0x270 [ 3475.135433] ? mutex_trylock+0x15f/0x1a0 [ 3475.139498] __alloc_pages_nodemask+0x23a2/0x2890 [ 3475.144353] ? find_get_entry+0x4cd/0x8a0 [ 3475.148515] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3475.153383] alloc_pages_current+0x193/0x2a0 [ 3475.157794] filemap_fault+0x146e/0x2180 [ 3475.161869] ext4_filemap_fault+0x84/0xb0 [ 3475.166018] __do_fault+0x10b/0x4b0 [ 3475.169647] __handle_mm_fault+0x273b/0x41c0 [ 3475.174145] ? vm_insert_page+0x9c0/0x9c0 [ 3475.178288] ? __fget+0x356/0x510 [ 3475.181755] ? check_preemption_disabled+0x41/0x280 [ 3475.186787] handle_mm_fault+0x436/0xb10 [ 3475.190857] __do_page_fault+0x68e/0xd60 [ 3475.194924] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3475.200029] ? spurious_fault+0x840/0x840 [ 3475.204180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3475.209024] ? page_fault+0x8/0x30 [ 3475.212563] page_fault+0x1e/0x30 [ 3475.216012] RIP: 0033:0x46e380 [ 3475.219201] Code: Bad RIP value. [ 3475.222560] RSP: 002b:000000c00003f7f0 EFLAGS: 00010246 [ 3475.227916] RAX: 0000000000000000 RBX: 0000000000000191 RCX: 000000000046e380 [ 3475.235181] RDX: 0000000000000080 RSI: 000000c00003f840 RDI: 0000000000000003 [ 3475.242448] RBP: 000000c00003fe40 R08: 0000000000000000 R09: 0000000000000000 [ 3475.249721] R10: 0000000000000191 R11: 0000000000000246 R12: 0000000000000003 [ 3475.256986] R13: 000000c000000900 R14: 000000000094d4c5 R15: 0000000000000000 [ 3476.192433] Mem-Info: [ 3476.207128] active_anon:280094 inactive_anon:963360 isolated_anon:0 [ 3476.207128] active_file:41 inactive_file:24 isolated_file:0 [ 3476.207128] unevictable:66037 dirty:0 writeback:0 unstable:0 [ 3476.207128] slab_reclaimable:20391 slab_unreclaimable:159254 [ 3476.207128] mapped:56074 shmem:21338 pagetables:74363 bounce:0 [ 3476.207128] free:25068 free_pcp:0 free_cma:0 [ 3476.296086] Node 0 active_anon:916136kB inactive_anon:563344kB active_file:64kB inactive_file:8kB unevictable:212248kB isolated(anon):0kB isolated(file):0kB mapped:217184kB dirty:0kB writeback:0kB shmem:42472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3476.390413] Node 1 active_anon:204240kB inactive_anon:3290096kB active_file:0kB inactive_file:88kB unevictable:51900kB isolated(anon):0kB isolated(file):0kB mapped:7112kB dirty:0kB writeback:0kB shmem:42880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3476.568324] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:904kB active_file:0kB inactive_file:0kB unevictable:96kB writepending:0kB present:15992kB managed:15908kB mlocked:96kB kernel_stack:32kB pagetables:172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3476.659209] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3476.664336] Node 0 DMA32 free:35916kB min:35996kB low:44992kB high:53988kB active_anon:913980kB inactive_anon:562440kB active_file:148kB inactive_file:68kB unevictable:212152kB writepending:0kB present:3129332kB managed:2763456kB mlocked:212152kB kernel_stack:22400kB pagetables:52224kB bounce:0kB free_pcp:432kB local_pcp:0kB free_cma:0kB [ 3476.822659] lowmem_reserve[]: 0 0 1 1 1 [ 3476.839862] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3476.934221] lowmem_reserve[]: 0 0 0 0 0 [ 3476.938233] Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:204240kB inactive_anon:3290092kB active_file:12kB inactive_file:12kB unevictable:51464kB writepending:0kB present:4194304kB managed:4128248kB mlocked:51448kB kernel_stack:77568kB pagetables:244908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3477.052630] lowmem_reserve[]: 0 0 0 0 0 [ 3477.056634] Node 0 DMA: 13*4kB (UME) 4*8kB (UM) 3*16kB (ME) 3*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 3477.112786] Node 0 DMA32: 3607*4kB (UME) 1267*8kB (UME) 406*16kB (UME) 108*32kB (UME) 35*64kB (M) 15*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39188kB [ 3477.192584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3477.222609] Node 1 Normal: 247*4kB (UM) 950*8kB (UM) 1174*16kB (UM) 1234*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66860kB [ 3477.240900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3477.277074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3477.362580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3477.371447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3477.414638] 24819 total pagecache pages [ 3477.418801] 0 pages in swap cache [ 3477.422323] Swap cache stats: add 0, delete 0, find 0/0 [ 3477.442597] Free swap = 0kB [ 3477.445730] Total swap = 0kB [ 3477.448803] 2097051 pages RAM [ 3477.451902] 0 pages HighMem/MovableOnly [ 3477.492554] 369648 pages reserved [ 3477.503408] 0 pages cma reserved [ 3477.506794] Out of memory (oom_kill_allocating_task): Kill process 8112 (syz-fuzzer) score 0 or sacrifice child [ 3477.546035] Killed process 4097 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:908kB, shmem-rss:0kB 05:55:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00@', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\b\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x400300}, 0x0) 05:55:33 executing program 3: mlockall(0x3) fork() mlockall(0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) mmap$usbmon(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, 0xffffffffffffffff, 0x7fffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x40800) syz_open_procfs$userns(0x0, 0x0) 05:55:33 executing program 0: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/202, 0xca}) mlockall(0x3) fork() r1 = fork() sched_getscheduler(r1) sched_rr_get_interval(r1, &(0x7f0000000180)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x26, 0x4, @tid=r1}, &(0x7f0000000200)) syz_open_procfs$userns(0x0, 0x0) 05:55:33 executing program 2: mlockall(0x7) mlockall(0x3) syz_open_procfs$userns(0x0, &(0x7f0000000200)) r0 = fork() mlockall(0xb) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x8, 0x800}, {0x4, 0x400, 0x1000}, {0x4, 0x81d}, {0x2, 0x2}], 0x4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) mlockall(0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="b1d1e8aa933e79e74c9916c941f571f0", 0x10) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 05:55:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000f00", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00H\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3479.583929] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3479.620076] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x1000000}, 0x0) 05:55:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00L\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3479.906062] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3480.278655] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:35 executing program 0: mlockall(0x3) fork() r0 = fork() r1 = fork() sched_getscheduler(r1) syz_open_procfs$userns(r0, 0x0) [ 3481.438513] IPVS: ftp: loaded support on port[0] = 21 [ 3482.060833] chnl_net:caif_netlink_parms(): no params data found [ 3482.665505] bridge0: port 1(bridge_slave_0) entered blocking state [ 3482.678849] bridge0: port 1(bridge_slave_0) entered disabled state [ 3482.687662] device bridge_slave_0 entered promiscuous mode [ 3482.709356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3482.724185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3482.739393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3482.748223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3482.763475] device bridge_slave_1 left promiscuous mode [ 3482.769189] bridge0: port 2(bridge_slave_1) entered disabled state [ 3482.792932] device bridge_slave_0 left promiscuous mode [ 3482.798417] bridge0: port 1(bridge_slave_0) entered disabled state [ 3482.809972] device veth1_macvtap left promiscuous mode [ 3482.815630] device veth0_macvtap left promiscuous mode [ 3482.821409] device veth1_vlan left promiscuous mode [ 3482.827282] device veth0_vlan left promiscuous mode [ 3483.392368] Bluetooth: hci2: command 0x0409 tx timeout [ 3485.482285] Bluetooth: hci2: command 0x041b tx timeout [ 3487.337587] device hsr_slave_1 left promiscuous mode [ 3487.345129] device hsr_slave_0 left promiscuous mode [ 3487.359852] team0 (unregistering): Port device team_slave_1 removed [ 3487.372909] team0 (unregistering): Port device team_slave_0 removed [ 3487.382925] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3487.394016] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3487.425032] bond0 (unregistering): Released all slaves [ 3487.439226] bridge0: port 2(bridge_slave_1) entered blocking state [ 3487.445612] bridge0: port 2(bridge_slave_1) entered disabled state [ 3487.456141] device bridge_slave_1 entered promiscuous mode [ 3487.478066] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3487.487649] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3487.508156] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3487.515613] team0: Port device team_slave_0 added [ 3487.521302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3487.529709] team0: Port device team_slave_1 added [ 3487.550432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3487.556905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3487.561988] Bluetooth: hci2: command 0x040f tx timeout [ 3487.582923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3487.599123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3487.605586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3487.632580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3487.643862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3487.651575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3487.675831] device hsr_slave_0 entered promiscuous mode [ 3487.683271] device hsr_slave_1 entered promiscuous mode [ 3487.689557] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3487.697038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3487.817135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3487.866283] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3487.872710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3487.888478] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3487.897609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3487.910182] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3487.919281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3487.932394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3487.943699] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3487.949763] 8021q: adding VLAN 0 to HW filter on device team0 [ 3487.963160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3487.970594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3487.979937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3487.994389] bridge0: port 1(bridge_slave_0) entered blocking state [ 3488.000739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3488.017126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3488.024882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3488.033655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3488.043252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3488.050898] bridge0: port 2(bridge_slave_1) entered blocking state [ 3488.057291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3488.082677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3488.090606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3488.108213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3488.118451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3488.129728] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3488.136918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3488.146306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3488.159166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3488.179424] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3488.187133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3488.200670] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3488.208365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3488.220512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3488.238509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3488.319970] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3488.337714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3488.408390] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3488.420514] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3488.429879] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3488.457241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3488.465193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3488.475108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3488.485737] device veth0_vlan entered promiscuous mode [ 3488.501216] device veth1_vlan entered promiscuous mode [ 3488.528673] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3488.541150] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3488.549844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3488.565405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3488.578343] device veth0_macvtap entered promiscuous mode [ 3488.589717] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3488.606484] device veth1_macvtap entered promiscuous mode [ 3488.616048] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3488.629187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3488.645182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3488.658774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3488.678555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.688494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3488.698651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.708671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3488.718914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.728463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3488.738634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.748300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3488.758851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.769501] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3488.776494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3488.784915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3488.793078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3488.800343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3488.808484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3488.818873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3488.829282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.839255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3488.849054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.858233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3488.869197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.878371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3488.888395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.897537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3488.907293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3488.917833] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3488.925282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3488.932221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3488.940118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3489.088296] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 3489.099647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3489.113369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3489.132341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3489.149598] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 3489.156679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3489.164852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3489.172965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3489.632146] Bluetooth: hci2: command 0x0419 tx timeout 05:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00`\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x2000000}, 0x0) 05:55:45 executing program 2: mlockall(0x2) mlockall(0x3) mlockall(0x7) futex(&(0x7f0000000040)=0x1, 0x3, 0x100, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x1, 0x0) fork() clock_nanosleep(0x4, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:55:45 executing program 0: mlockall(0x3) r0 = fork() syz_open_procfs$userns(0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='nilfs2_segment_usage_allocated\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r1, 0x0, 0x4, &(0x7f0000000000)='{[#\x00'}, 0x30) 05:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00h\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3490.753700] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3490.789644] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x3000000}, 0x0) 05:55:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3491.023295] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00l\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3491.072014] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00t\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3491.339323] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3491.404455] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3491.865539] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3491.884626] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3491.889916] CPU: 0 PID: 5395 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3491.897691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3491.907056] Call Trace: [ 3491.909629] dump_stack+0x1fc/0x2ef [ 3491.913301] dump_header+0x15d/0xc3f [ 3491.916997] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3491.922091] ? ___ratelimit+0x319/0x590 [ 3491.926072] oom_kill_process.cold+0x10/0x692 [ 3491.930567] ? check_preemption_disabled+0x41/0x280 [ 3491.935574] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3491.940838] out_of_memory+0x1072/0x1390 [ 3491.944882] ? oom_killer_disable+0x270/0x270 [ 3491.949375] ? mutex_trylock+0x15f/0x1a0 [ 3491.953419] __alloc_pages_nodemask+0x23a2/0x2890 [ 3491.958247] ? find_get_entry+0x4cd/0x8a0 [ 3491.962383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3491.967230] alloc_pages_current+0x193/0x2a0 [ 3491.971716] filemap_fault+0x146e/0x2180 [ 3491.975764] ext4_filemap_fault+0x84/0xb0 [ 3491.979910] __do_fault+0x10b/0x4b0 [ 3491.983720] ? do_raw_spin_unlock+0x171/0x230 [ 3491.988204] __handle_mm_fault+0x273b/0x41c0 [ 3491.992704] ? vm_insert_page+0x9c0/0x9c0 [ 3491.996840] ? check_preemption_disabled+0x41/0x280 [ 3492.001839] handle_mm_fault+0x436/0xb10 [ 3492.005882] __get_user_pages+0x6f0/0x1710 [ 3492.010099] ? follow_page_mask+0x1d00/0x1d00 [ 3492.014580] populate_vma_page_range+0x200/0x290 [ 3492.019317] __mm_populate+0x1ea/0x350 [ 3492.023188] ? populate_vma_page_range+0x290/0x290 [ 3492.028097] ? do_mlock+0x6b0/0x6b0 [ 3492.031706] ? security_capable+0x8f/0xc0 [ 3492.035834] __se_sys_mlockall+0x362/0x4e0 [ 3492.040049] do_syscall_64+0xf9/0x620 [ 3492.043833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3492.049001] RIP: 0033:0x4665f9 [ 3492.052172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3492.071058] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3492.078747] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3492.086000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3492.093694] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3492.101128] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3492.108387] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3492.132277] Mem-Info: [ 3492.134741] active_anon:279942 inactive_anon:970401 isolated_anon:0 [ 3492.134741] active_file:12 inactive_file:9 isolated_file:0 [ 3492.134741] unevictable:60927 dirty:4 writeback:0 unstable:0 [ 3492.134741] slab_reclaimable:19931 slab_unreclaimable:157973 [ 3492.134741] mapped:56899 shmem:21338 pagetables:74386 bounce:0 [ 3492.134741] free:24793 free_pcp:437 free_cma:0 [ 3492.169527] Node 0 active_anon:915596kB inactive_anon:611968kB active_file:64kB inactive_file:32kB unevictable:200192kB isolated(anon):0kB isolated(file):0kB mapped:182136kB dirty:16kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3492.205328] Node 1 active_anon:204172kB inactive_anon:3269636kB active_file:0kB inactive_file:4kB unevictable:43516kB isolated(anon):0kB isolated(file):0kB mapped:45460kB dirty:0kB writeback:0kB shmem:42908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3492.237092] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:876kB active_file:0kB inactive_file:0kB unevictable:48kB writepending:0kB present:15992kB managed:15908kB mlocked:48kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3492.268730] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3492.273825] Node 0 DMA32 free:35324kB min:35996kB low:44992kB high:53988kB active_anon:913440kB inactive_anon:611092kB active_file:64kB inactive_file:32kB unevictable:200144kB writepending:12kB present:3129332kB managed:2763456kB mlocked:200144kB kernel_stack:22304kB pagetables:52328kB bounce:0kB free_pcp:680kB local_pcp:248kB free_cma:0kB [ 3492.308223] lowmem_reserve[]: 0 0 1 1 1 [ 3492.312401] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3492.342931] lowmem_reserve[]: 0 0 0 0 0 [ 3492.346945] Node 1 Normal free:52868kB min:53876kB low:67344kB high:80812kB active_anon:204172kB inactive_anon:3269636kB active_file:0kB inactive_file:16kB unevictable:43316kB writepending:0kB present:4194304kB managed:4128248kB mlocked:43320kB kernel_stack:77792kB pagetables:245068kB bounce:0kB free_pcp:1068kB local_pcp:260kB free_cma:0kB [ 3492.407558] lowmem_reserve[]: 0 0 0 0 0 [ 3492.414580] Node 0 DMA: 14*4kB (UME) 9*8kB (UH) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10976kB [ 3492.432743] Node 0 DMA32: 9*4kB (H) 1628*8kB (UEH) 1227*16kB (UEH) 101*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35924kB [ 3492.447273] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3492.458387] Node 1 Normal: 26*4kB (UME) 23*8kB (UM) 963*16kB (UM) 1195*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53936kB [ 3492.472239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3492.481068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3492.489673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3492.498650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3492.507257] 25607 total pagecache pages [ 3492.511233] 0 pages in swap cache [ 3492.515065] Swap cache stats: add 0, delete 0, find 0/0 [ 3492.520427] Free swap = 0kB [ 3492.541311] Total swap = 0kB [ 3492.544343] 2097051 pages RAM [ 3492.548379] 0 pages HighMem/MovableOnly [ 3492.576012] 369648 pages reserved [ 3492.579482] 0 pages cma reserved [ 3492.590263] Out of memory (oom_kill_allocating_task): Kill process 5395 (syz-executor.0) score 0 or sacrifice child [ 3492.614616] Killed process 5474 (syz-executor.0) total-vm:93384kB, anon-rss:28352kB, file-rss:35084kB, shmem-rss:0kB [ 3492.678864] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3492.736985] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3492.742668] CPU: 1 PID: 5381 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3492.750460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3492.759809] Call Trace: [ 3492.762406] dump_stack+0x1fc/0x2ef [ 3492.766044] dump_header+0x15d/0xc3f [ 3492.769772] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3492.774875] ? ___ratelimit+0x319/0x590 [ 3492.778855] oom_kill_process.cold+0x10/0x692 [ 3492.783356] ? check_preemption_disabled+0x41/0x280 [ 3492.788382] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3492.793669] out_of_memory+0x1072/0x1390 [ 3492.797753] ? oom_killer_disable+0x270/0x270 [ 3492.802255] ? mutex_trylock+0x15f/0x1a0 [ 3492.806321] __alloc_pages_nodemask+0x23a2/0x2890 [ 3492.811170] ? is_bpf_text_address+0xfc/0x1b0 [ 3492.815678] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3492.820545] ? __lock_acquire+0x6de/0x3ff0 [ 3492.824789] alloc_pages_current+0x193/0x2a0 [ 3492.829200] get_zeroed_page+0x10/0x40 [ 3492.833098] __pud_alloc+0x33/0x240 [ 3492.836730] copy_page_range+0x1a22/0x2ff0 [ 3492.840963] ? should_fail+0x142/0x7b0 [ 3492.844852] ? anon_vma_fork+0x499/0x630 [ 3492.848926] ? copy_process.part.0+0x3129/0x8260 [ 3492.853691] ? lock_downgrade+0x720/0x720 [ 3492.857850] ? apply_to_page_range+0xc10/0xc10 [ 3492.862437] ? validate_mm_rb+0x3e/0xb0 [ 3492.866421] copy_process.part.0+0x5b22/0x8260 [ 3492.871034] ? __cleanup_sighand+0x60/0x60 [ 3492.875275] ? follow_page_mask+0x1d00/0x1d00 [ 3492.879786] _do_fork+0x22f/0xf30 [ 3492.883246] ? fork_idle+0x220/0x220 [ 3492.886964] ? do_futex+0x1880/0x1880 [ 3492.890769] ? security_capable+0x8f/0xc0 [ 3492.894921] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3492.900292] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3492.905317] ? do_syscall_64+0x21/0x620 [ 3492.909648] do_syscall_64+0xf9/0x620 [ 3492.913460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3492.918735] RIP: 0033:0x4665f9 [ 3492.921931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3492.940828] RSP: 002b:00007f14527a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3492.948542] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3492.955808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3492.963080] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3492.970350] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3492.977623] R13: 00007ffedc16057f R14: 00007f14527a4300 R15: 0000000000022000 [ 3493.045626] Mem-Info: [ 3493.048099] active_anon:279941 inactive_anon:970384 isolated_anon:0 [ 3493.048099] active_file:38 inactive_file:7 isolated_file:3 [ 3493.048099] unevictable:61229 dirty:2 writeback:0 unstable:0 [ 3493.048099] slab_reclaimable:19927 slab_unreclaimable:157609 [ 3493.048099] mapped:57267 shmem:21338 pagetables:74350 bounce:0 [ 3493.048099] free:25035 free_pcp:113 free_cma:0 [ 3493.082787] Node 0 active_anon:915596kB inactive_anon:611968kB active_file:48kB inactive_file:12kB unevictable:201352kB isolated(anon):0kB isolated(file):12kB mapped:183444kB dirty:8kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3493.111452] Node 1 active_anon:204168kB inactive_anon:3269568kB active_file:104kB inactive_file:16kB unevictable:43564kB isolated(anon):0kB isolated(file):0kB mapped:45624kB dirty:0kB writeback:0kB shmem:42908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3493.140178] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:876kB active_file:0kB inactive_file:0kB unevictable:48kB writepending:0kB present:15992kB managed:15908kB mlocked:48kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3493.168806] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3493.173903] Node 0 DMA32 free:35596kB min:35996kB low:44992kB high:53988kB active_anon:913440kB inactive_anon:611092kB active_file:0kB inactive_file:0kB unevictable:201004kB writepending:8kB present:3129332kB managed:2763456kB mlocked:201004kB kernel_stack:22304kB pagetables:52260kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 3493.203859] lowmem_reserve[]: 0 0 1 1 1 [ 3493.207856] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3493.233829] lowmem_reserve[]: 0 0 0 0 0 [ 3493.237818] Node 1 Normal free:53564kB min:53876kB low:67344kB high:80812kB active_anon:204168kB inactive_anon:3269568kB active_file:4kB inactive_file:16kB unevictable:43564kB writepending:0kB present:4194304kB managed:4128248kB mlocked:43564kB kernel_stack:77824kB pagetables:244992kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3493.269269] lowmem_reserve[]: 0 0 0 0 0 [ 3493.273342] Node 0 DMA: 14*4kB (UME) 9*8kB (UH) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10976kB [ 3493.289556] Node 0 DMA32: 27*4kB (MEH) 1600*8kB (UMEH) 1231*16kB (UEH) 103*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35900kB [ 3493.303441] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3493.314548] Node 1 Normal: 41*4kB (UM) 24*8kB (UM) 969*16kB (UM) 1194*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54068kB [ 3493.328032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3493.337082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3493.345740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3493.354622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3493.363265] 26000 total pagecache pages [ 3493.367792] 0 pages in swap cache [ 3493.371283] Swap cache stats: add 0, delete 0, find 0/0 [ 3493.376646] Free swap = 0kB [ 3493.379652] Total swap = 0kB [ 3493.382789] 2097051 pages RAM [ 3493.385886] 0 pages HighMem/MovableOnly [ 3493.389864] 369648 pages reserved [ 3493.394108] 0 pages cma reserved [ 3493.397469] Out of memory (oom_kill_allocating_task): Kill process 5381 (syz-executor.2) score 0 or sacrifice child [ 3493.409344] Killed process 5376 (syz-executor.2) total-vm:93516kB, anon-rss:28292kB, file-rss:43520kB, shmem-rss:0kB 05:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00z\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:49 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000000)) mlockall(0x6) 05:55:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x7000000}, 0x0) 05:55:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:49 executing program 2: mlockall(0x7) mlockall(0x3) fork() r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000000)) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x5, 0x4) read$midi(0xffffffffffffffff, &(0x7f0000000040)=""/213, 0xd5) [ 3494.656781] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3494.723735] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf000000}, 0x0) 05:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3494.928539] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3494.994315] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3495.608854] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3495.622302] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3495.627474] CPU: 0 PID: 5515 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3495.635257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3495.644603] Call Trace: [ 3495.647187] dump_stack+0x1fc/0x2ef [ 3495.650800] dump_header+0x15d/0xc3f [ 3495.654502] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3495.659591] ? ___ratelimit+0x319/0x590 [ 3495.663553] oom_kill_process.cold+0x10/0x692 [ 3495.668032] ? check_preemption_disabled+0x41/0x280 [ 3495.673034] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3495.678291] out_of_memory+0x1072/0x1390 [ 3495.682349] ? oom_killer_disable+0x270/0x270 [ 3495.686837] ? mutex_trylock+0x15f/0x1a0 [ 3495.690894] __alloc_pages_nodemask+0x23a2/0x2890 [ 3495.695756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3495.700602] ? should_fail+0x142/0x7b0 [ 3495.704484] ? check_preemption_disabled+0x41/0x280 [ 3495.709594] ? __pte_alloc+0x1b7/0x340 [ 3495.713474] ? lock_downgrade+0x720/0x720 [ 3495.717608] ? lock_acquire+0x170/0x3c0 [ 3495.721581] ? __pte_alloc+0x84/0x340 [ 3495.725508] alloc_pages_vma+0xf2/0x780 [ 3495.729474] do_anonymous_page+0x7c2/0x1be0 [ 3495.733803] ? __pte_alloc+0x340/0x340 [ 3495.737680] ? __put_compound_page+0xc0/0xc0 [ 3495.742074] ? mark_held_locks+0xf0/0xf0 [ 3495.746130] __handle_mm_fault+0x227a/0x41c0 [ 3495.750529] ? vm_insert_page+0x9c0/0x9c0 [ 3495.754684] ? check_preemption_disabled+0x41/0x280 [ 3495.759703] handle_mm_fault+0x436/0xb10 [ 3495.763752] __get_user_pages+0x6f0/0x1710 [ 3495.767982] ? follow_page_mask+0x1d00/0x1d00 [ 3495.772478] ? check_preemption_disabled+0x41/0x280 [ 3495.777483] populate_vma_page_range+0x200/0x290 [ 3495.782224] __mm_populate+0x1ea/0x350 [ 3495.786106] ? populate_vma_page_range+0x290/0x290 [ 3495.791023] ? do_mlock+0x6b0/0x6b0 [ 3495.794634] ? security_capable+0x8f/0xc0 [ 3495.798786] __se_sys_mlockall+0x362/0x4e0 [ 3495.803010] do_syscall_64+0xf9/0x620 [ 3495.806801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3495.811971] RIP: 0033:0x4665f9 [ 3495.815148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3495.834029] RSP: 002b:00007f1452783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3495.841720] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3495.848982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3495.856248] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3495.863530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3495.870790] R13: 00007ffedc16057f R14: 00007f1452783300 R15: 0000000000022000 [ 3495.901849] Mem-Info: [ 3495.904555] active_anon:279856 inactive_anon:970398 isolated_anon:0 [ 3495.904555] active_file:19 inactive_file:52 isolated_file:0 [ 3495.904555] unevictable:61029 dirty:3 writeback:0 unstable:0 [ 3495.904555] slab_reclaimable:19949 slab_unreclaimable:157788 [ 3495.904555] mapped:58632 shmem:21337 pagetables:74366 bounce:0 [ 3495.904555] free:25056 free_pcp:164 free_cma:0 [ 3495.954503] Node 0 active_anon:915876kB inactive_anon:612020kB active_file:0kB inactive_file:52kB unevictable:201616kB isolated(anon):0kB isolated(file):0kB mapped:180272kB dirty:4kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3495.990768] Node 1 active_anon:203548kB inactive_anon:3269572kB active_file:4kB inactive_file:4kB unevictable:42500kB isolated(anon):0kB isolated(file):0kB mapped:54256kB dirty:8kB writeback:0kB shmem:42904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3496.019522] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:876kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3496.054850] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3496.060081] Node 0 DMA32 free:35848kB min:35996kB low:44992kB high:53988kB active_anon:913720kB inactive_anon:611144kB active_file:76kB inactive_file:476kB unevictable:201560kB writepending:4kB present:3129332kB managed:2763456kB mlocked:201560kB kernel_stack:22336kB pagetables:52448kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 3496.094981] lowmem_reserve[]: 0 0 1 1 1 [ 3496.099154] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3496.125696] lowmem_reserve[]: 0 0 0 0 0 [ 3496.130532] Node 1 Normal free:53404kB min:53876kB low:67344kB high:80812kB active_anon:203548kB inactive_anon:3269572kB active_file:4kB inactive_file:4kB unevictable:42500kB writepending:8kB present:4194304kB managed:4128248kB mlocked:42500kB kernel_stack:77792kB pagetables:244868kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3496.160862] lowmem_reserve[]: 0 0 0 0 0 [ 3496.165209] Node 0 DMA: 12*4kB (UE) 9*8kB (UH) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10968kB [ 3496.181795] Node 0 DMA32: 137*4kB (UMEH) 1378*8kB (UMEH) 1356*16kB (UEH) 110*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36788kB [ 3496.196246] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3496.207614] Node 1 Normal: 15*4kB (UM) 10*8kB (UM) 960*16kB (UM) 1197*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53804kB [ 3496.221349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3496.230428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3496.240084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3496.249149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3496.259256] 27312 total pagecache pages [ 3496.267213] 0 pages in swap cache [ 3496.270821] Swap cache stats: add 0, delete 0, find 0/0 [ 3496.276417] Free swap = 0kB [ 3496.279575] Total swap = 0kB [ 3496.282973] 2097051 pages RAM [ 3496.286306] 0 pages HighMem/MovableOnly [ 3496.290469] 369648 pages reserved [ 3496.294144] 0 pages cma reserved [ 3496.297705] Out of memory (oom_kill_allocating_task): Kill process 5515 (syz-executor.2) score 0 or sacrifice child [ 3496.308527] Killed process 5493 (syz-executor.2) total-vm:93384kB, anon-rss:21952kB, file-rss:39232kB, shmem-rss:0kB [ 3496.327091] oom_reaper: reaped process 5493 (syz-executor.2), now anon-rss:21964kB, file-rss:40192kB, shmem-rss:0kB 05:55:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x9effffff}, 0x0) 05:55:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000005", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:51 executing program 2: mlockall(0x7) mlockall(0x3) fork() pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3496.683087] nla_parse: 2 callbacks suppressed [ 3496.683096] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3496.812870] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3497.306952] modprobe invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3497.341235] modprobe cpuset=/ mems_allowed=0-1 [ 3497.345872] CPU: 1 PID: 5587 Comm: modprobe Not tainted 4.19.205-syzkaller #0 [ 3497.353236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3497.362579] Call Trace: [ 3497.365171] dump_stack+0x1fc/0x2ef [ 3497.368805] dump_header+0x15d/0xc3f [ 3497.372525] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3497.377628] ? ___ratelimit+0x319/0x590 [ 3497.381616] oom_kill_process.cold+0x10/0x692 [ 3497.386203] ? check_preemption_disabled+0x41/0x280 [ 3497.391235] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3497.396515] out_of_memory+0x1072/0x1390 [ 3497.400581] ? oom_killer_disable+0x270/0x270 [ 3497.405150] ? mutex_trylock+0x15f/0x1a0 [ 3497.409195] __alloc_pages_nodemask+0x23a2/0x2890 [ 3497.414047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3497.418887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3497.423747] ? check_preemption_disabled+0x41/0x280 [ 3497.428846] ? ____cache_alloc_node+0x156/0x1d0 [ 3497.433505] ? cache_grow_begin+0x64/0x8a0 [ 3497.437730] cache_grow_begin+0xa4/0x8a0 [ 3497.441792] fallback_alloc+0x213/0x2e0 [ 3497.445776] kmem_cache_alloc+0x1e4/0x370 [ 3497.449931] getname_flags+0xce/0x590 [ 3497.453737] user_path_at_empty+0x2a/0x50 [ 3497.457879] vfs_statx+0x113/0x210 [ 3497.461413] ? do_readlinkat+0x2f0/0x2f0 [ 3497.465467] ? __do_page_fault+0x6d1/0xd60 [ 3497.469690] __se_sys_newstat+0x96/0x120 [ 3497.473765] ? __se_sys_lstat+0x120/0x120 [ 3497.477918] ? up_read+0x17/0x110 [ 3497.481373] ? __do_page_fault+0x180/0xd60 [ 3497.485603] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3497.490971] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3497.495969] ? do_syscall_64+0x21/0x620 [ 3497.499936] do_syscall_64+0xf9/0x620 [ 3497.503741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3497.508929] RIP: 0033:0x7f573b3c8295 [ 3497.512666] Code: Bad RIP value. [ 3497.516024] RSP: 002b:00007ffcdf90e078 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 3497.523715] RAX: ffffffffffffffda RBX: 000055605f7fc090 RCX: 00007f573b3c8295 [ 3497.530971] RDX: 00007ffcdf90e140 RSI: 00007ffcdf90e140 RDI: 000055605e2b9e99 [ 3497.538234] RBP: 000055605e2b9e99 R08: 0000000000000003 R09: 0000000000000020 [ 3497.545498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3497.552758] R13: 0000000000000000 R14: 000055605e4c1068 R15: 0000000000000000 [ 3497.575833] Mem-Info: [ 3497.579303] active_anon:279931 inactive_anon:972399 isolated_anon:0 [ 3497.579303] active_file:36 inactive_file:35 isolated_file:0 [ 3497.579303] unevictable:58742 dirty:29 writeback:5 unstable:0 [ 3497.579303] slab_reclaimable:19965 slab_unreclaimable:158052 [ 3497.579303] mapped:59121 shmem:21337 pagetables:74458 bounce:0 [ 3497.579303] free:25046 free_pcp:0 free_cma:0 [ 3497.620275] Node 0 active_anon:915980kB inactive_anon:618288kB active_file:124kB inactive_file:72kB unevictable:200464kB isolated(anon):0kB isolated(file):0kB mapped:184372kB dirty:108kB writeback:4kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3497.714292] Node 1 active_anon:203696kB inactive_anon:3270008kB active_file:72kB inactive_file:28kB unevictable:34536kB isolated(anon):0kB isolated(file):0kB mapped:52196kB dirty:0kB writeback:28kB shmem:42904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3497.902182] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:876kB active_file:0kB inactive_file:0kB unevictable:48kB writepending:0kB present:15992kB managed:15908kB mlocked:48kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3497.972326] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3497.991812] Node 0 DMA32 free:38096kB min:35996kB low:44992kB high:53988kB active_anon:913832kB inactive_anon:611100kB active_file:468kB inactive_file:580kB unevictable:202288kB writepending:12kB present:3129332kB managed:2763456kB mlocked:202308kB kernel_stack:22400kB pagetables:52544kB bounce:0kB free_pcp:1640kB local_pcp:168kB free_cma:0kB [ 3498.077112] lowmem_reserve[]: 0 0 1 1 1 [ 3498.085703] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3498.154466] lowmem_reserve[]: 0 0 0 0 0 [ 3498.158537] Node 1 Normal free:53640kB min:53876kB low:67344kB high:80812kB active_anon:203572kB inactive_anon:3269560kB active_file:624kB inactive_file:336kB unevictable:34488kB writepending:0kB present:4194304kB managed:4128248kB mlocked:34488kB kernel_stack:77728kB pagetables:244836kB bounce:0kB free_pcp:1080kB local_pcp:296kB free_cma:0kB [ 3498.201832] lowmem_reserve[]: 0 0 0 0 0 [ 3498.206721] Node 0 DMA: 14*4kB (UME) 9*8kB (UH) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10976kB [ 3498.229701] Node 0 DMA32: 471*4kB (UMEH) 1127*8kB (UMH) 1450*16kB (UMEH) 116*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37812kB [ 3498.269656] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3498.303911] Node 1 Normal: 257*4kB (UME) 159*8kB (M) 834*16kB (UM) 1199*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54076kB [ 3498.338658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3498.362787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3498.381448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3498.402810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3498.421381] 27936 total pagecache pages [ 3498.429821] 0 pages in swap cache [ 3498.440302] Swap cache stats: add 0, delete 0, find 0/0 [ 3498.457518] Free swap = 0kB [ 3498.465661] Total swap = 0kB [ 3498.472038] 2097051 pages RAM [ 3498.479124] 0 pages HighMem/MovableOnly [ 3498.490938] 369648 pages reserved [ 3498.497753] 0 pages cma reserved [ 3498.504503] Out of memory (oom_kill_allocating_task): Kill process 5587 (modprobe) score 0 or sacrifice child [ 3498.528768] Killed process 5587 (modprobe) total-vm:4304kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB 05:55:53 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xa14d0000}, 0x0) 05:55:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000006", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:53 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x321) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@mmap}, {@debug={'debug', 0x3d, 0x89}}, {@cache_fscache}, {@version_9p2000}, {@cache_mmap}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '%\''}}, {@permit_directio}]}}) mlockall(0x3) fork() bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8}, 0x8) syz_open_procfs$userns(0x0, 0x0) mlockall(0x1) mlockall(0x1) [ 3499.014296] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3499.073425] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\a', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:53 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3499.292711] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000f", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:54 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3499.408289] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffffff}, 0x0) [ 3500.122579] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3500.137339] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3500.142561] CPU: 1 PID: 5607 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3500.150359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3500.159709] Call Trace: [ 3500.162303] dump_stack+0x1fc/0x2ef [ 3500.165942] dump_header+0x15d/0xc3f [ 3500.169667] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3500.174769] ? ___ratelimit+0x319/0x590 [ 3500.178748] oom_kill_process.cold+0x10/0x692 [ 3500.183233] ? check_preemption_disabled+0x41/0x280 [ 3500.188238] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3500.193556] out_of_memory+0x1072/0x1390 [ 3500.197608] ? oom_killer_disable+0x270/0x270 [ 3500.202087] ? mutex_trylock+0x15f/0x1a0 [ 3500.206242] __alloc_pages_nodemask+0x23a2/0x2890 [ 3500.211123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3500.215949] ? __lock_acquire+0x6de/0x3ff0 [ 3500.220178] ? mark_held_locks+0xf0/0xf0 [ 3500.224370] alloc_pages_vma+0xf2/0x780 [ 3500.228363] do_anonymous_page+0x7c2/0x1be0 [ 3500.232680] ? __pte_alloc+0x340/0x340 [ 3500.236553] ? __put_compound_page+0xc0/0xc0 [ 3500.240947] ? mark_held_locks+0xf0/0xf0 [ 3500.244994] __handle_mm_fault+0x227a/0x41c0 [ 3500.249400] ? vm_insert_page+0x9c0/0x9c0 [ 3500.253550] ? check_preemption_disabled+0x41/0x280 [ 3500.258554] handle_mm_fault+0x436/0xb10 [ 3500.262601] __get_user_pages+0x6f0/0x1710 [ 3500.266825] ? follow_page_mask+0x1d00/0x1d00 [ 3500.271308] ? lock_downgrade+0x720/0x720 [ 3500.275452] ? lock_acquire+0x170/0x3c0 [ 3500.279415] populate_vma_page_range+0x200/0x290 [ 3500.284154] __mm_populate+0x1ea/0x350 [ 3500.288027] ? populate_vma_page_range+0x290/0x290 [ 3500.292941] ? do_mlock+0x6b0/0x6b0 [ 3500.296566] ? security_capable+0x8f/0xc0 [ 3500.300707] __se_sys_mlockall+0x362/0x4e0 [ 3500.304929] do_syscall_64+0xf9/0x620 [ 3500.308721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3500.313904] RIP: 0033:0x4665f9 [ 3500.317103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3500.336092] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3500.343809] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3500.351139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3500.358400] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3500.365652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3500.372904] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3500.383534] Mem-Info: [ 3500.385986] active_anon:279898 inactive_anon:970406 isolated_anon:0 [ 3500.385986] active_file:15 inactive_file:14 isolated_file:0 [ 3500.385986] unevictable:59970 dirty:0 writeback:0 unstable:0 [ 3500.385986] slab_reclaimable:20050 slab_unreclaimable:158604 [ 3500.385986] mapped:59145 shmem:21337 pagetables:74424 bounce:0 [ 3500.385986] free:25223 free_pcp:260 free_cma:0 [ 3500.420132] Node 0 active_anon:915860kB inactive_anon:615768kB active_file:1932kB inactive_file:1388kB unevictable:208420kB isolated(anon):0kB isolated(file):128kB mapped:189576kB dirty:0kB writeback:0kB shmem:42452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3500.480681] Node 1 active_anon:203732kB inactive_anon:3272556kB active_file:36kB inactive_file:0kB unevictable:20660kB isolated(anon):0kB isolated(file):0kB mapped:46404kB dirty:0kB writeback:0kB shmem:42896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3500.617517] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:932kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3500.697649] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3500.714094] Node 0 DMA32 free:60032kB min:35996kB low:44992kB high:53988kB active_anon:914004kB inactive_anon:611312kB active_file:3604kB inactive_file:4596kB unevictable:181900kB writepending:0kB present:3129332kB managed:2763456kB mlocked:181972kB kernel_stack:22336kB pagetables:52608kB bounce:0kB free_pcp:2748kB local_pcp:1344kB free_cma:0kB 05:55:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00 ', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xfffff000}, 0x0) 05:55:55 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e00)={'wpan0\x00'}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYBLOB="64a076e1db7a2b4fb48f15965ad492363dd6c1f434921d353df7e937501ce4c25e2bbb1ae4944b9e886f07c82d170723a1aba4e88f692de050c604d219bcafba2ac3e51f3f10a6df5089aa552907230e7f6cd4ea44696f69fbf1049c59c3f66f5d39107548a63601826a", @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) mlockall(0x7) mlockall(0x5) mlockall(0x3) fork() ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3500.794866] lowmem_reserve[]: 0 0 1 1 1 [ 3500.799440] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3500.855777] lowmem_reserve[]: 0 0 0 0 0 [ 3500.873828] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3500.885666] Node 1 Normal free:65708kB min:53876kB low:67344kB high:80812kB active_anon:203664kB inactive_anon:3269560kB active_file:8kB inactive_file:8kB unevictable:9196kB writepending:4kB present:4194304kB managed:4128248kB mlocked:9196kB kernel_stack:77600kB pagetables:244728kB bounce:0kB free_pcp:2744kB local_pcp:1380kB free_cma:0kB [ 3500.896662] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3501.120336] lowmem_reserve[]: 0 0 0 0 0 [ 3501.131591] Node 0 DMA: 16*4kB (UME) 10*8kB (UMH) 2*16kB (ME) 1*32kB (E) 3*64kB (ME) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 11024kB [ 3501.158264] Node 0 DMA32: 1883*4kB (UMEH) 1985*8kB (UMEH) 1737*16kB (UMEH) 154*32kB (UMEH) 4*64kB (U) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56644kB [ 3501.174233] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3501.191992] Node 1 Normal: 1164*4kB (UME) 1157*8kB (UME) 557*16kB (UME) 1248*32kB (UME) 22*64kB (UM) 14*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65960kB [ 3501.212935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3501.224808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3501.236370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3501.248154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3501.258218] 26232 total pagecache pages [ 3501.262553] 0 pages in swap cache [ 3501.266284] Swap cache stats: add 0, delete 0, find 0/0 [ 3501.271985] Free swap = 0kB [ 3501.275269] Total swap = 0kB [ 3501.278542] 2097051 pages RAM [ 3501.283004] 0 pages HighMem/MovableOnly [ 3501.287252] 369648 pages reserved [ 3501.291913] 0 pages cma reserved [ 3501.295533] Out of memory (oom_kill_allocating_task): Kill process 5607 (syz-executor.0) score 0 or sacrifice child [ 3501.307380] Killed process 5606 (syz-executor.0) total-vm:93252kB, anon-rss:15616kB, file-rss:39108kB, shmem-rss:0kB [ 3501.320405] oom_reaper: reaped process 5606 (syz-executor.0), now anon-rss:15656kB, file-rss:40196kB, shmem-rss:0kB [ 3501.730580] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3501.786147] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3501.809651] CPU: 1 PID: 5666 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3501.817470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3501.826827] Call Trace: [ 3501.829426] dump_stack+0x1fc/0x2ef [ 3501.833068] dump_header+0x15d/0xc3f [ 3501.836800] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3501.841908] ? ___ratelimit+0x319/0x590 [ 3501.845896] oom_kill_process.cold+0x10/0x692 [ 3501.850401] ? check_preemption_disabled+0x41/0x280 [ 3501.855430] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3501.860716] out_of_memory+0x1072/0x1390 [ 3501.864794] ? oom_killer_disable+0x270/0x270 [ 3501.869302] ? mutex_trylock+0x15f/0x1a0 [ 3501.873376] __alloc_pages_nodemask+0x23a2/0x2890 [ 3501.878251] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3501.883097] ? __lock_acquire+0x6de/0x3ff0 [ 3501.887341] ? mark_held_locks+0xf0/0xf0 [ 3501.891418] alloc_pages_vma+0xf2/0x780 [ 3501.895400] do_anonymous_page+0x7c2/0x1be0 [ 3501.899758] ? __pte_alloc+0x340/0x340 [ 3501.903650] ? __put_compound_page+0xc0/0xc0 [ 3501.908062] ? mark_held_locks+0xf0/0xf0 [ 3501.912130] __handle_mm_fault+0x227a/0x41c0 [ 3501.916543] ? vm_insert_page+0x9c0/0x9c0 [ 3501.920711] ? check_preemption_disabled+0x41/0x280 [ 3501.925735] handle_mm_fault+0x436/0xb10 [ 3501.929811] __get_user_pages+0x6f0/0x1710 [ 3501.934053] ? follow_page_mask+0x1d00/0x1d00 [ 3501.938588] populate_vma_page_range+0x200/0x290 [ 3501.943530] __mm_populate+0x1ea/0x350 [ 3501.947425] ? populate_vma_page_range+0x290/0x290 [ 3501.952356] ? do_mlock+0x6b0/0x6b0 [ 3501.955985] ? security_capable+0x8f/0xc0 [ 3501.960142] __se_sys_mlockall+0x362/0x4e0 [ 3501.964379] do_syscall_64+0xf9/0x620 [ 3501.968187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3501.973376] RIP: 0033:0x4665f9 [ 3501.976573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3501.995473] RSP: 002b:00007f14527a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3502.003193] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3502.010457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3502.017723] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3502.025076] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3502.032343] R13: 00007ffedc16057f R14: 00007f14527a4300 R15: 0000000000022000 [ 3502.049154] Mem-Info: [ 3502.051681] active_anon:279872 inactive_anon:970399 isolated_anon:0 [ 3502.051681] active_file:15 inactive_file:2 isolated_file:13 [ 3502.051681] unevictable:60018 dirty:0 writeback:0 unstable:0 [ 3502.051681] slab_reclaimable:20077 slab_unreclaimable:158423 [ 3502.051681] mapped:59151 shmem:21337 pagetables:74363 bounce:0 [ 3502.051681] free:25046 free_pcp:617 free_cma:0 [ 3502.092237] Node 0 active_anon:916052kB inactive_anon:612032kB active_file:56kB inactive_file:0kB unevictable:216280kB isolated(anon):0kB isolated(file):52kB mapped:186324kB dirty:0kB writeback:0kB shmem:42452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3502.123379] Node 1 active_anon:203436kB inactive_anon:3269564kB active_file:4kB inactive_file:8kB unevictable:23792kB isolated(anon):0kB isolated(file):0kB mapped:50280kB dirty:0kB writeback:0kB shmem:42896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3502.151299] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:876kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3502.180675] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3502.185722] Node 0 DMA32 free:35716kB min:35996kB low:44992kB high:53988kB active_anon:913896kB inactive_anon:611156kB active_file:56kB inactive_file:0kB unevictable:216224kB writepending:0kB present:3129332kB managed:2763456kB mlocked:216224kB kernel_stack:22464kB pagetables:52544kB bounce:0kB free_pcp:1976kB local_pcp:616kB free_cma:0kB [ 3502.235520] lowmem_reserve[]: 0 0 1 1 1 [ 3502.239793] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3502.271599] lowmem_reserve[]: 0 0 0 0 0 [ 3502.279530] Node 1 Normal free:54096kB min:53876kB low:67344kB high:80812kB active_anon:203436kB inactive_anon:3276464kB active_file:944kB inactive_file:476kB unevictable:14692kB writepending:0kB present:4194304kB managed:4128248kB mlocked:14636kB kernel_stack:77568kB pagetables:244760kB bounce:0kB free_pcp:1032kB local_pcp:0kB free_cma:0kB [ 3502.313041] lowmem_reserve[]: 0 0 0 0 0 [ 3502.318015] Node 0 DMA: 12*4kB (UE) 9*8kB (UH) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10968kB [ 3502.334663] Node 0 DMA32: 899*4kB (UMEH) 1578*8kB (UMEH) 1651*16kB (UMEH) 164*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47884kB [ 3502.353190] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3502.365314] Node 1 Normal: 910*4kB (UME) 712*8kB (UME) 557*16kB (UME) 1252*32kB (UME) 24*64kB (UM) 15*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61768kB [ 3502.384149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3502.393578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3502.402696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3502.412096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3502.421233] 27489 total pagecache pages [ 3502.425857] 0 pages in swap cache [ 3502.429403] Swap cache stats: add 0, delete 0, find 0/0 [ 3502.446273] Free swap = 0kB [ 3502.449306] Total swap = 0kB [ 3502.452721] 2097051 pages RAM [ 3502.455833] 0 pages HighMem/MovableOnly [ 3502.459800] 369648 pages reserved [ 3502.463690] 0 pages cma reserved [ 3502.467252] Out of memory (oom_kill_allocating_task): Kill process 5666 (syz-executor.2) score 0 or sacrifice child [ 3502.482107] Killed process 5677 (syz-executor.2) total-vm:93516kB, anon-rss:28236kB, file-rss:35084kB, shmem-rss:0kB 05:55:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00H', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xffffff7f}, 0x0) 05:55:57 executing program 0: mlockall(0x3) fork() syz_open_procfs$userns(0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0xf87, 0x2) [ 3503.055672] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3503.094565] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00L', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00`', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xffffff9e}, 0x0) 05:55:58 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:58 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:55:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00h', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:55:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:55:58 executing program 2: semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000140)=0x2) mlockall(0x7) mlockall(0x3) fork() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4010) syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3504.093672] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:55:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xfffffff0}, 0x0) [ 3504.161209] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3504.941681] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3504.961374] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3504.969287] CPU: 0 PID: 5748 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3504.977099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3504.986451] Call Trace: [ 3504.989071] dump_stack+0x1fc/0x2ef [ 3504.992716] dump_header+0x15d/0xc3f [ 3504.996437] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3505.001563] ? ___ratelimit+0x319/0x590 [ 3505.005547] oom_kill_process.cold+0x10/0x692 [ 3505.010055] ? check_preemption_disabled+0x41/0x280 [ 3505.015167] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3505.020449] out_of_memory+0x1072/0x1390 [ 3505.024507] ? oom_killer_disable+0x270/0x270 [ 3505.028990] ? mutex_trylock+0x15f/0x1a0 [ 3505.033050] __alloc_pages_nodemask+0x23a2/0x2890 [ 3505.037933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3505.042784] ? __lock_acquire+0x6de/0x3ff0 [ 3505.047019] ? mark_held_locks+0xf0/0xf0 [ 3505.051094] alloc_pages_vma+0xf2/0x780 [ 3505.055080] do_anonymous_page+0x7c2/0x1be0 [ 3505.059496] ? __pte_alloc+0x340/0x340 [ 3505.063365] ? __put_compound_page+0xc0/0xc0 [ 3505.067760] ? mark_held_locks+0xf0/0xf0 [ 3505.071826] __handle_mm_fault+0x227a/0x41c0 [ 3505.076245] ? vm_insert_page+0x9c0/0x9c0 [ 3505.080415] ? check_preemption_disabled+0x41/0x280 [ 3505.085429] handle_mm_fault+0x436/0xb10 [ 3505.089482] __get_user_pages+0x6f0/0x1710 [ 3505.093726] ? follow_page_mask+0x1d00/0x1d00 [ 3505.098217] ? check_preemption_disabled+0x41/0x280 [ 3505.103224] populate_vma_page_range+0x200/0x290 [ 3505.107979] __mm_populate+0x1ea/0x350 [ 3505.111884] ? populate_vma_page_range+0x290/0x290 [ 3505.116832] ? do_mlock+0x6b0/0x6b0 [ 3505.120470] ? security_capable+0x8f/0xc0 [ 3505.124630] __se_sys_mlockall+0x362/0x4e0 [ 3505.128876] do_syscall_64+0xf9/0x620 [ 3505.132675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3505.137846] RIP: 0033:0x4665f9 [ 3505.141033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3505.159925] RSP: 002b:00007f1452783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3505.167621] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3505.174882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3505.182238] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3505.189498] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3505.196760] R13: 00007ffedc16057f R14: 00007f1452783300 R15: 0000000000022000 [ 3505.213248] Mem-Info: [ 3505.215781] active_anon:279898 inactive_anon:970383 isolated_anon:0 [ 3505.215781] active_file:15 inactive_file:26 isolated_file:0 [ 3505.215781] unevictable:60850 dirty:0 writeback:0 unstable:0 [ 3505.215781] slab_reclaimable:20189 slab_unreclaimable:157895 [ 3505.215781] mapped:58701 shmem:21337 pagetables:74327 bounce:0 [ 3505.215781] free:25066 free_pcp:62 free_cma:0 [ 3505.256027] Node 0 active_anon:916204kB inactive_anon:611972kB active_file:52kB inactive_file:52kB unevictable:223732kB isolated(anon):0kB isolated(file):0kB mapped:191476kB dirty:0kB writeback:0kB shmem:42448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3505.288703] Node 1 active_anon:203388kB inactive_anon:3269560kB active_file:8kB inactive_file:52kB unevictable:19668kB isolated(anon):0kB isolated(file):0kB mapped:43328kB dirty:0kB writeback:0kB shmem:42900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3505.320689] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:876kB active_file:0kB inactive_file:0kB unevictable:120kB writepending:0kB present:15992kB managed:15908kB mlocked:120kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3505.353713] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3505.358757] Node 0 DMA32 free:35928kB min:35996kB low:44992kB high:53988kB active_anon:914048kB inactive_anon:611096kB active_file:52kB inactive_file:52kB unevictable:223612kB writepending:0kB present:3129332kB managed:2763456kB mlocked:223612kB kernel_stack:22464kB pagetables:52308kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3505.389873] lowmem_reserve[]: 0 0 1 1 1 [ 3505.405221] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3505.436279] lowmem_reserve[]: 0 0 0 0 0 [ 3505.440324] Node 1 Normal free:53380kB min:53876kB low:67344kB high:80812kB active_anon:203388kB inactive_anon:3269560kB active_file:8kB inactive_file:0kB unevictable:19368kB writepending:0kB present:4194304kB managed:4128248kB mlocked:19368kB kernel_stack:77632kB pagetables:244852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3505.478071] lowmem_reserve[]: 0 0 0 0 0 [ 3505.482605] Node 0 DMA: 12*4kB (UE) 13*8kB (UH) 3*16kB (UME) 2*32kB (ME) 1*64kB (E) 3*128kB (MEH) 2*256kB (ME) 3*512kB (MEH) 4*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10952kB [ 3505.507263] Node 0 DMA32: 28*4kB (UH) 97*8kB (UMH) 1710*16kB (UMEH) 236*32kB (UMEH) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35928kB [ 3505.530489] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3505.542674] Node 1 Normal: 137*4kB (UE) 713*8kB (UM) 183*16kB (UME) 1235*32kB (UME) 19*64kB (UM) 30*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53756kB [ 3505.569453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3505.578350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3505.589139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3505.611250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3505.619830] 27422 total pagecache pages [ 3505.624979] 0 pages in swap cache [ 3505.628689] Swap cache stats: add 0, delete 0, find 0/0 [ 3505.639922] Free swap = 0kB [ 3505.647730] Total swap = 0kB [ 3505.651033] 2097051 pages RAM [ 3505.655581] 0 pages HighMem/MovableOnly [ 3505.659551] 369648 pages reserved [ 3505.663605] 0 pages cma reserved [ 3505.667222] Out of memory (oom_kill_allocating_task): Kill process 5748 (syz-executor.2) score 0 or sacrifice child [ 3505.682950] Killed process 5734 (syz-executor.2) total-vm:93384kB, anon-rss:20904kB, file-rss:39232kB, shmem-rss:0kB [ 3505.696305] oom_reaper: reaped process 5734 (syz-executor.2), now anon-rss:20952kB, file-rss:40192kB, shmem-rss:0kB 05:56:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00l', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:01 executing program 0: mlockall(0x5) fork() syz_open_procfs$userns(0x0, 0x0) 05:56:01 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) mlockall(0x7) r0 = semget$private(0x0, 0x0, 0xa) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000080)=""/61) mlockall(0x3) fork() mlockall(0x1) mlockall(0x6) syz_open_procfs$userns(0x0, &(0x7f0000000000)) mlockall(0x4) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) 05:56:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 05:56:01 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:56:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) [ 3507.039391] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3507.062496] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00t', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60007fff", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) 05:56:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x40030000000000}, 0x0) 05:56:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00z', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3507.420253] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3507.458312] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3509.193161] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3509.208921] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3509.237382] CPU: 0 PID: 8111 Comm: syz-fuzzer Not tainted 4.19.205-syzkaller #0 [ 3509.244840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3509.254186] Call Trace: [ 3509.256778] dump_stack+0x1fc/0x2ef [ 3509.260405] dump_header+0x15d/0xc3f [ 3509.264129] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3509.269225] ? ___ratelimit+0x319/0x590 [ 3509.273213] oom_kill_process.cold+0x10/0x692 [ 3509.277716] ? check_preemption_disabled+0x41/0x280 [ 3509.282743] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3509.288110] out_of_memory+0x1072/0x1390 [ 3509.292181] ? oom_killer_disable+0x270/0x270 [ 3509.296679] ? mutex_trylock+0x15f/0x1a0 [ 3509.300740] __alloc_pages_nodemask+0x23a2/0x2890 [ 3509.305587] ? find_get_entry+0x4cd/0x8a0 [ 3509.309743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3509.314609] alloc_pages_current+0x193/0x2a0 [ 3509.319016] filemap_fault+0x146e/0x2180 [ 3509.323090] ext4_filemap_fault+0x84/0xb0 [ 3509.327234] __do_fault+0x10b/0x4b0 [ 3509.330862] __handle_mm_fault+0x273b/0x41c0 [ 3509.335292] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3509.340401] ? vm_insert_page+0x9c0/0x9c0 [ 3509.344568] ? check_preemption_disabled+0x41/0x280 [ 3509.349592] handle_mm_fault+0x436/0xb10 [ 3509.353661] __do_page_fault+0x68e/0xd60 [ 3509.357728] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3509.362745] ? spurious_fault+0x840/0x840 [ 3509.366890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3509.371734] ? page_fault+0x8/0x30 [ 3509.375270] page_fault+0x1e/0x30 [ 3509.378715] RIP: 0033:0x40ba80 [ 3509.381903] Code: Bad RIP value. [ 3509.385258] RSP: 002b:000000c00003ded8 EFLAGS: 00010202 [ 3509.390700] RAX: 0000000001883f28 RBX: 000000c00002e000 RCX: 000000c000000480 [ 3509.398103] RDX: 00000000107c5636 RSI: 000000c00003df00 RDI: 000000c00003dedc [ 3509.405370] RBP: 000000c00003df28 R08: 00007ffe25ccc000 R09: 000003ac700f4ec0 [ 3509.412632] R10: 00083e2b1b5478dd R11: 0000000000000001 R12: 000000000043b6a0 [ 3509.419889] R13: 0000000000000000 R14: 000000000094d6d0 R15: 0000000000000000 [ 3509.427654] Mem-Info: [ 3509.430321] active_anon:279923 inactive_anon:973720 isolated_anon:0 [ 3509.430321] active_file:26 inactive_file:0 isolated_file:0 [ 3509.430321] unevictable:57159 dirty:2 writeback:0 unstable:0 [ 3509.430321] slab_reclaimable:20188 slab_unreclaimable:158178 [ 3509.430321] mapped:58160 shmem:21337 pagetables:74381 bounce:0 [ 3509.430321] free:24982 free_pcp:0 free_cma:0 [ 3509.464157] Node 0 active_anon:916240kB inactive_anon:625308kB active_file:0kB inactive_file:20kB unevictable:211048kB isolated(anon):0kB isolated(file):0kB mapped:197708kB dirty:8kB writeback:0kB shmem:42452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3509.495299] Node 1 active_anon:203452kB inactive_anon:3269572kB active_file:104kB inactive_file:0kB unevictable:17588kB isolated(anon):0kB isolated(file):0kB mapped:34932kB dirty:0kB writeback:0kB shmem:42896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3509.528303] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2164kB inactive_anon:1164kB active_file:0kB inactive_file:0kB unevictable:308kB writepending:0kB present:15992kB managed:15908kB mlocked:308kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3509.581134] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3509.596457] Node 0 DMA32 free:35584kB min:35996kB low:44992kB high:53988kB active_anon:914076kB inactive_anon:623656kB active_file:40kB inactive_file:4kB unevictable:211136kB writepending:8kB present:3129332kB managed:2763456kB mlocked:211136kB kernel_stack:22528kB pagetables:52644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3509.726468] lowmem_reserve[]: 0 0 1 1 1 [ 3509.758547] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3509.886265] lowmem_reserve[]: 0 0 0 0 0 [ 3509.912477] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:203452kB inactive_anon:3269572kB active_file:0kB inactive_file:52kB unevictable:17684kB writepending:0kB present:4194304kB managed:4128248kB mlocked:17684kB kernel_stack:77536kB pagetables:244732kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 3510.050578] lowmem_reserve[]: 0 0 0 0 0 [ 3510.064862] Node 0 DMA: 12*4kB (UE) 20*8kB (UM) 10*16kB (UE) 7*32kB (UME) 1*64kB (E) 5*128kB (UME) 2*256kB (ME) 2*512kB (ME) 4*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11024kB [ 3510.104599] Node 0 DMA32: 1233*4kB (U) 168*8kB (ME) 1657*16kB (UE) 262*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41172kB [ 3510.124354] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3510.137036] Node 1 Normal: 168*4kB (UME) 694*8kB (UM) 173*16kB (UME) 1235*32kB (UME) 20*64kB (UM) 32*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53888kB [ 3510.159749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3510.174516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3510.184076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3510.198696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3510.208418] 28141 total pagecache pages [ 3510.217379] 0 pages in swap cache [ 3510.221618] Swap cache stats: add 0, delete 0, find 0/0 [ 3510.226979] Free swap = 0kB [ 3510.236122] Total swap = 0kB [ 3510.239151] 2097051 pages RAM [ 3510.243445] 0 pages HighMem/MovableOnly [ 3510.247418] 369648 pages reserved [ 3510.257789] 0 pages cma reserved [ 3510.264507] Out of memory (oom_kill_allocating_task): Kill process 8111 (syz-fuzzer) score 0 or sacrifice child [ 3510.283021] Killed process 5030 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:876kB, shmem-rss:0kB 05:56:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:05 executing program 0: mlockall(0x3) fork() fork() r0 = fork() r1 = fork() sched_getscheduler(r1) sched_getscheduler(r1) sched_getscheduler(r0) tkill(r0, 0x30) syz_open_procfs$userns(0x0, 0x0) r2 = fork() sched_getscheduler(r2) timer_create(0x6, &(0x7f0000000000)={0x0, 0x26, 0x0, @tid=r2}, &(0x7f0000000040)) 05:56:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x0) 05:56:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:05 executing program 2: mlockall(0x7) mlockall(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000200000000c00060000000000800000000c0022800800020000000000000000"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xaf}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000}, 0x0) fork() openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:56:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffffffffffff}, 0x0) 05:56:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xf0ffff}, 0x0) [ 3511.061403] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3511.094543] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3511.130942] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00@', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3511.676947] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xf0ffff}, 0x0) 05:56:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x100000000000000}, 0x0) 05:56:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000003", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3511.867030] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3512.145578] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3512.991796] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.706954] IPVS: ftp: loaded support on port[0] = 21 05:56:08 executing program 0: mlockall(0x3) syz_open_procfs$userns(0x0, 0x0) 05:56:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xf0ffff}, 0x0) [ 3513.900149] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3513.964954] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3514.906293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3514.920399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3514.938578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3514.962229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3514.988562] device bridge_slave_1 left promiscuous mode [ 3515.003890] bridge0: port 2(bridge_slave_1) entered disabled state [ 3515.012785] device bridge_slave_0 left promiscuous mode [ 3515.018570] bridge0: port 1(bridge_slave_0) entered disabled state [ 3515.053996] device veth1_macvtap left promiscuous mode [ 3515.070359] device veth0_macvtap left promiscuous mode [ 3515.076015] device veth1_vlan left promiscuous mode [ 3515.099487] device veth0_vlan left promiscuous mode [ 3515.629430] Bluetooth: hci2: command 0x0409 tx timeout [ 3517.719234] Bluetooth: hci2: command 0x041b tx timeout [ 3519.789108] Bluetooth: hci2: command 0x040f tx timeout [ 3520.017534] device hsr_slave_1 left promiscuous mode [ 3520.025184] device hsr_slave_0 left promiscuous mode [ 3520.044487] team0 (unregistering): Port device team_slave_1 removed [ 3520.054199] team0 (unregistering): Port device team_slave_0 removed [ 3520.064982] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3520.075694] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3520.108449] bond0 (unregistering): Released all slaves [ 3520.133712] chnl_net:caif_netlink_parms(): no params data found [ 3520.299550] bridge0: port 1(bridge_slave_0) entered blocking state [ 3520.305986] bridge0: port 1(bridge_slave_0) entered disabled state [ 3520.313957] device bridge_slave_0 entered promiscuous mode [ 3520.321746] bridge0: port 2(bridge_slave_1) entered blocking state [ 3520.328154] bridge0: port 2(bridge_slave_1) entered disabled state [ 3520.336730] device bridge_slave_1 entered promiscuous mode [ 3520.361083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3520.371863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3520.396072] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3520.405925] team0: Port device team_slave_0 added [ 3520.413282] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3520.421755] team0: Port device team_slave_1 added [ 3520.443141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3520.449707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3520.476156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3520.488861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3520.495900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3520.524606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3520.536594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3520.545111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3520.570592] device hsr_slave_0 entered promiscuous mode [ 3520.576839] device hsr_slave_1 entered promiscuous mode [ 3520.585435] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3520.593511] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3520.692505] bridge0: port 2(bridge_slave_1) entered blocking state [ 3520.698898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3520.705686] bridge0: port 1(bridge_slave_0) entered blocking state [ 3520.712080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3520.762093] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3520.768217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3520.782050] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3520.792916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3520.800645] bridge0: port 1(bridge_slave_0) entered disabled state [ 3520.808712] bridge0: port 2(bridge_slave_1) entered disabled state [ 3520.818012] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3520.830974] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3520.837048] 8021q: adding VLAN 0 to HW filter on device team0 [ 3520.850323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3520.858093] bridge0: port 1(bridge_slave_0) entered blocking state [ 3520.864495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3520.891195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3520.898878] bridge0: port 2(bridge_slave_1) entered blocking state [ 3520.905298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3520.918607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3520.927719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3520.948830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3520.960837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3520.972209] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3520.979458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3520.988006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3520.996875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3521.020697] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3521.036278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3521.043053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3521.050863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3521.064427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3521.086663] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3521.098742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3521.186277] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3521.195555] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3521.203177] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3521.214525] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3521.224713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3521.239753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3521.248348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3521.256905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3521.265606] device veth0_vlan entered promiscuous mode [ 3521.276960] device veth1_vlan entered promiscuous mode [ 3521.283128] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3521.292776] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3521.307244] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3521.325561] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3521.335780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3521.346979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3521.356270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3521.365616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3521.377066] device veth0_macvtap entered promiscuous mode [ 3521.384751] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3521.394615] device veth1_macvtap entered promiscuous mode [ 3521.401404] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3521.410880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3521.421336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3521.430601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3521.440475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.449633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3521.459411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.468517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3521.478285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.487596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3521.497345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.506565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3521.516377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.526468] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3521.533861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3521.541493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3521.548756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3521.556188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3521.564049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3521.574505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3521.584514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.593714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3521.604048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.613225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3521.622998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.632161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3521.641965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.651204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3521.661062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3521.671232] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3521.678122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3521.686688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3521.694925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3521.807004] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 3521.815061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3521.829651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3521.836458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3521.874816] Bluetooth: hci2: command 0x0419 tx timeout [ 3521.881410] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 3521.888717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3521.896414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3521.903796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3522.733638] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3522.745792] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3522.763506] CPU: 1 PID: 6382 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3522.771308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3522.780644] Call Trace: [ 3522.783218] dump_stack+0x1fc/0x2ef [ 3522.787563] dump_header+0x15d/0xc3f [ 3522.791265] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3522.796367] ? ___ratelimit+0x319/0x590 [ 3522.800326] oom_kill_process.cold+0x10/0x692 [ 3522.804892] ? check_preemption_disabled+0x41/0x280 [ 3522.809896] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3522.815161] out_of_memory+0x1072/0x1390 [ 3522.819218] ? oom_killer_disable+0x270/0x270 [ 3522.823703] ? mutex_trylock+0x15f/0x1a0 [ 3522.827768] __alloc_pages_nodemask+0x23a2/0x2890 [ 3522.832608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3522.837440] ? find_next_bit+0x105/0x130 [ 3522.841489] ? munlock_vma_page+0x422/0x640 [ 3522.845818] ? __lock_acquire+0x6de/0x3ff0 [ 3522.850052] alloc_pages_vma+0xf2/0x780 [ 3522.854031] wp_page_copy+0x219/0x2c40 [ 3522.857912] ? _vm_normal_page+0x132/0x510 [ 3522.862131] ? follow_pte_pmd+0x60/0x60 [ 3522.866094] do_wp_page+0x2d4/0x2210 [ 3522.869793] ? finish_mkwrite_fault+0x640/0x640 [ 3522.874444] ? __handle_mm_fault+0x15f6/0x41c0 [ 3522.879022] ? mark_held_locks+0xf0/0xf0 [ 3522.883071] __handle_mm_fault+0x258b/0x41c0 [ 3522.887463] ? vm_insert_page+0x9c0/0x9c0 [ 3522.891616] ? check_preemption_disabled+0x41/0x280 [ 3522.897498] handle_mm_fault+0x436/0xb10 [ 3522.901543] __get_user_pages+0x6f0/0x1710 [ 3522.905763] ? follow_page_mask+0x1d00/0x1d00 [ 3522.910240] ? __mm_populate+0x2c9/0x350 [ 3522.914290] populate_vma_page_range+0x200/0x290 [ 3522.919034] __mm_populate+0x1ea/0x350 [ 3522.922914] ? populate_vma_page_range+0x290/0x290 [ 3522.927832] ? do_mlock+0x6b0/0x6b0 [ 3522.931443] ? security_capable+0x8f/0xc0 [ 3522.935577] __se_sys_mlockall+0x362/0x4e0 [ 3522.939822] do_syscall_64+0xf9/0x620 [ 3522.943609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3522.948788] RIP: 0033:0x4665f9 [ 3522.951962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3522.970851] RSP: 002b:00007fa965c69188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3522.978547] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3522.985806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3522.993067] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3523.000315] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3523.007657] R13: 00007fff029cf12f R14: 00007fa965c69300 R15: 0000000000022000 [ 3523.023782] Mem-Info: [ 3523.026245] active_anon:279842 inactive_anon:976561 isolated_anon:0 [ 3523.026245] active_file:12 inactive_file:8 isolated_file:0 [ 3523.026245] unevictable:57157 dirty:32 writeback:24 unstable:0 [ 3523.026245] slab_reclaimable:20105 slab_unreclaimable:155171 [ 3523.026245] mapped:58194 shmem:21338 pagetables:74661 bounce:0 [ 3523.026245] free:25067 free_pcp:124 free_cma:0 [ 3523.061650] Node 0 active_anon:916196kB inactive_anon:640464kB active_file:4kB inactive_file:4kB unevictable:197364kB isolated(anon):0kB isolated(file):0kB mapped:193712kB dirty:24kB writeback:0kB shmem:42492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3523.091237] Node 1 active_anon:203132kB inactive_anon:3265788kB active_file:64kB inactive_file:64kB unevictable:31272kB isolated(anon):0kB isolated(file):0kB mapped:38968kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3523.120019] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:1480kB active_file:0kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15908kB mlocked:84kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3523.147199] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3523.155523] Node 0 DMA32 free:35868kB min:35996kB low:44992kB high:53988kB active_anon:914036kB inactive_anon:638984kB active_file:4kB inactive_file:4kB unevictable:197280kB writepending:24kB present:3129332kB managed:2763456kB mlocked:197280kB kernel_stack:22688kB pagetables:53312kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 3523.187087] lowmem_reserve[]: 0 0 1 1 1 [ 3523.191296] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3523.217516] lowmem_reserve[]: 0 0 0 0 0 [ 3523.221606] Node 1 Normal free:53460kB min:53876kB low:67344kB high:80812kB active_anon:203132kB inactive_anon:3265788kB active_file:64kB inactive_file:64kB unevictable:31272kB writepending:0kB present:4194304kB managed:4128248kB mlocked:31272kB kernel_stack:77632kB pagetables:245296kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3523.252768] lowmem_reserve[]: 0 0 0 0 0 [ 3523.256743] Node 0 DMA: 13*4kB (UME) 4*8kB (UMH) 15*16kB (UME) 9*32kB (UMEH) 2*64kB (ME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 4*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10980kB [ 3523.277277] Node 0 DMA32: 11*4kB (UE) 2*8kB (UH) 1437*16kB (UEH) 399*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35820kB [ 3523.292905] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3523.304906] Node 1 Normal: 1*4kB (M) 656*8kB (U) 621*16kB (UE) 1196*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53460kB [ 3523.326875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3523.335821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3523.344598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3523.353613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3523.362370] 26811 total pagecache pages [ 3523.367547] 0 pages in swap cache [ 3523.371087] Swap cache stats: add 0, delete 0, find 0/0 [ 3523.376543] Free swap = 0kB [ 3523.379591] Total swap = 0kB [ 3523.382594] 2097051 pages RAM [ 3523.385681] 0 pages HighMem/MovableOnly [ 3523.390857] 369648 pages reserved [ 3523.394314] 0 pages cma reserved [ 3523.397682] Out of memory (oom_kill_allocating_task): Kill process 6382 (syz-executor.2) score 0 or sacrifice child [ 3523.408398] Killed process 6387 (syz-executor.2) total-vm:93516kB, anon-rss:36900kB, file-rss:35084kB, shmem-rss:0kB [ 3523.425521] syz-executor.2 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3523.437723] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3523.450292] oom_reaper: reaped process 6387 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3523.458530] CPU: 0 PID: 6382 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3523.468316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3523.477664] Call Trace: [ 3523.480241] dump_stack+0x1fc/0x2ef [ 3523.483867] dump_header+0x15d/0xc3f [ 3523.487601] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3523.492684] ? ___ratelimit+0x319/0x590 [ 3523.496644] oom_kill_process.cold+0x10/0x692 [ 3523.501141] ? check_preemption_disabled+0x41/0x280 [ 3523.506228] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3523.511486] out_of_memory+0x1072/0x1390 [ 3523.515531] ? oom_killer_disable+0x270/0x270 [ 3523.520013] ? mutex_trylock+0x15f/0x1a0 [ 3523.524059] __alloc_pages_nodemask+0x23a2/0x2890 [ 3523.528889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3523.533712] ? find_next_bit+0x105/0x130 [ 3523.537760] ? munlock_vma_page+0x422/0x640 [ 3523.542069] ? __lock_acquire+0x6de/0x3ff0 [ 3523.546283] alloc_pages_vma+0xf2/0x780 [ 3523.550244] wp_page_copy+0x219/0x2c40 [ 3523.554112] ? _vm_normal_page+0x132/0x510 [ 3523.558326] ? follow_pte_pmd+0x60/0x60 [ 3523.562282] do_wp_page+0x2d4/0x2210 [ 3523.565977] ? finish_mkwrite_fault+0x640/0x640 [ 3523.570632] ? __handle_mm_fault+0x15f6/0x41c0 [ 3523.575214] ? mark_held_locks+0xf0/0xf0 [ 3523.579262] __handle_mm_fault+0x258b/0x41c0 [ 3523.583661] ? vm_insert_page+0x9c0/0x9c0 [ 3523.587802] ? check_preemption_disabled+0x41/0x280 [ 3523.592807] handle_mm_fault+0x436/0xb10 [ 3523.596859] __get_user_pages+0x6f0/0x1710 [ 3523.601082] ? follow_page_mask+0x1d00/0x1d00 [ 3523.605562] ? __mm_populate+0x2c9/0x350 [ 3523.609610] populate_vma_page_range+0x200/0x290 [ 3523.614360] __mm_populate+0x1ea/0x350 [ 3523.618244] ? populate_vma_page_range+0x290/0x290 [ 3523.623152] ? do_mlock+0x6b0/0x6b0 [ 3523.626761] ? security_capable+0x8f/0xc0 [ 3523.630894] __se_sys_mlockall+0x362/0x4e0 [ 3523.635118] do_syscall_64+0xf9/0x620 [ 3523.638912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3523.644091] RIP: 0033:0x4665f9 [ 3523.647265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3523.666144] RSP: 002b:00007fa965c69188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3523.673832] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3523.681081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3523.688329] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3523.695579] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3523.702828] R13: 00007fff029cf12f R14: 00007fa965c69300 R15: 0000000000022000 [ 3523.714627] Mem-Info: [ 3523.717140] active_anon:279832 inactive_anon:972713 isolated_anon:0 [ 3523.717140] active_file:17 inactive_file:792 isolated_file:0 [ 3523.717140] unevictable:57159 dirty:6 writeback:0 unstable:0 [ 3523.717140] slab_reclaimable:20105 slab_unreclaimable:154881 [ 3523.717140] mapped:58545 shmem:21339 pagetables:74652 bounce:0 [ 3523.717140] free:27772 free_pcp:853 free_cma:0 [ 3523.751364] Node 0 active_anon:916196kB inactive_anon:625064kB active_file:4kB inactive_file:4204kB unevictable:197364kB isolated(anon):0kB isolated(file):0kB mapped:196312kB dirty:24kB writeback:0kB shmem:42492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3523.780281] Node 1 active_anon:203132kB inactive_anon:3265788kB active_file:64kB inactive_file:64kB unevictable:31272kB isolated(anon):0kB isolated(file):0kB mapped:38968kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3523.809829] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:1420kB active_file:0kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15908kB mlocked:84kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3523.837847] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3523.843046] Node 0 DMA32 free:43704kB min:35996kB low:44992kB high:53988kB active_anon:914036kB inactive_anon:623584kB active_file:4kB inactive_file:4804kB unevictable:197280kB writepending:24kB present:3129332kB managed:2763456kB mlocked:197280kB kernel_stack:22688kB pagetables:53312kB bounce:0kB free_pcp:2912kB local_pcp:1544kB free_cma:0kB [ 3523.874056] lowmem_reserve[]: 0 0 1 1 1 [ 3523.879589] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3523.905787] lowmem_reserve[]: 0 0 0 0 0 [ 3523.909859] Node 1 Normal free:53564kB min:53876kB low:67344kB high:80812kB active_anon:203124kB inactive_anon:3265788kB active_file:52kB inactive_file:76kB unevictable:31272kB writepending:0kB present:4194304kB managed:4128248kB mlocked:31272kB kernel_stack:77600kB pagetables:245148kB bounce:0kB free_pcp:440kB local_pcp:432kB free_cma:0kB [ 3523.940562] lowmem_reserve[]: 0 0 0 0 0 [ 3523.944780] Node 0 DMA: 24*4kB (UMEH) 4*8kB (UMH) 15*16kB (UME) 9*32kB (UMEH) 2*64kB (ME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 4*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11024kB [ 3523.961274] Node 0 DMA32: 538*4kB (UME) 118*8kB (UMEH) 1429*16kB (UMEH) 471*32kB (UME) 24*64kB (UME) 2*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43080kB [ 3523.976774] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3523.989345] Node 1 Normal: 1*4kB (M) 666*8kB (U) 620*16kB (UE) 1198*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53588kB [ 3524.002679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3524.011592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3524.020245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3524.029160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3524.037714] 28048 total pagecache pages [ 3524.041759] 0 pages in swap cache [ 3524.045216] Swap cache stats: add 0, delete 0, find 0/0 [ 3524.050643] Free swap = 0kB [ 3524.053769] Total swap = 0kB [ 3524.056769] 2097051 pages RAM [ 3524.059924] 0 pages HighMem/MovableOnly [ 3524.063904] 369648 pages reserved [ 3524.067330] 0 pages cma reserved [ 3524.071406] Out of memory (oom_kill_allocating_task): Kill process 6382 (syz-executor.2) score 0 or sacrifice child [ 3524.082115] Killed process 6380 (syz-executor.2) total-vm:93516kB, anon-rss:36900kB, file-rss:56580kB, shmem-rss:0kB [ 3524.095419] oom_reaper: reaped process 6380 (syz-executor.2), now anon-rss:36900kB, file-rss:56572kB, shmem-rss:0kB 05:56:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x200000000000000}, 0x0) 05:56:19 executing program 0: mlockall(0x3) r0 = fork() syz_open_procfs$userns(0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') 05:56:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xf0ffff}, 0x0) 05:56:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:19 executing program 2: mlockall(0x1) fork() fork() r0 = fork() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = fork() sched_getscheduler(r1) fork() syz_open_procfs$userns(r0, &(0x7f0000000040)) [ 3524.707884] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3524.749686] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3524.774313] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xf0ffff}, 0x0) [ 3524.798269] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xf0ffff}, 0x0) [ 3524.937552] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3525.006517] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x300000000000000}, 0x0) [ 3525.062464] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3525.130831] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3525.330938] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3525.834015] kworker/u4:2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3525.855790] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 3525.866040] CPU: 1 PID: 34 Comm: kworker/u4:2 Not tainted 4.19.205-syzkaller #0 [ 3525.873495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3525.882854] Workqueue: events_unbound call_usermodehelper_exec_work [ 3525.889253] Call Trace: [ 3525.891843] dump_stack+0x1fc/0x2ef [ 3525.895472] dump_header+0x15d/0xc3f [ 3525.899192] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3525.904296] ? ___ratelimit+0x319/0x590 [ 3525.908273] oom_kill_process.cold+0x10/0x692 [ 3525.912764] ? lock_downgrade+0x720/0x720 [ 3525.916906] ? check_preemption_disabled+0x41/0x280 [ 3525.921995] out_of_memory+0x34d/0x1390 [ 3525.925967] ? oom_killer_disable+0x270/0x270 [ 3525.930509] ? mutex_trylock+0x15f/0x1a0 [ 3525.934607] __alloc_pages_nodemask+0x23a2/0x2890 [ 3525.939441] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3525.944266] ? fprop_fraction_percpu+0x250/0x420 [ 3525.949012] ? should_fail+0x142/0x7b0 [ 3525.952966] ? fs_reclaim_release+0xd0/0x110 [ 3525.957365] ? check_preemption_disabled+0x41/0x280 [ 3525.962383] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3525.967397] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3525.972155] copy_process.part.0+0x3cf/0x8260 [ 3525.976646] ? __lock_acquire+0x6de/0x3ff0 [ 3525.980880] ? __lock_acquire+0x6de/0x3ff0 [ 3525.985114] ? __lock_acquire+0x6de/0x3ff0 [ 3525.989351] ? umh_complete+0x90/0x90 [ 3525.993159] ? __cleanup_sighand+0x60/0x60 [ 3525.997394] ? mark_held_locks+0xf0/0xf0 [ 3526.001458] ? __lock_acquire+0x6de/0x3ff0 [ 3526.005699] _do_fork+0x22f/0xf30 [ 3526.009151] ? umh_complete+0x90/0x90 [ 3526.012952] ? fork_idle+0x220/0x220 [ 3526.016750] ? lock_acquire+0x170/0x3c0 [ 3526.020720] ? debug_object_deactivate+0xfc/0x2e0 [ 3526.025567] ? trace_hardirqs_off+0x64/0x200 [ 3526.029980] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3526.035082] ? umh_complete+0x90/0x90 [ 3526.038887] kernel_thread+0x2f/0x40 [ 3526.042604] call_usermodehelper_exec_work+0x16d/0x260 [ 3526.047879] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 3526.053422] process_one_work+0x864/0x1570 [ 3526.057664] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3526.062343] worker_thread+0x64c/0x1130 [ 3526.066327] ? process_one_work+0x1570/0x1570 [ 3526.070823] kthread+0x33f/0x460 [ 3526.074188] ? kthread_park+0x180/0x180 [ 3526.078164] ret_from_fork+0x24/0x30 [ 3526.102120] Mem-Info: [ 3526.104576] active_anon:279885 inactive_anon:972671 isolated_anon:0 [ 3526.104576] active_file:66 inactive_file:60 isolated_file:0 [ 3526.104576] unevictable:60643 dirty:0 writeback:0 unstable:0 [ 3526.104576] slab_reclaimable:20092 slab_unreclaimable:155459 [ 3526.104576] mapped:58769 shmem:21339 pagetables:74701 bounce:0 [ 3526.104576] free:25041 free_pcp:102 free_cma:0 [ 3526.142478] Node 0 active_anon:916260kB inactive_anon:624900kB active_file:364kB inactive_file:108kB unevictable:221908kB isolated(anon):0kB isolated(file):100kB mapped:202428kB dirty:0kB writeback:0kB shmem:42492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3526.176836] Node 1 active_anon:203280kB inactive_anon:3265784kB active_file:0kB inactive_file:24kB unevictable:20664kB isolated(anon):0kB isolated(file):0kB mapped:32648kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3526.212980] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1420kB active_file:28kB inactive_file:0kB unevictable:124kB writepending:0kB present:15992kB managed:15908kB mlocked:124kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3526.244019] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3526.249129] Node 0 DMA32 free:35564kB min:35996kB low:44992kB high:53988kB active_anon:914104kB inactive_anon:623480kB active_file:268kB inactive_file:0kB unevictable:221396kB writepending:0kB present:3129332kB managed:2763456kB mlocked:221396kB kernel_stack:22688kB pagetables:53420kB bounce:0kB free_pcp:776kB local_pcp:68kB free_cma:0kB [ 3526.280517] lowmem_reserve[]: 0 0 1 1 1 [ 3526.284511] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3526.310454] lowmem_reserve[]: 0 0 0 0 0 [ 3526.314439] Node 1 Normal free:53620kB min:53876kB low:67344kB high:80812kB active_anon:203280kB inactive_anon:3265784kB active_file:0kB inactive_file:24kB unevictable:20664kB writepending:0kB present:4194304kB managed:4128248kB mlocked:20664kB kernel_stack:77632kB pagetables:245236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3526.345448] lowmem_reserve[]: 0 0 0 0 0 [ 3526.349746] Node 0 DMA: 19*4kB (UMEH) 4*8kB (UMH) 15*16kB (UME) 9*32kB (UMEH) 2*64kB (ME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 4*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11004kB [ 3526.366539] Node 0 DMA32: 1*4kB (M) 2*8kB (H) 1411*16kB (UEH) 398*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35332kB [ 3526.379690] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3526.390821] Node 1 Normal: 38*4kB (UM) 703*8kB (UM) 616*16kB (UME) 1197*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53936kB [ 3526.404711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3526.413566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3526.422188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3526.431682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3526.441737] 27353 total pagecache pages [ 3526.445717] 0 pages in swap cache [ 3526.449210] Swap cache stats: add 0, delete 0, find 0/0 [ 3526.454558] Free swap = 0kB [ 3526.457555] Total swap = 0kB [ 3526.460678] 2097051 pages RAM [ 3526.463775] 0 pages HighMem/MovableOnly [ 3526.467739] 369648 pages reserved [ 3526.471710] 0 pages cma reserved [ 3526.475073] Out of memory: Kill process 6391 (syz-executor.2) score 1011 or sacrifice child [ 3526.485806] Killed process 6391 (syz-executor.2) total-vm:93252kB, anon-rss:28208kB, file-rss:52092kB, shmem-rss:0kB 05:56:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:56:22 executing program 0: mlockall(0x3) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008000) fork() syz_open_procfs$userns(0x0, 0x0) 05:56:22 executing program 2: mlockall(0x6) mlockall(0x0) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mlockall(0x2) r0 = fork() sched_getscheduler(r0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/net\x00') 05:56:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x700000000000000}, 0x0) 05:56:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3528.167545] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:56:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:23 executing program 2: mlockall(0x7) mlockall(0x8) mlockall(0x3) r0 = fork() ptrace$pokeuser(0x6, r0, 0x0, 0x5) mlockall(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "a64cdc20"}, &(0x7f00000002c0)=0x28) getsockname$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:56:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:56:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf00000000000000}, 0x0) 05:56:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3529.168648] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3529.243880] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3529.273216] CPU: 0 PID: 6502 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3529.281033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3529.290386] Call Trace: [ 3529.292982] dump_stack+0x1fc/0x2ef [ 3529.296613] dump_header+0x15d/0xc3f [ 3529.300436] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3529.305542] ? ___ratelimit+0x319/0x590 [ 3529.309531] oom_kill_process.cold+0x10/0x692 [ 3529.314040] ? check_preemption_disabled+0x41/0x280 [ 3529.319063] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3529.324344] out_of_memory+0x1072/0x1390 [ 3529.328420] ? oom_killer_disable+0x270/0x270 [ 3529.332921] ? mutex_trylock+0x15f/0x1a0 [ 3529.336987] __alloc_pages_nodemask+0x23a2/0x2890 [ 3529.341941] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3529.346784] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3529.351987] ? mark_held_locks+0xf0/0xf0 [ 3529.356053] ? ____cache_alloc_node+0x156/0x1d0 [ 3529.360720] ? cache_grow_begin+0x64/0x8a0 [ 3529.364962] cache_grow_begin+0xa4/0x8a0 [ 3529.369031] fallback_alloc+0x213/0x2e0 [ 3529.373012] kmem_cache_alloc+0x1e4/0x370 [ 3529.377155] getname_flags+0xce/0x590 [ 3529.380973] user_path_at_empty+0x2a/0x50 [ 3529.385109] ksys_chdir+0x84/0x1d0 [ 3529.388643] ? __ia32_sys_access+0x70/0x70 [ 3529.392898] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3529.398246] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3529.403356] __x64_sys_chdir+0x2d/0x40 [ 3529.407233] do_syscall_64+0xf9/0x620 [ 3529.411042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3529.416224] RIP: 0033:0x465767 [ 3529.419413] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 50 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3529.438399] RSP: 002b:00007ffc396d5978 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 3529.446107] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000465767 [ 3529.453388] RDX: 0000000000000001 RSI: 0000000000545ed0 RDI: 00007ffc396d5a10 [ 3529.460653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000545ed0 [ 3529.467915] R10: 0000000001b42400 R11: 0000000000000246 R12: 0000000000000001 [ 3529.475180] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc396d5a50 [ 3529.594043] Mem-Info: [ 3529.596573] active_anon:279995 inactive_anon:981898 isolated_anon:0 [ 3529.596573] active_file:56 inactive_file:27 isolated_file:0 [ 3529.596573] unevictable:49805 dirty:0 writeback:24 unstable:0 [ 3529.596573] slab_reclaimable:20119 slab_unreclaimable:156479 [ 3529.596573] mapped:55130 shmem:21338 pagetables:74851 bounce:0 [ 3529.596573] free:25057 free_pcp:0 free_cma:0 [ 3529.663615] Node 0 active_anon:916312kB inactive_anon:654784kB active_file:44kB inactive_file:0kB unevictable:192744kB isolated(anon):0kB isolated(file):0kB mapped:188488kB dirty:0kB writeback:68kB shmem:42488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3529.995613] Node 1 active_anon:203604kB inactive_anon:3272804kB active_file:0kB inactive_file:36kB unevictable:6524kB isolated(anon):0kB isolated(file):0kB mapped:32068kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3530.294930] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:108kB writepending:0kB present:15992kB managed:15908kB mlocked:108kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3530.563401] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3530.620806] Node 0 DMA32 free:35440kB min:35996kB low:44992kB high:53988kB active_anon:914200kB inactive_anon:653312kB active_file:124kB inactive_file:0kB unevictable:192788kB writepending:0kB present:3129332kB managed:2763456kB mlocked:192788kB kernel_stack:22688kB pagetables:54120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3530.951447] lowmem_reserve[]: 0 0 1 1 1 [ 3530.990632] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3531.243891] lowmem_reserve[]: 0 0 0 0 0 [ 3531.285873] Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:203604kB inactive_anon:3272804kB active_file:12kB inactive_file:12kB unevictable:6528kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6528kB kernel_stack:78016kB pagetables:245380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3531.596897] lowmem_reserve[]: 0 0 0 0 0 [ 3531.637154] Node 0 DMA: 13*4kB (ME) 6*8kB (M) 13*16kB (ME) 9*32kB (ME) 2*64kB (ME) 4*128kB (ME) 2*256kB (ME) 2*512kB (ME) 4*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10964kB [ 3531.780484] Node 0 DMA32: 13*4kB (UM) 132*8kB (UM) 1379*16kB (UME) 418*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36548kB [ 3531.860777] nla_parse: 1 callbacks suppressed [ 3531.860787] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3531.913355] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3531.948146] Node 1 Normal: 129*4kB (UM) 496*8kB (UM) 664*16kB (UME) 1203*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53860kB [ 3532.002300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3532.048025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3532.056676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3532.078024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3532.091416] 23761 total pagecache pages [ 3532.095610] 0 pages in swap cache [ 3532.114075] Swap cache stats: add 0, delete 0, find 0/0 [ 3532.119735] Free swap = 0kB [ 3532.126888] Total swap = 0kB [ 3532.146598] 2097051 pages RAM [ 3532.163173] 0 pages HighMem/MovableOnly [ 3532.178821] 369648 pages reserved [ 3532.202554] 0 pages cma reserved [ 3532.206030] Out of memory (oom_kill_allocating_task): Kill process 6502 (syz-executor.3) score 0 or sacrifice child [ 3532.243481] Killed process 6502 (syz-executor.3) total-vm:93120kB, anon-rss:104kB, file-rss:34880kB, shmem-rss:0kB [ 3532.280354] oom_reaper: reaped process 6502 (syz-executor.3), now anon-rss:0kB, file-rss:34624kB, shmem-rss:0kB 05:56:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:28 executing program 0: mlockall(0x3) fork() r0 = fork() sched_getscheduler(r0) sched_rr_get_interval(r0, &(0x7f0000000040)) syz_open_procfs$userns(0x0, 0x0) [ 3534.318179] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3534.353644] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:29 executing program 2: mlockall(0x7) mlockall(0x3) fork() r0 = fork() syz_open_procfs$userns(r0, &(0x7f0000000000)) 05:56:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x9effffff00000000}, 0x0) 05:56:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) 05:56:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffff}, 0x0) [ 3534.585538] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3534.675010] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3534.730263] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3534.807926] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3536.269923] modprobe invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3536.354637] modprobe cpuset=/ mems_allowed=0-1 [ 3536.381367] CPU: 0 PID: 6552 Comm: modprobe Not tainted 4.19.205-syzkaller #0 [ 3536.388669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3536.398029] Call Trace: [ 3536.400622] dump_stack+0x1fc/0x2ef [ 3536.404261] dump_header+0x15d/0xc3f [ 3536.407987] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3536.413097] ? ___ratelimit+0x319/0x590 [ 3536.417080] oom_kill_process.cold+0x10/0x692 [ 3536.421587] ? check_preemption_disabled+0x41/0x280 [ 3536.426607] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3536.431870] out_of_memory+0x1072/0x1390 [ 3536.435992] ? oom_killer_disable+0x270/0x270 [ 3536.440519] ? mutex_trylock+0x15f/0x1a0 [ 3536.444582] __alloc_pages_nodemask+0x23a2/0x2890 [ 3536.449421] ? find_get_entry+0x4cd/0x8a0 [ 3536.453599] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3536.458441] alloc_pages_current+0x193/0x2a0 [ 3536.463302] filemap_fault+0x146e/0x2180 [ 3536.467355] ext4_filemap_fault+0x84/0xb0 [ 3536.471485] __do_fault+0x10b/0x4b0 [ 3536.475126] __handle_mm_fault+0x273b/0x41c0 [ 3536.479526] ? vm_insert_page+0x9c0/0x9c0 [ 3536.483677] ? check_preemption_disabled+0x41/0x280 [ 3536.488696] handle_mm_fault+0x436/0xb10 [ 3536.492766] __do_page_fault+0x68e/0xd60 [ 3536.496830] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3536.501849] ? spurious_fault+0x840/0x840 [ 3536.506085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3536.510966] ? page_fault+0x8/0x30 [ 3536.514511] page_fault+0x1e/0x30 [ 3536.517960] RIP: 0033:0x7fc5c2ea1814 [ 3536.521670] Code: Bad RIP value. [ 3536.525033] RSP: 002b:00007ffcefe4cbc0 EFLAGS: 00010202 [ 3536.530391] RAX: 000055be2c0ca200 RBX: 0000000000008000 RCX: 00007fc5c3187b00 [ 3536.537832] RDX: 000055be2c0ca200 RSI: 000055be2c0d2230 RDI: 0000000000000004 [ 3536.545099] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000008040 [ 3536.552378] R10: 0000000000000030 R11: 0000000000000246 R12: 0000000000000001 [ 3536.559644] R13: 0000000000000000 R14: 000055be2b2f1078 R15: 0005ba58f8bfe057 [ 3536.602973] Mem-Info: [ 3536.605698] active_anon:279941 inactive_anon:981915 isolated_anon:0 [ 3536.605698] active_file:5 inactive_file:59 isolated_file:27 [ 3536.605698] unevictable:48909 dirty:3 writeback:0 unstable:0 [ 3536.605698] slab_reclaimable:20281 slab_unreclaimable:157200 [ 3536.605698] mapped:55131 shmem:21338 pagetables:74854 bounce:0 [ 3536.605698] free:25132 free_pcp:265 free_cma:0 [ 3536.741717] Node 0 active_anon:916444kB inactive_anon:654856kB active_file:132kB inactive_file:56kB unevictable:190536kB isolated(anon):0kB isolated(file):104kB mapped:191388kB dirty:12kB writeback:0kB shmem:42488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3536.771864] Node 1 active_anon:203320kB inactive_anon:3272804kB active_file:0kB inactive_file:20kB unevictable:6300kB isolated(anon):0kB isolated(file):0kB mapped:29136kB dirty:0kB writeback:0kB shmem:42864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3536.800482] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:4kB inactive_file:0kB unevictable:16kB writepending:0kB present:15992kB managed:15908kB mlocked:16kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3536.828390] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3536.833785] Node 0 DMA32 free:35228kB min:35996kB low:44992kB high:53988kB active_anon:914288kB inactive_anon:653380kB active_file:0kB inactive_file:104kB unevictable:190528kB writepending:12kB present:3129332kB managed:2763456kB mlocked:190528kB kernel_stack:22976kB pagetables:54076kB bounce:0kB free_pcp:524kB local_pcp:20kB free_cma:0kB [ 3536.902675] lowmem_reserve[]: 0 0 1 1 1 [ 3536.915736] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3537.075994] lowmem_reserve[]: 0 0 0 0 0 [ 3537.111452] Node 1 Normal free:53868kB min:53876kB low:67344kB high:80812kB active_anon:203320kB inactive_anon:3272804kB active_file:0kB inactive_file:4kB unevictable:6300kB writepending:0kB present:4194304kB managed:4128248kB mlocked:6300kB kernel_stack:77696kB pagetables:245192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3537.400728] lowmem_reserve[]: 0 0 0 0 0 [ 3537.426427] Node 0 DMA: 18*4kB (UM) 12*8kB (UM) 16*16kB (UME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10984kB [ 3537.522540] Node 0 DMA32: 10*4kB (UME) 78*8kB (UM) 1394*16kB (UE) 407*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35992kB [ 3537.602042] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3537.696619] Node 1 Normal: 99*4kB (UME) 552*8kB (UME) 632*16kB (UME) 1212*32kB (UME) 3*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53900kB [ 3537.820493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3537.846560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3537.898418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3537.988272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3538.015095] 24171 total pagecache pages [ 3538.062468] 0 pages in swap cache [ 3538.065962] Swap cache stats: add 0, delete 0, find 0/0 [ 3538.103479] Free swap = 0kB [ 3538.106783] Total swap = 0kB [ 3538.133016] 2097051 pages RAM [ 3538.136147] 0 pages HighMem/MovableOnly [ 3538.147766] 369648 pages reserved [ 3538.151238] 0 pages cma reserved [ 3538.154606] Out of memory (oom_kill_allocating_task): Kill process 6552 (modprobe) score 0 or sacrifice child [ 3538.187543] Killed process 6552 (modprobe) total-vm:4304kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3538.209068] oom_reaper: reaped process 6552 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:56:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xa14d000000000000}, 0x0) 05:56:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3539.005762] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:33 executing program 2: mlockall(0x6) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) [ 3539.061500] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 05:56:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:34 executing program 0: mlockall(0x3) mlockall(0x4) fork() timer_create(0x5, &(0x7f0000000100)={0x0, 0x12, 0x2, @thr={&(0x7f0000000000)="ccc6c0ad13e0f66d7372e3de2ee254ef3c4ae5b0bf8460f7581e50dca6b6eff5473076887bdbde858688978ab32d0b898b00466d6c7a6e6e1704e8b99fab2e63729e52a12b9e9919a406c3edb07311383735c7e3316dd6002c1769641cb405e4c5484e6f35e6c278f2b2d58d4a481957f7f587fe41d42118b3c88a2492221922421f57f2143d1d6ecdff5a5c5a441959b2480b60e089aa6c247bb077b55515f5b90d39f3f265", &(0x7f00000000c0)="c7befa2e20be9b3bd03e41cdd545cd25076283e2fa56a5ae8dda0062826918a0462c7ade"}}, &(0x7f0000000140)) r0 = fork() syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/pid\x00') ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x7, 0xffffffffffffffad) syz_open_procfs$userns(0x0, 0x0) [ 3539.606444] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3539.635780] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3539.799688] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3539.879842] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3539.934694] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3539.967596] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3541.638530] modprobe invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3541.715001] modprobe cpuset=/ mems_allowed=0-1 [ 3541.756015] CPU: 1 PID: 6590 Comm: modprobe Not tainted 4.19.205-syzkaller #0 [ 3541.763404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3541.772758] Call Trace: [ 3541.775356] dump_stack+0x1fc/0x2ef [ 3541.778994] dump_header+0x15d/0xc3f [ 3541.782719] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3541.787827] ? ___ratelimit+0x319/0x590 [ 3541.791809] oom_kill_process.cold+0x10/0x692 [ 3541.796311] ? check_preemption_disabled+0x41/0x280 [ 3541.801336] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3541.806625] out_of_memory+0x1072/0x1390 [ 3541.810697] ? oom_killer_disable+0x270/0x270 [ 3541.815198] ? mutex_trylock+0x15f/0x1a0 [ 3541.819266] __alloc_pages_nodemask+0x23a2/0x2890 [ 3541.824135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3541.828983] ? mark_held_locks+0xf0/0xf0 [ 3541.833071] alloc_pages_current+0x193/0x2a0 [ 3541.837484] ? validate_mm+0x32b/0x610 [ 3541.841377] __pmd_alloc+0x37/0x440 [ 3541.845025] __handle_mm_fault+0x1760/0x41c0 [ 3541.849446] ? vm_insert_page+0x9c0/0x9c0 [ 3541.853613] ? check_preemption_disabled+0x41/0x280 [ 3541.858644] handle_mm_fault+0x436/0xb10 [ 3541.862713] __do_page_fault+0x68e/0xd60 [ 3541.866874] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3541.871905] ? spurious_fault+0x840/0x840 [ 3541.876057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3541.880921] page_fault+0x1e/0x30 [ 3541.884380] RIP: 0010:__clear_user+0x40/0x70 [ 3541.888790] Code: b1 71 89 e8 32 6f 99 f9 0f 1f 00 48 89 d8 48 c1 eb 03 48 89 ef 83 e0 07 48 89 d9 48 85 c9 74 19 66 2e 0f 1f 84 00 00 00 00 00 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 3541.907693] RSP: 0018:ffff888034ba7b88 EFLAGS: 00010202 [ 3541.913061] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 3541.920336] RDX: 0000000000000000 RSI: ffffffff87f1806e RDI: 00007fdac5c74fc0 [ 3541.927607] RBP: 00007fdac5c74fc0 R08: ffffffff8cd244f0 R09: 0000000000000000 [ 3541.934875] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fdac5c74fc0 [ 3541.942146] R13: 00007ffffffff000 R14: 0000000000000000 R15: ffff8880a3008d40 [ 3541.949432] ? __clear_user+0x1e/0x70 [ 3541.953244] ? __clear_user+0x1e/0x70 [ 3541.957043] clear_user+0xa6/0xe0 [ 3541.960501] load_elf_binary+0x464b/0x5050 [ 3541.964762] ? elf_core_dump+0x4c10/0x4c10 [ 3541.969000] ? lock_acquire+0x170/0x3c0 [ 3541.972989] ? search_binary_handler.part.0+0x108/0x4e0 [ 3541.978363] ? ima_file_mmap+0x130/0x130 [ 3541.982434] search_binary_handler.part.0+0xf9/0x4e0 [ 3541.987559] __do_execve_file+0x1357/0x2360 [ 3541.991885] ? open_exec+0x70/0x70 [ 3541.995423] ? lock_acquire+0x170/0x3c0 [ 3541.999398] ? check_preemption_disabled+0x41/0x280 [ 3542.004427] do_execve+0x35/0x50 [ 3542.007810] call_usermodehelper_exec_async+0x50e/0x6a0 [ 3542.013175] ? umh_complete+0x90/0x90 [ 3542.016978] ret_from_fork+0x24/0x30 [ 3542.245992] Mem-Info: [ 3542.248573] active_anon:280082 inactive_anon:981898 isolated_anon:0 [ 3542.248573] active_file:18 inactive_file:0 isolated_file:25 [ 3542.248573] unevictable:49025 dirty:0 writeback:0 unstable:0 [ 3542.248573] slab_reclaimable:20382 slab_unreclaimable:157047 [ 3542.248573] mapped:55143 shmem:21338 pagetables:74872 bounce:0 [ 3542.248573] free:25174 free_pcp:0 free_cma:0 [ 3542.282492] Node 0 active_anon:917044kB inactive_anon:654784kB active_file:68kB inactive_file:0kB unevictable:190112kB isolated(anon):0kB isolated(file):0kB mapped:191716kB dirty:0kB writeback:0kB shmem:42484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3542.315130] Node 1 active_anon:203284kB inactive_anon:3272808kB active_file:4kB inactive_file:4kB unevictable:5988kB isolated(anon):0kB isolated(file):0kB mapped:28856kB dirty:0kB writeback:0kB shmem:42868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3542.596504] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3542.889720] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3542.894785] Node 0 DMA32 free:35964kB min:35996kB low:44992kB high:53988kB active_anon:914888kB inactive_anon:653308kB active_file:104kB inactive_file:60kB unevictable:190168kB writepending:0kB present:3129332kB managed:2763456kB mlocked:190168kB kernel_stack:22880kB pagetables:54064kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3543.250474] lowmem_reserve[]: 0 0 1 1 1 [ 3543.254489] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3543.493518] lowmem_reserve[]: 0 0 0 0 0 [ 3543.538707] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:203284kB inactive_anon:3272808kB active_file:8kB inactive_file:0kB unevictable:5988kB writepending:0kB present:4194304kB managed:4128248kB mlocked:5988kB kernel_stack:77728kB pagetables:245276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3543.833249] lowmem_reserve[]: 0 0 0 0 0 [ 3543.868609] Node 0 DMA: 22*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10976kB [ 3543.908588] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3543.928955] Node 0 DMA32: 83*4kB (UME) 291*8kB (UME) 1416*16kB (UME) 395*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38084kB [ 3543.944260] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 05:56:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3544.006078] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3544.057200] Node 1 Normal: 1*4kB (E) 693*8kB (UM) 587*16kB (UME) 1214*32kB (UME) 3*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53980kB 05:56:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xf0ffffff00000000}, 0x0) 05:56:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3544.114556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 05:56:38 executing program 2: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r0}, 0x10) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)={0x2, 0x2}) mlockall(0x3) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r1}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140)=0x1, 0x4) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'dummy0\x00'}) fork() r3 = fork() r4 = fork() sched_getscheduler(r4) syz_open_procfs$userns(r3, &(0x7f0000000180)) [ 3544.157623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3544.232481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3544.249422] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3544.286039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3544.305433] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3544.327848] 24849 total pagecache pages [ 3544.341437] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3544.349839] 0 pages in swap cache [ 3544.377008] Swap cache stats: add 0, delete 0, find 0/0 05:56:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffff}, 0x0) [ 3544.391517] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3544.399591] Free swap = 0kB [ 3544.455929] Total swap = 0kB [ 3544.520101] 2097051 pages RAM [ 3544.534016] 0 pages HighMem/MovableOnly [ 3544.597367] 369648 pages reserved [ 3544.618902] 0 pages cma reserved [ 3544.637032] Out of memory (oom_kill_allocating_task): Kill process 6590 (modprobe) score 0 or sacrifice child [ 3544.677689] Killed process 6590 (modprobe) total-vm:432kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 3544.696015] oom_reaper: reaped process 6590 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3545.591978] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 3545.644175] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3545.682542] CPU: 0 PID: 4699 Comm: systemd-udevd Not tainted 4.19.205-syzkaller #0 [ 3545.690280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3545.699634] Call Trace: [ 3545.702236] dump_stack+0x1fc/0x2ef [ 3545.705873] dump_header+0x15d/0xc3f [ 3545.709639] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3545.714749] ? ___ratelimit+0x319/0x590 [ 3545.718751] oom_kill_process.cold+0x10/0x692 [ 3545.723254] ? lock_downgrade+0x720/0x720 [ 3545.727408] ? check_preemption_disabled+0x41/0x280 [ 3545.732429] out_of_memory+0x34d/0x1390 [ 3545.736414] ? oom_killer_disable+0x270/0x270 [ 3545.740913] ? mutex_trylock+0x15f/0x1a0 [ 3545.744976] __alloc_pages_nodemask+0x23a2/0x2890 [ 3545.749864] ? find_get_entry+0x4cd/0x8a0 [ 3545.754022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3545.758892] alloc_pages_current+0x193/0x2a0 [ 3545.763310] filemap_fault+0x146e/0x2180 [ 3545.767385] ext4_filemap_fault+0x84/0xb0 [ 3545.771537] __do_fault+0x10b/0x4b0 [ 3545.775170] __handle_mm_fault+0x273b/0x41c0 [ 3545.779585] ? vm_insert_page+0x9c0/0x9c0 [ 3545.783736] ? lock_downgrade+0x720/0x720 [ 3545.787899] ? check_preemption_disabled+0x41/0x280 [ 3545.792924] handle_mm_fault+0x436/0xb10 [ 3545.797026] __do_page_fault+0x68e/0xd60 [ 3545.801097] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3545.806117] ? spurious_fault+0x840/0x840 [ 3545.810267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3545.815115] ? page_fault+0x8/0x30 [ 3545.818663] page_fault+0x1e/0x30 [ 3545.822116] RIP: 0033:0x7faec83aaf10 [ 3545.825831] Code: Bad RIP value. [ 3545.829190] RSP: 002b:00007ffca3fc6a38 EFLAGS: 00010202 [ 3545.834548] RAX: 0000000000000000 RBX: 0000561baa6d5cc0 RCX: 0000000000000000 [ 3545.841823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3545.849098] RBP: 000000000000125b R08: 0000561baa6e5ca3 R09: 00000000000001e0 [ 3545.856368] R10: 0000000000000000 R11: 0000561baa6e5ab0 R12: 0000561baa6d1010 [ 3545.863642] R13: 0000561baa6d1010 R14: 0000561baa6e0720 R15: 00007ffca3fc6af0 [ 3545.893105] Mem-Info: [ 3545.895569] active_anon:280072 inactive_anon:981898 isolated_anon:0 [ 3545.895569] active_file:9 inactive_file:11 isolated_file:5 [ 3545.895569] unevictable:49135 dirty:0 writeback:0 unstable:0 [ 3545.895569] slab_reclaimable:20395 slab_unreclaimable:156991 [ 3545.895569] mapped:55155 shmem:21338 pagetables:74841 bounce:0 [ 3545.895569] free:25114 free_pcp:186 free_cma:0 [ 3545.934344] Node 0 active_anon:916928kB inactive_anon:655076kB active_file:4012kB inactive_file:116kB unevictable:179584kB isolated(anon):0kB isolated(file):20kB mapped:187308kB dirty:0kB writeback:0kB shmem:42476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3545.963690] Node 1 active_anon:203360kB inactive_anon:3272816kB active_file:24kB inactive_file:28kB unevictable:4356kB isolated(anon):0kB isolated(file):0kB mapped:29312kB dirty:0kB writeback:0kB shmem:42876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3545.992202] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3546.021593] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3546.027376] Node 0 DMA32 free:40076kB min:35996kB low:44992kB high:53988kB active_anon:914772kB inactive_anon:653400kB active_file:4212kB inactive_file:216kB unevictable:179584kB writepending:0kB present:3129332kB managed:2763456kB mlocked:179552kB kernel_stack:22752kB pagetables:53788kB bounce:0kB free_pcp:1640kB local_pcp:364kB free_cma:0kB [ 3546.096861] lowmem_reserve[]: 0 0 1 1 1 [ 3546.105912] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3546.151145] lowmem_reserve[]: 0 0 0 0 0 [ 3546.155189] Node 1 Normal free:54372kB min:53876kB low:67344kB high:80812kB active_anon:203360kB inactive_anon:3272816kB active_file:528kB inactive_file:468kB unevictable:5364kB writepending:0kB present:4194304kB managed:4128248kB mlocked:5364kB kernel_stack:77728kB pagetables:245280kB bounce:0kB free_pcp:760kB local_pcp:104kB free_cma:0kB [ 3546.196760] lowmem_reserve[]: 0 0 0 0 0 [ 3546.202667] Node 0 DMA: 23*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10980kB [ 3546.219409] Node 0 DMA32: 305*4kB (UME) 210*8kB (UM) 1349*16kB (UE) 408*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37540kB [ 3546.233290] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3546.244506] Node 1 Normal: 142*4kB (UME) 588*8kB (UM) 624*16kB (UME) 1214*32kB (UME) 3*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54296kB [ 3546.259499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3546.315832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3546.327284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3546.336730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3546.350539] 22776 total pagecache pages [ 3546.355023] 0 pages in swap cache [ 3546.360694] Swap cache stats: add 0, delete 0, find 0/0 [ 3546.366841] Free swap = 0kB [ 3546.370370] Total swap = 0kB [ 3546.373758] 2097051 pages RAM [ 3546.381018] 0 pages HighMem/MovableOnly [ 3546.385065] 369648 pages reserved [ 3546.389264] 0 pages cma reserved [ 3546.393251] Out of memory: Kill process 6013 (syz-executor.0) score 1010 or sacrifice child [ 3546.411549] Killed process 6013 (syz-executor.0) total-vm:93648kB, anon-rss:37028kB, file-rss:34904kB, shmem-rss:0kB [ 3547.180015] syz-executor.2 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3547.214245] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3547.227615] CPU: 0 PID: 6614 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3547.235445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3547.244797] Call Trace: [ 3547.247400] dump_stack+0x1fc/0x2ef [ 3547.251050] dump_header+0x15d/0xc3f [ 3547.254804] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3547.259914] ? ___ratelimit+0x319/0x590 [ 3547.263899] oom_kill_process.cold+0x10/0x692 [ 3547.268403] ? check_preemption_disabled+0x41/0x280 [ 3547.273430] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3547.278713] out_of_memory+0x1072/0x1390 [ 3547.282792] ? oom_killer_disable+0x270/0x270 [ 3547.287300] ? mutex_trylock+0x15f/0x1a0 [ 3547.291370] __alloc_pages_nodemask+0x23a2/0x2890 [ 3547.296241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3547.301093] ? __lock_acquire+0x6de/0x3ff0 [ 3547.305341] ? mark_held_locks+0xf0/0xf0 [ 3547.309418] alloc_pages_vma+0xf2/0x780 [ 3547.313399] do_anonymous_page+0x7c2/0x1be0 [ 3547.317729] ? __pte_alloc+0x340/0x340 [ 3547.321616] ? __put_compound_page+0xc0/0xc0 [ 3547.326032] ? mark_held_locks+0xf0/0xf0 [ 3547.330103] __handle_mm_fault+0x227a/0x41c0 [ 3547.334523] ? vm_insert_page+0x9c0/0x9c0 [ 3547.338689] ? check_preemption_disabled+0x41/0x280 [ 3547.343714] handle_mm_fault+0x436/0xb10 [ 3547.347784] __get_user_pages+0x6f0/0x1710 [ 3547.352028] ? follow_page_mask+0x1d00/0x1d00 [ 3547.356528] ? check_preemption_disabled+0x41/0x280 [ 3547.361571] populate_vma_page_range+0x200/0x290 [ 3547.366333] __mm_populate+0x1ea/0x350 [ 3547.370228] ? populate_vma_page_range+0x290/0x290 [ 3547.375158] ? do_mlock+0x6b0/0x6b0 [ 3547.378784] ? security_capable+0x8f/0xc0 [ 3547.382940] __se_sys_mlockall+0x362/0x4e0 [ 3547.387176] do_syscall_64+0xf9/0x620 [ 3547.390983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3547.396169] RIP: 0033:0x4665f9 [ 3547.399368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3547.418359] RSP: 002b:00007fa965c69188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3547.426076] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3547.433343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3547.440617] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3547.447886] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3547.455153] R13: 00007fff029cf12f R14: 00007fa965c69300 R15: 0000000000022000 [ 3547.569263] Mem-Info: [ 3547.571739] active_anon:280057 inactive_anon:981851 isolated_anon:0 [ 3547.571739] active_file:1 inactive_file:21 isolated_file:0 [ 3547.571739] unevictable:49472 dirty:0 writeback:0 unstable:0 [ 3547.571739] slab_reclaimable:20384 slab_unreclaimable:156854 [ 3547.571739] mapped:54135 shmem:21338 pagetables:74777 bounce:0 [ 3547.571739] free:25124 free_pcp:0 free_cma:0 [ 3547.641784] Node 0 active_anon:916880kB inactive_anon:654588kB active_file:0kB inactive_file:64kB unevictable:189876kB isolated(anon):0kB isolated(file):0kB mapped:187228kB dirty:0kB writeback:0kB shmem:42476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3547.729575] Node 1 active_anon:203348kB inactive_anon:3272816kB active_file:16kB inactive_file:20kB unevictable:8012kB isolated(anon):0kB isolated(file):0kB mapped:29312kB dirty:0kB writeback:0kB shmem:42876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3547.845243] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3547.895771] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3547.933211] Node 0 DMA32 free:35644kB min:35996kB low:44992kB high:53988kB active_anon:914724kB inactive_anon:653112kB active_file:88kB inactive_file:0kB unevictable:189880kB writepending:0kB present:3129332kB managed:2763456kB mlocked:189880kB kernel_stack:22720kB pagetables:53688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3548.066667] lowmem_reserve[]: 0 0 1 1 1 [ 3548.070698] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3548.190128] lowmem_reserve[]: 0 0 0 0 0 [ 3548.194155] Node 1 Normal free:53568kB min:53876kB low:67344kB high:80812kB active_anon:203348kB inactive_anon:3272816kB active_file:28kB inactive_file:8kB unevictable:8012kB writepending:0kB present:4194304kB managed:4128248kB mlocked:8012kB kernel_stack:77696kB pagetables:245272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3548.237277] lowmem_reserve[]: 0 0 0 0 0 [ 3548.241288] Node 0 DMA: 23*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10980kB [ 3548.279570] Node 0 DMA32: 34*4kB (UM) 183*8kB (UM) 1352*16kB (UE) 410*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36352kB [ 3548.330797] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3548.376828] Node 1 Normal: 72*4kB (UE) 528*8kB (UM) 624*16kB (UME) 1215*32kB (UME) 3*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53568kB [ 3548.454813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3548.499245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3548.513028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3548.522098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3548.533435] 22715 total pagecache pages [ 3548.537908] 0 pages in swap cache [ 3548.541357] Swap cache stats: add 0, delete 0, find 0/0 [ 3548.549270] Free swap = 0kB [ 3548.552270] Total swap = 0kB [ 3548.555276] 2097051 pages RAM [ 3548.558432] 0 pages HighMem/MovableOnly [ 3548.562395] 369648 pages reserved [ 3548.565821] 0 pages cma reserved [ 3548.569271] Out of memory (oom_kill_allocating_task): Kill process 6614 (syz-executor.2) score 0 or sacrifice child [ 3548.579926] Killed process 6614 (syz-executor.2) total-vm:93252kB, anon-rss:22472kB, file-rss:40196kB, shmem-rss:0kB [ 3548.592046] oom_reaper: reaped process 6614 (syz-executor.2), now anon-rss:22472kB, file-rss:40192kB, shmem-rss:0kB 05:56:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3549.927478] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3549.965882] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3549.983622] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3550.023062] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xffffff7f00000000}, 0x0) 05:56:44 executing program 2: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "a64cdc20"}, &(0x7f00000002c0)=0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x2, 0x3, 0x8, 0x40, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x40) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x8, 0x2, 0x1}, @map, @map={0x18, 0xb, 0x1, 0x0, r2}, @map={0x18, 0x9, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x3, 0x16, &(0x7f0000000200)=""/22, 0x40f00, 0x3, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x9, 0x40}, 0x10, 0x2b935, r4}, 0x78) 05:56:44 executing program 0: mlockall(0x2) fork() r0 = fork() r1 = fork() sched_getscheduler(r1) sched_getscheduler(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) syz_open_procfs$userns(0x0, 0x0) 05:56:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:56:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3550.262144] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3550.347202] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3550.383565] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:56:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3550.428246] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3550.544144] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0xfffffffffffff000}, 0x0) 05:56:45 executing program 0: mlockall(0x3) fork() fork() r0 = fork() sched_getscheduler(r0) r1 = fork() syz_open_procfs$userns(r1, 0x0) 05:56:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffff}, 0x0) [ 3550.595018] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) [ 3551.530171] syz-executor.0 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3551.583499] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3551.605395] CPU: 0 PID: 6677 Comm: syz-executor.0 Not tainted 4.19.205-syzkaller #0 [ 3551.613215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3551.622569] Call Trace: [ 3551.625167] dump_stack+0x1fc/0x2ef [ 3551.628834] dump_header+0x15d/0xc3f [ 3551.632560] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3551.637667] ? ___ratelimit+0x319/0x590 [ 3551.641648] oom_kill_process.cold+0x10/0x692 [ 3551.646150] ? check_preemption_disabled+0x41/0x280 [ 3551.651173] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3551.656459] out_of_memory+0x1072/0x1390 [ 3551.660535] ? oom_killer_disable+0x270/0x270 [ 3551.665036] ? mutex_trylock+0x15f/0x1a0 [ 3551.669106] __alloc_pages_nodemask+0x23a2/0x2890 [ 3551.673971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3551.678819] ? __lock_acquire+0x6de/0x3ff0 [ 3551.683071] ? mark_held_locks+0xf0/0xf0 [ 3551.687152] alloc_pages_vma+0xf2/0x780 [ 3551.691135] do_anonymous_page+0x7c2/0x1be0 [ 3551.695464] ? __pte_alloc+0x340/0x340 [ 3551.699349] ? __put_compound_page+0xc0/0xc0 [ 3551.703766] ? mark_held_locks+0xf0/0xf0 [ 3551.707838] __handle_mm_fault+0x227a/0x41c0 [ 3551.712252] ? vm_insert_page+0x9c0/0x9c0 [ 3551.716416] ? check_preemption_disabled+0x41/0x280 [ 3551.721442] handle_mm_fault+0x436/0xb10 [ 3551.725512] __get_user_pages+0x6f0/0x1710 [ 3551.729762] ? follow_page_mask+0x1d00/0x1d00 [ 3551.734280] populate_vma_page_range+0x200/0x290 [ 3551.739042] __mm_populate+0x1ea/0x350 [ 3551.742938] ? populate_vma_page_range+0x290/0x290 [ 3551.747866] ? do_mlock+0x6b0/0x6b0 [ 3551.751499] ? security_capable+0x8f/0xc0 [ 3551.755656] __se_sys_mlockall+0x362/0x4e0 [ 3551.759896] do_syscall_64+0xf9/0x620 [ 3551.763706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3551.768890] RIP: 0033:0x4665f9 [ 3551.772084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3551.790984] RSP: 002b:00007fafb8c8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3551.798691] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3551.805951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3551.813202] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3551.820718] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3551.827973] R13: 00007ffd8772358f R14: 00007fafb8c8c300 R15: 0000000000022000 [ 3551.846505] Mem-Info: [ 3551.848950] active_anon:280095 inactive_anon:981933 isolated_anon:0 [ 3551.848950] active_file:20 inactive_file:7 isolated_file:0 [ 3551.848950] unevictable:49060 dirty:18 writeback:5 unstable:0 [ 3551.848950] slab_reclaimable:20426 slab_unreclaimable:156905 [ 3551.848950] mapped:55215 shmem:21338 pagetables:75034 bounce:0 [ 3551.848950] free:25110 free_pcp:0 free_cma:0 [ 3551.891801] Node 0 active_anon:916936kB inactive_anon:654908kB active_file:60kB inactive_file:60kB unevictable:192236kB isolated(anon):0kB isolated(file):0kB mapped:190408kB dirty:36kB writeback:0kB shmem:42480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3551.927433] Node 1 active_anon:203288kB inactive_anon:3272824kB active_file:0kB inactive_file:4kB unevictable:4172kB isolated(anon):0kB isolated(file):0kB mapped:30324kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3551.955476] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3552.081011] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3552.086081] Node 0 DMA32 free:35864kB min:35996kB low:44992kB high:53988kB active_anon:914780kB inactive_anon:653432kB active_file:60kB inactive_file:60kB unevictable:192236kB writepending:36kB present:3129332kB managed:2763456kB mlocked:192236kB kernel_stack:22944kB pagetables:54272kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 3552.141540] lowmem_reserve[]: 0 0 1 1 1 [ 3552.145567] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3552.191279] lowmem_reserve[]: 0 0 0 0 0 [ 3552.195296] Node 1 Normal free:53744kB min:53876kB low:67344kB high:80812kB active_anon:203288kB inactive_anon:3272824kB active_file:0kB inactive_file:4kB unevictable:4172kB writepending:0kB present:4194304kB managed:4128248kB mlocked:4172kB kernel_stack:77792kB pagetables:245280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3552.248177] lowmem_reserve[]: 0 0 0 0 0 [ 3552.252187] Node 0 DMA: 23*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10980kB [ 3552.272607] Node 0 DMA32: 1*4kB (E) 93*8kB (UM) 1374*16kB (UE) 404*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35660kB [ 3552.300852] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3552.315289] Node 1 Normal: 96*4kB (UM) 772*8kB (UME) 511*16kB (UM) 1213*32kB (UME) 3*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53744kB [ 3552.346073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3552.355866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3552.374769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3552.383927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3552.395354] 23748 total pagecache pages [ 3552.402193] 0 pages in swap cache [ 3552.405997] Swap cache stats: add 0, delete 0, find 0/0 [ 3552.422583] Free swap = 0kB [ 3552.425851] Total swap = 0kB [ 3552.433665] 2097051 pages RAM [ 3552.460347] 0 pages HighMem/MovableOnly [ 3552.464512] 369648 pages reserved [ 3552.472724] 0 pages cma reserved [ 3552.480892] Out of memory (oom_kill_allocating_task): Kill process 6677 (syz-executor.0) score 0 or sacrifice child [ 3552.501162] Killed process 6673 (syz-executor.0) total-vm:93252kB, anon-rss:8752kB, file-rss:39228kB, shmem-rss:0kB [ 3552.513027] oom_reaper: reaped process 6673 (syz-executor.0), now anon-rss:8760kB, file-rss:40192kB, shmem-rss:0kB [ 3553.188307] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3553.272371] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3553.304438] CPU: 1 PID: 8113 Comm: syz-fuzzer Not tainted 4.19.205-syzkaller #0 [ 3553.311907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3553.321257] Call Trace: [ 3553.323868] dump_stack+0x1fc/0x2ef [ 3553.327507] dump_header+0x15d/0xc3f [ 3553.331285] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3553.336392] ? ___ratelimit+0x319/0x590 [ 3553.340372] oom_kill_process.cold+0x10/0x692 [ 3553.344875] ? check_preemption_disabled+0x41/0x280 [ 3553.350009] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3553.355292] out_of_memory+0x1072/0x1390 [ 3553.359549] ? oom_killer_disable+0x270/0x270 [ 3553.364047] ? mutex_trylock+0x15f/0x1a0 [ 3553.368117] __alloc_pages_nodemask+0x23a2/0x2890 [ 3553.372967] ? find_get_entry+0x4cd/0x8a0 [ 3553.377123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3553.381993] alloc_pages_current+0x193/0x2a0 [ 3553.386402] filemap_fault+0x146e/0x2180 [ 3553.390473] ext4_filemap_fault+0x84/0xb0 [ 3553.394625] __do_fault+0x10b/0x4b0 [ 3553.398262] __handle_mm_fault+0x273b/0x41c0 [ 3553.402670] ? vm_insert_page+0x9c0/0x9c0 [ 3553.406903] ? __fget+0x356/0x510 [ 3553.410368] ? check_preemption_disabled+0x41/0x280 [ 3553.415399] handle_mm_fault+0x436/0xb10 [ 3553.419470] __do_page_fault+0x68e/0xd60 [ 3553.423538] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3553.428677] ? spurious_fault+0x840/0x840 [ 3553.432830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3553.437678] ? page_fault+0x8/0x30 [ 3553.441222] page_fault+0x1e/0x30 [ 3553.444669] RIP: 0033:0x432352 [ 3553.447860] Code: Bad RIP value. [ 3553.451221] RSP: 002b:000000c0000397f8 EFLAGS: 00010246 [ 3553.456581] RAX: 0000000000000000 RBX: 000000000000022e RCX: 000000000046e380 [ 3553.463852] RDX: 0000000000000080 RSI: 000000c000039840 RDI: 0000000000000003 [ 3553.471119] RBP: 000000c000039e40 R08: 0000000000000000 R09: 0000000000000000 [ 3553.478481] R10: 000000000000022e R11: 0000000000000246 R12: 0000000000000003 [ 3553.485748] R13: 000000c000000f00 R14: 0000000000000004 R15: 0000000000000000 [ 3554.146186] Mem-Info: [ 3554.148647] active_anon:280056 inactive_anon:981940 isolated_anon:0 [ 3554.148647] active_file:38 inactive_file:672 isolated_file:12 [ 3554.148647] unevictable:48443 dirty:0 writeback:0 unstable:0 [ 3554.148647] slab_reclaimable:20427 slab_unreclaimable:156666 [ 3554.148647] mapped:55196 shmem:21338 pagetables:74901 bounce:0 [ 3554.148647] free:25163 free_pcp:0 free_cma:0 [ 3554.211062] Node 0 active_anon:916936kB inactive_anon:654948kB active_file:2948kB inactive_file:2076kB unevictable:181236kB isolated(anon):0kB isolated(file):48kB mapped:188612kB dirty:0kB writeback:0kB shmem:42480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3554.241760] Node 1 active_anon:203288kB inactive_anon:3272812kB active_file:108kB inactive_file:60kB unevictable:2336kB isolated(anon):0kB isolated(file):0kB mapped:29072kB dirty:0kB writeback:0kB shmem:42872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3554.277368] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3554.316325] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3554.321409] Node 0 DMA32 free:37916kB min:35996kB low:44992kB high:53988kB active_anon:914780kB inactive_anon:653876kB active_file:3072kB inactive_file:2496kB unevictable:181652kB writepending:0kB present:3129332kB managed:2763456kB mlocked:181452kB kernel_stack:22816kB pagetables:54176kB bounce:0kB free_pcp:1820kB local_pcp:1272kB free_cma:0kB [ 3554.356686] lowmem_reserve[]: 0 0 1 1 1 [ 3554.356707] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3554.356733] lowmem_reserve[]: 0 0 0 0 0 [ 3554.356750] Node 1 Normal free:56356kB min:53876kB low:67344kB high:80812kB active_anon:203288kB inactive_anon:3272812kB active_file:140kB inactive_file:40kB unevictable:2520kB writepending:0kB present:4194304kB managed:4128248kB mlocked:2408kB kernel_stack:77792kB pagetables:245280kB bounce:0kB free_pcp:1628kB local_pcp:1468kB free_cma:0kB [ 3554.356779] lowmem_reserve[]: 0 0 0 0 0 [ 3554.356795] Node 0 DMA: 23*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10980kB [ 3554.606220] Node 0 DMA32: 512*4kB (UME) 94*8kB (UME) 1294*16kB (UME) 411*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36656kB [ 3554.643578] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3554.666393] Node 1 Normal: 54*4kB (ME) 929*8kB (UM) 723*16kB (UM) 1213*32kB (UME) 4*64kB (UE) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58288kB [ 3554.697219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3554.720448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3554.760239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3554.781212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3554.820355] 24472 total pagecache pages [ 3554.824444] 0 pages in swap cache [ 3554.846295] Swap cache stats: add 0, delete 0, find 0/0 [ 3554.851675] Free swap = 0kB [ 3554.854690] Total swap = 0kB [ 3554.880697] 2097051 pages RAM [ 3554.883828] 0 pages HighMem/MovableOnly [ 3554.901061] 369648 pages reserved [ 3554.916101] 0 pages cma reserved [ 3554.919533] Out of memory (oom_kill_allocating_task): Kill process 8113 (syz-fuzzer) score 0 or sacrifice child [ 3554.946728] Killed process 6001 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:376kB, shmem-rss:0kB [ 3554.968041] oom_reaper: reaped process 6001 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:56:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="60007fff", @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:50 executing program 2: mlockall(0x7) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)="f30f73", 0x3) mlockall(0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="736563757269747900000000000000000000001000000000000000000000000004000000a64cee208778e83e7ec085e22aa602287a77916c8327f377ed9cade1"], &(0x7f00000002c0)=0x28) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x341002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@broadcast}}, {{@in=@multicast1}}}, &(0x7f0000000240)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x15, 0x3f, 0x6, 0x0, 0x880, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x0, 0x4, 0x2}, 0x40) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) 05:56:50 executing program 0: mlockall(0x3) fork() getgroups(0x3, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00, 0xee00]) syz_open_procfs$userns(0x0, 0x0) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0xb6, 0x800}, {0x1, 0x3f, 0x800}, {0x1, 0x20, 0x1000}, {0x4, 0x4, 0x2000}, {0x4, 0x5}, {0x3, 0x3, 0x1000}, {0x0, 0x716}, {0x1, 0x9c, 0x800}, {0x0, 0x8}], 0x9) 05:56:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x2}, 0x0) 05:56:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) [ 3555.633880] nla_parse: 4 callbacks suppressed [ 3555.633889] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3555.685896] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3555.787162] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:50 executing program 3: mlockall(0x7) mlockall(0x3) fork() syz_open_procfs$userns(0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "a64cdc20"}, &(0x7f00000002c0)=0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x2, 0x3, 0x8, 0x40, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x40) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='lock_acquire\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x8, 0x2, 0x1}, @map, @map={0x18, 0xb, 0x1, 0x0, r2}, @map={0x18, 0x9, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x3, 0x16, &(0x7f0000000200)=""/22, 0x40f00, 0x3, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x9, 0x40}, 0x10, 0x2b935, r4}, 0x78) 05:56:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf250300000005"], 0x60}}, 0x0) 05:56:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x3}, 0x0) [ 3555.938611] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3555.989665] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3556.024504] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3556.068261] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:56:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042dbd7000fcdbdf2503"], 0x60}}, 0x0) 05:56:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x7}, 0x0) [ 3556.248172] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3556.291732] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3556.886925] syz-executor.3 invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3556.900323] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3556.905657] CPU: 0 PID: 6744 Comm: syz-executor.3 Not tainted 4.19.205-syzkaller #0 [ 3556.913483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3556.922837] Call Trace: [ 3556.925434] dump_stack+0x1fc/0x2ef [ 3556.929072] dump_header+0x15d/0xc3f [ 3556.932791] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3556.937980] ? ___ratelimit+0x319/0x590 [ 3556.941961] oom_kill_process.cold+0x10/0x692 [ 3556.946460] ? check_preemption_disabled+0x41/0x280 [ 3556.951484] ? has_intersects_mems_allowed+0x1d6/0x290 [ 3556.956763] out_of_memory+0x1072/0x1390 [ 3556.960835] ? oom_killer_disable+0x270/0x270 [ 3556.965335] ? mutex_trylock+0x15f/0x1a0 [ 3556.969404] __alloc_pages_nodemask+0x23a2/0x2890 [ 3556.974264] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3556.979110] ? __lock_acquire+0x6de/0x3ff0 [ 3556.983352] ? mark_held_locks+0xf0/0xf0 [ 3556.987605] alloc_pages_vma+0xf2/0x780 [ 3556.991673] do_anonymous_page+0x7c2/0x1be0 [ 3556.995981] ? __pte_alloc+0x340/0x340 [ 3557.000001] ? __put_compound_page+0xc0/0xc0 [ 3557.004403] ? mark_held_locks+0xf0/0xf0 [ 3557.008457] __handle_mm_fault+0x227a/0x41c0 [ 3557.012850] ? vm_insert_page+0x9c0/0x9c0 [ 3557.016990] ? check_preemption_disabled+0x41/0x280 [ 3557.022178] handle_mm_fault+0x436/0xb10 [ 3557.026236] __get_user_pages+0x6f0/0x1710 [ 3557.030457] ? follow_page_mask+0x1d00/0x1d00 [ 3557.035028] ? check_preemption_disabled+0x41/0x280 [ 3557.040034] populate_vma_page_range+0x200/0x290 [ 3557.044774] __mm_populate+0x1ea/0x350 [ 3557.048643] ? populate_vma_page_range+0x290/0x290 [ 3557.053648] ? do_mlock+0x6b0/0x6b0 [ 3557.057269] ? security_capable+0x8f/0xc0 [ 3557.061415] __se_sys_mlockall+0x362/0x4e0 [ 3557.065659] do_syscall_64+0xf9/0x620 [ 3557.069444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3557.074629] RIP: 0033:0x4665f9 [ 3557.077816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3557.096875] RSP: 002b:00007fa4071a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 3557.104582] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3557.111847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3557.119143] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3557.126502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 3557.133761] R13: 00007ffc396d572f R14: 00007fa4071a7300 R15: 0000000000022000 [ 3557.153722] Mem-Info: [ 3557.157273] active_anon:279810 inactive_anon:981880 isolated_anon:0 [ 3557.157273] active_file:14 inactive_file:16 isolated_file:0 [ 3557.157273] unevictable:58081 dirty:0 writeback:0 unstable:0 [ 3557.157273] slab_reclaimable:20398 slab_unreclaimable:156411 [ 3557.157273] mapped:46493 shmem:21335 pagetables:74799 bounce:0 [ 3557.157273] free:25083 free_pcp:901 free_cma:0 [ 3557.194263] Node 0 active_anon:915624kB inactive_anon:654688kB active_file:16kB inactive_file:20kB unevictable:188668kB isolated(anon):0kB isolated(file):0kB mapped:180404kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3557.234144] Node 1 active_anon:203616kB inactive_anon:3272832kB active_file:32kB inactive_file:52kB unevictable:43668kB isolated(anon):0kB isolated(file):0kB mapped:5568kB dirty:0kB writeback:0kB shmem:42884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3557.272784] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3557.312956] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3557.320660] Node 0 DMA32 free:35836kB min:35996kB low:44992kB high:53988kB active_anon:913468kB inactive_anon:653212kB active_file:16kB inactive_file:20kB unevictable:188668kB writepending:0kB present:3129332kB managed:2763456kB mlocked:188668kB kernel_stack:22688kB pagetables:53508kB bounce:0kB free_pcp:1896kB local_pcp:480kB free_cma:0kB [ 3557.373694] lowmem_reserve[]: 0 0 1 1 1 [ 3557.383045] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3557.427948] lowmem_reserve[]: 0 0 0 0 0 [ 3557.436771] Node 1 Normal free:53512kB min:53876kB low:67344kB high:80812kB active_anon:203616kB inactive_anon:3272832kB active_file:32kB inactive_file:52kB unevictable:43284kB writepending:0kB present:4194304kB managed:4128248kB mlocked:43288kB kernel_stack:77888kB pagetables:245548kB bounce:0kB free_pcp:1708kB local_pcp:512kB free_cma:0kB [ 3557.484457] lowmem_reserve[]: 0 0 0 0 0 [ 3557.494587] Node 0 DMA: 23*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10980kB [ 3557.527017] Node 0 DMA32: 17*4kB (UE) 61*8kB (UME) 1387*16kB (UME) 409*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35836kB [ 3557.558635] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3557.590484] Node 1 Normal: 0*4kB 1*8kB (M) 964*16kB (U) 1190*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53512kB [ 3557.614234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3557.623884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3557.635915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3557.644831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3557.660118] 23741 total pagecache pages [ 3557.664368] 0 pages in swap cache [ 3557.670115] Swap cache stats: add 0, delete 0, find 0/0 [ 3557.682318] Free swap = 0kB [ 3557.685496] Total swap = 0kB [ 3557.711702] 2097051 pages RAM [ 3557.715150] 0 pages HighMem/MovableOnly [ 3557.730348] 369648 pages reserved [ 3557.739094] 0 pages cma reserved [ 3557.742721] Out of memory (oom_kill_allocating_task): Kill process 6744 (syz-executor.3) score 0 or sacrifice child [ 3557.758598] Killed process 6729 (syz-executor.3) total-vm:93384kB, anon-rss:25112kB, file-rss:39168kB, shmem-rss:0kB [ 3557.772904] oom_reaper: reaped process 6729 (syz-executor.3), now anon-rss:25124kB, file-rss:40196kB, shmem-rss:0kB [ 3560.963544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3560.976158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3561.004904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3561.023451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3561.035354] device bridge_slave_1 left promiscuous mode [ 3561.053834] bridge0: port 2(bridge_slave_1) entered disabled state [ 3561.064018] device bridge_slave_0 left promiscuous mode [ 3561.075773] bridge0: port 1(bridge_slave_0) entered disabled state [ 3561.096639] device veth1_macvtap left promiscuous mode [ 3561.101962] device veth0_macvtap left promiscuous mode [ 3561.125903] device veth1_vlan left promiscuous mode [ 3561.131063] device veth0_vlan left promiscuous mode [ 3563.552014] Bluetooth: hci2: command 0x0409 tx timeout [ 3565.625481] Bluetooth: hci2: command 0x041b tx timeout [ 3567.489387] device hsr_slave_1 left promiscuous mode [ 3567.499771] device hsr_slave_0 left promiscuous mode [ 3567.512556] team0 (unregistering): Port device team_slave_1 removed [ 3567.524267] team0 (unregistering): Port device team_slave_0 removed [ 3567.534014] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3567.546058] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3567.578048] bond0 (unregistering): Released all slaves [ 3567.609474] IPVS: ftp: loaded support on port[0] = 21 [ 3567.705402] Bluetooth: hci2: command 0x040f tx timeout [ 3567.742782] chnl_net:caif_netlink_parms(): no params data found [ 3567.754333] syz-executor.2: page allocation failure: order:5, mode:0x484020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 3567.765088] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3567.770316] CPU: 0 PID: 6769 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3567.778097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3567.787446] Call Trace: [ 3567.790036] dump_stack+0x1fc/0x2ef [ 3567.793753] warn_alloc.cold+0x7b/0x18f [ 3567.797747] ? zone_watermark_ok_safe+0x260/0x260 [ 3567.802847] ? wakeup_kcompactd+0xe3/0x540 [ 3567.807086] ? wakeup_kswapd+0x3cb/0x660 [ 3567.811146] ? __zone_watermark_ok+0x300/0x300 [ 3567.815724] ? wake_all_kswapds+0x143/0x2c0 [ 3567.820048] __alloc_pages_nodemask+0x232f/0x2890 [ 3567.824906] ? batadv_hash_new+0x6f/0x290 [ 3567.829053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3567.833898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3567.838740] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3567.843582] ? netlink_sendmsg+0x6bb/0xc40 [ 3567.847824] ? sock_sendmsg+0xc3/0x120 [ 3567.851704] ? __sys_sendto+0x21a/0x320 [ 3567.855686] ? lock_downgrade+0x720/0x720 [ 3567.859841] ? ____cache_alloc_node+0x156/0x1d0 [ 3567.864522] cache_grow_begin+0xa4/0x8a0 [ 3567.868587] fallback_alloc+0x213/0x2e0 [ 3567.872567] __kmalloc+0x213/0x3c0 [ 3567.876112] ? batadv_hash_new+0xaa/0x290 [ 3567.880260] batadv_hash_new+0xaa/0x290 [ 3567.884230] ? queue_delayed_work_on+0x122/0x200 [ 3567.888986] batadv_tt_init+0x211/0x330 [ 3567.892962] batadv_mesh_init+0x48c/0x690 [ 3567.897109] batadv_softif_init_late+0xad7/0xd90 [ 3567.901877] ? batadv_get_strings+0x40/0x40 [ 3567.906199] ? __dev_get_by_name+0x117/0x150 [ 3567.910604] ? batadv_get_strings+0x40/0x40 [ 3567.914941] register_netdevice+0x2dc/0x10f0 [ 3567.919350] ? unregister_netdev+0x20/0x20 [ 3567.923582] ? rtnl_create_link+0x145/0xa40 [ 3567.927908] rtnl_newlink+0x13b5/0x15c0 [ 3567.931895] ? rtnl_getlink+0x620/0x620 [ 3567.935882] ? __lock_acquire+0x6de/0x3ff0 [ 3567.940143] ? get_reg+0x1f0/0x1f0 [ 3567.943682] ? unwind_next_frame+0xeee/0x1400 [ 3567.948265] ? mark_held_locks+0xf0/0xf0 [ 3567.952323] ? unwind_next_frame+0xeee/0x1400 [ 3567.956817] ? __save_stack_trace+0x72/0x190 [ 3567.961244] ? deref_stack_reg+0x134/0x1d0 [ 3567.965489] ? get_reg+0x176/0x1f0 [ 3567.969025] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3567.974906] ? deref_stack_reg+0x1d0/0x1d0 [ 3567.979141] ? is_bpf_text_address+0xd5/0x1b0 [ 3567.983659] ? __lock_acquire+0x6de/0x3ff0 [ 3567.987919] ? __lock_acquire+0x6de/0x3ff0 [ 3567.992171] ? __lock_acquire+0x6de/0x3ff0 [ 3567.996412] ? mark_held_locks+0xf0/0xf0 [ 3568.000474] ? get_reg+0x1f0/0x1f0 [ 3568.004019] ? unwind_next_frame+0xeee/0x1400 [ 3568.008552] ? mutex_trylock+0x1a0/0x1a0 [ 3568.012636] ? rtnl_getlink+0x620/0x620 [ 3568.016607] rtnetlink_rcv_msg+0x453/0xb80 [ 3568.020847] ? rtnl_calcit.isra.0+0x430/0x430 [ 3568.025342] ? __netlink_lookup+0x3fc/0x730 [ 3568.029665] ? lock_downgrade+0x720/0x720 [ 3568.033809] ? check_preemption_disabled+0x41/0x280 [ 3568.038824] netlink_rcv_skb+0x160/0x440 [ 3568.042889] ? rtnl_calcit.isra.0+0x430/0x430 [ 3568.047393] ? netlink_ack+0xae0/0xae0 [ 3568.051295] netlink_unicast+0x4d5/0x690 [ 3568.055357] ? netlink_sendskb+0x110/0x110 [ 3568.059592] ? _copy_from_iter_full+0x229/0x7c0 [ 3568.064260] ? __phys_addr_symbol+0x2c/0x70 [ 3568.068578] ? __check_object_size+0x17b/0x3e0 [ 3568.073170] netlink_sendmsg+0x6bb/0xc40 [ 3568.077231] ? aa_af_perm+0x230/0x230 [ 3568.081036] ? nlmsg_notify+0x1a0/0x1a0 [ 3568.085044] ? nlmsg_notify+0x1a0/0x1a0 [ 3568.089037] sock_sendmsg+0xc3/0x120 [ 3568.092759] __sys_sendto+0x21a/0x320 [ 3568.096648] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3568.101334] ? lock_downgrade+0x720/0x720 [ 3568.105495] ? up_read+0x17/0x110 [ 3568.108948] ? __do_page_fault+0x180/0xd60 [ 3568.113196] __x64_sys_sendto+0xdd/0x1b0 [ 3568.117263] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3568.121846] do_syscall_64+0xf9/0x620 [ 3568.125668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3568.130953] RIP: 0033:0x41958c [ 3568.134161] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 3568.153145] RSP: 002b:00007fff1684c5e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3568.160850] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 3568.168119] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 3568.175384] RBP: 0000000000000000 R08: 00007fff1684c634 R09: 000000000000000c [ 3568.182646] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3568.189982] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 3568.197445] Mem-Info: [ 3568.199873] active_anon:279774 inactive_anon:981879 isolated_anon:12 [ 3568.199873] active_file:837 inactive_file:1904 isolated_file:0 [ 3568.199873] unevictable:42496 dirty:4 writeback:0 unstable:0 [ 3568.199873] slab_reclaimable:20344 slab_unreclaimable:154661 [ 3568.199873] mapped:54233 shmem:21333 pagetables:74723 bounce:0 [ 3568.199873] free:31880 free_pcp:238 free_cma:0 [ 3568.234175] Node 0 active_anon:915444kB inactive_anon:654688kB active_file:4kB inactive_file:4kB unevictable:169984kB isolated(anon):0kB isolated(file):0kB mapped:187296kB dirty:0kB writeback:0kB shmem:42440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3568.262471] Node 1 active_anon:203652kB inactive_anon:3272828kB active_file:3344kB inactive_file:7612kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:29636kB dirty:16kB writeback:0kB shmem:42892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3568.290759] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1476kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3568.317678] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 3568.322714] Node 0 DMA32 free:43492kB min:35996kB low:44992kB high:53988kB active_anon:913288kB inactive_anon:653212kB active_file:4kB inactive_file:4kB unevictable:169984kB writepending:0kB present:3129332kB managed:2763456kB mlocked:169984kB kernel_stack:22656kB pagetables:53464kB bounce:0kB free_pcp:776kB local_pcp:560kB free_cma:0kB [ 3568.352660] lowmem_reserve[]: 0 0 1 1 1 [ 3568.356640] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3568.382501] lowmem_reserve[]: 0 0 0 0 0 [ 3568.386478] Node 1 Normal free:72856kB min:53876kB low:67344kB high:80812kB active_anon:203652kB inactive_anon:3272828kB active_file:3344kB inactive_file:7612kB unevictable:0kB writepending:16kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:77696kB pagetables:245280kB bounce:0kB free_pcp:392kB local_pcp:392kB free_cma:0kB [ 3568.416422] lowmem_reserve[]: 0 0 0 0 0 [ 3568.420404] Node 0 DMA: 23*4kB (UM) 11*8kB (UM) 15*16kB (ME) 10*32kB (UME) 2*64kB (ME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 10980kB [ 3568.436242] Node 0 DMA32: 2085*4kB (UME) 714*8kB (UME) 936*16kB (UMEH) 437*32kB (UMEH) 7*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43460kB [ 3568.450596] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3568.461634] Node 1 Normal: 1059*4kB (UME) 741*8kB (UM) 1425*16kB (UM) 1195*32kB (UE) 1*64kB (U) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 72932kB [ 3568.476865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3568.485694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3568.494346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3568.503193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3568.511839] 24097 total pagecache pages [ 3568.515809] 0 pages in swap cache [ 3568.519250] Swap cache stats: add 0, delete 0, find 0/0 [ 3568.524603] Free swap = 0kB [ 3568.527641] Total swap = 0kB [ 3568.530735] 2097051 pages RAM [ 3568.533829] 0 pages HighMem/MovableOnly [ 3568.537788] 369648 pages reserved [ 3568.541312] 0 pages cma reserved [ 3568.547752] ------------[ cut here ]------------ [ 3568.552516] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 3568.562880] WARNING: CPU: 0 PID: 6769 at lib/debugobjects.c:325 debug_print_object+0x160/0x250 [ 3568.571622] Kernel panic - not syncing: panic_on_warn set ... [ 3568.571622] [ 3568.578983] CPU: 0 PID: 6769 Comm: syz-executor.2 Not tainted 4.19.205-syzkaller #0 [ 3568.586766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3568.596110] Call Trace: [ 3568.598709] dump_stack+0x1fc/0x2ef [ 3568.602367] panic+0x26a/0x50e [ 3568.605650] ? __warn_printk+0xf3/0xf3 [ 3568.609537] ? debug_print_object+0x160/0x250 [ 3568.614064] ? __probe_kernel_read+0x130/0x1b0 [ 3568.618665] ? __warn.cold+0x5/0x5a [ 3568.622293] ? __warn+0xe4/0x200 [ 3568.625669] ? debug_print_object+0x160/0x250 [ 3568.630146] __warn.cold+0x20/0x5a [ 3568.633668] ? debug_print_object+0x160/0x250 [ 3568.638162] report_bug+0x262/0x2b0 [ 3568.641790] do_error_trap+0x1d7/0x310 [ 3568.645660] ? math_error+0x310/0x310 [ 3568.649441] ? irq_work_claim+0xa6/0xc0 [ 3568.653399] ? irq_work_queue+0x29/0x80 [ 3568.657362] ? error_entry+0x72/0xd0 [ 3568.661074] ? trace_hardirqs_off_caller+0x2c/0x210 [ 3568.666072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3568.670907] invalid_op+0x14/0x20 [ 3568.674341] RIP: 0010:debug_print_object+0x160/0x250 [ 3568.679428] Code: dd a0 f0 b3 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd a0 f0 b3 88 48 c7 c7 c0 e4 b3 88 e8 c0 5e 7b 04 <0f> 0b 83 05 83 e1 af 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 3568.698314] RSP: 0018:ffff8881f1d86d60 EFLAGS: 00010082 [ 3568.703765] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 3568.711014] RDX: 0000000000000000 RSI: ffffffff814e0d61 RDI: ffffed103e3b0d9e [ 3568.718271] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 3568.725549] R10: 0000000000000005 R11: ffffffff8c66401b R12: ffffffff89f90a80 [ 3568.732811] R13: ffffffff81532280 R14: ffff88801b8cdf40 R15: 1ffff1103e3b0db7 [ 3568.740072] ? calc_wheel_index+0x230/0x230 [ 3568.744376] ? vprintk_func+0x81/0x180 [ 3568.748251] debug_object_assert_init+0x1f0/0x2e0 [ 3568.753077] ? debug_object_free+0x380/0x380 [ 3568.757473] ? mark_held_locks+0xf0/0xf0 [ 3568.761522] ? batadv_mesh_init+0x5b7/0x690 [ 3568.765843] ? batadv_softif_init_late+0xad7/0xd90 [ 3568.770750] ? register_netdevice+0x2dc/0x10f0 [ 3568.775317] ? rtnl_newlink+0x13b5/0x15c0 [ 3568.779454] ? rtnetlink_rcv_msg+0x453/0xb80 [ 3568.783851] ? netlink_rcv_skb+0x160/0x440 [ 3568.788064] ? netlink_unicast+0x4d5/0x690 [ 3568.792365] del_timer+0x6d/0x100 [ 3568.795818] ? run_timer_softirq+0x670/0x670 [ 3568.800324] ? batadv_tvlv_handler_get+0x314/0x470 [ 3568.805240] ? trace_hardirqs_off+0x64/0x200 [ 3568.809633] try_to_grab_pending+0x2b6/0x6f0 [ 3568.814024] __cancel_work_timer+0xa6/0x590 [ 3568.818339] ? try_to_grab_pending+0x6f0/0x6f0 [ 3568.822908] ? batadv_tvlv_handler_get+0x33b/0x470 [ 3568.827832] ? batadv_tvlv_handler_put+0x40/0x40 [ 3568.832584] ? mark_held_locks+0xa6/0xf0 [ 3568.836645] batadv_nc_mesh_free+0x41/0x120 [ 3568.840955] batadv_mesh_free+0x7d/0x170 [ 3568.845020] batadv_mesh_init+0x5b7/0x690 [ 3568.849154] batadv_softif_init_late+0xad7/0xd90 [ 3568.853887] ? batadv_get_strings+0x40/0x40 [ 3568.858199] ? __dev_get_by_name+0x117/0x150 [ 3568.862594] ? batadv_get_strings+0x40/0x40 [ 3568.866909] register_netdevice+0x2dc/0x10f0 [ 3568.871298] ? unregister_netdev+0x20/0x20 [ 3568.875520] ? rtnl_create_link+0x145/0xa40 [ 3568.879831] rtnl_newlink+0x13b5/0x15c0 [ 3568.883789] ? rtnl_getlink+0x620/0x620 [ 3568.887751] ? __lock_acquire+0x6de/0x3ff0 [ 3568.891969] ? get_reg+0x1f0/0x1f0 [ 3568.895495] ? unwind_next_frame+0xeee/0x1400 [ 3568.899977] ? mark_held_locks+0xf0/0xf0 [ 3568.904025] ? unwind_next_frame+0xeee/0x1400 [ 3568.908496] ? __save_stack_trace+0x72/0x190 [ 3568.912883] ? deref_stack_reg+0x134/0x1d0 [ 3568.917104] ? get_reg+0x176/0x1f0 [ 3568.920634] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3568.926512] ? deref_stack_reg+0x1d0/0x1d0 [ 3568.930725] ? is_bpf_text_address+0xd5/0x1b0 [ 3568.935217] ? __lock_acquire+0x6de/0x3ff0 [ 3568.939535] ? __lock_acquire+0x6de/0x3ff0 [ 3568.943756] ? __lock_acquire+0x6de/0x3ff0 [ 3568.947992] ? mark_held_locks+0xf0/0xf0 [ 3568.952031] ? get_reg+0x1f0/0x1f0 [ 3568.955559] ? unwind_next_frame+0xeee/0x1400 [ 3568.960066] ? mutex_trylock+0x1a0/0x1a0 [ 3568.964126] ? rtnl_getlink+0x620/0x620 [ 3568.968090] rtnetlink_rcv_msg+0x453/0xb80 [ 3568.972317] ? rtnl_calcit.isra.0+0x430/0x430 [ 3568.976800] ? __netlink_lookup+0x3fc/0x730 [ 3568.981137] ? lock_downgrade+0x720/0x720 [ 3568.985269] ? check_preemption_disabled+0x41/0x280 [ 3568.990278] netlink_rcv_skb+0x160/0x440 [ 3568.994333] ? rtnl_calcit.isra.0+0x430/0x430 [ 3568.998814] ? netlink_ack+0xae0/0xae0 [ 3569.002718] netlink_unicast+0x4d5/0x690 [ 3569.006765] ? netlink_sendskb+0x110/0x110 [ 3569.010987] ? _copy_from_iter_full+0x229/0x7c0 [ 3569.015648] ? __phys_addr_symbol+0x2c/0x70 [ 3569.019966] ? __check_object_size+0x17b/0x3e0 [ 3569.024536] netlink_sendmsg+0x6bb/0xc40 [ 3569.028583] ? aa_af_perm+0x230/0x230 [ 3569.032378] ? nlmsg_notify+0x1a0/0x1a0 [ 3569.036349] ? nlmsg_notify+0x1a0/0x1a0 [ 3569.040328] sock_sendmsg+0xc3/0x120 [ 3569.044022] __sys_sendto+0x21a/0x320 [ 3569.047804] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3569.052473] ? lock_downgrade+0x720/0x720 [ 3569.056616] ? up_read+0x17/0x110 [ 3569.060066] ? __do_page_fault+0x180/0xd60 [ 3569.064306] __x64_sys_sendto+0xdd/0x1b0 [ 3569.068356] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3569.072926] do_syscall_64+0xf9/0x620 [ 3569.076718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3569.081909] RIP: 0033:0x41958c [ 3569.085093] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 3569.104060] RSP: 002b:00007fff1684c5e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3569.111766] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 3569.119027] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 3569.126277] RBP: 0000000000000000 R08: 00007fff1684c634 R09: 000000000000000c [ 3569.133525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3569.140775] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 3569.149944] Kernel Offset: disabled [ 3569.153565] Rebooting in 86400 seconds..