bridge_fdb_cache 12KB 19KB fib6_nodes 168KB 216KB ip6_dst_cache 199KB 431KB RAWv6 39325KB 39325KB UDPv6 3682KB 3682KB INFO: task syz-executor.4:30587 blocked for more than 140 seconds. TCPv6 6066KB 6066KB Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. nf_conntrack 22KB 45KB syz-executor.4 D26792 30587 12394 0x00000000 t10_alua_lu_gp_cache 0KB 3KB Call Trace: sd_ext_cdb 0KB 7KB context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 scsi_sense_cache 1056KB 1060KB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 virtio_scsi_cmd 16KB 16KB sgpool-128 8KB 8KB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 sgpool-64 4KB 12KB sgpool-32 2KB 15KB sgpool-16 1KB 7KB sgpool-8 0KB 7KB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 mqueue_inode_cache 13KB 22KB copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 bio_post_read_ctx 14KB 15KB bio-2 14KB 15KB jfs_mp 7KB 7KB cifs_small_rq 15KB 16KB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe cifs_request 67KB 67KB cifs_mpx_ids 0KB 7KB RIP: 0033:0x7fd6a66a5e99 nfs_commit_data 3KB 14KB Code: Bad RIP value. nfs_write_data 34KB 44KB ext4_system_zone 1KB 7KB dio 70KB 73KB bio-1 1KB 7KB pid_namespace 3KB 11KB kvm_vcpu 0KB 308KB RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 rpc_buffers 17KB 25KB RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 rpc_tasks 2KB 7KB RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 UNIX 95KB 97KB UDP-Lite 5KB 6KB RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 tcp_bind_bucket 245KB 248KB inet_peer_cache 66KB 68KB ip_fib_trie 23KB 35KB ip_fib_alias 110KB 154KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 ip_dst_cache 9KB 64KB R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 INFO: task syz-executor.4:30688 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 RAW 23308KB 23310KB "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D26792 30688 12394 0x00000000 UDP 6574KB 6574KB Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 TCP 112KB 123KB hugetlbfs_inode_cache 14KB 31KB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 fscache_cookie_jar 1KB 7KB eventpoll_pwq 12KB 35KB eventpoll_epi 22KB 51KB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 inotify_inode_mark 6KB 15KB request_queue 132KB 132KB blkdev_requests 1KB 3KB blkdev_ioc 34KB 34KB bio-0 9379KB 9382KB biovec-max 2755KB 2755KB biovec-64 4441KB 4441KB biovec-16 2035KB 2036KB bio_integrity_payload 1KB 8KB khugepaged_mm_slot 218KB 221KB user_namespace 0KB 3KB uid_cache 0KB 4KB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 dmaengine-unmap-2 0KB 3KB skbuff_fclone_cache 25KB 26KB skbuff_head_cache 10393KB 10417KB configfs_dir_cache 3KB 7KB ops_init+0xb3/0x410 net/core/net_namespace.c:129 file_lock_cache 3KB 7KB setup_net+0x2c2/0x720 net/core/net_namespace.c:316 file_lock_ctx 6KB 11KB fsnotify_mark_connector 2KB 15KB copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 net_namespace 33967KB 33967KB copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 shmem_inode_cache 7822KB 8115KB task_delay_info 1694KB 2182KB taskstats 11KB 65KB proc_dir_entry 175768KB 175770KB pde_opener 2KB 19KB seq_file 59KB 59KB copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 sigqueue 141KB 141KB kernfs_node_cache 493223KB 493223KB mnt_cache 176KB 216KB filp 4382KB 6236KB copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 names_cache 38075KB 38092KB iint_cache 85KB 91KB key_jar 8KB 15KB uts_namespace 5KB 15KB nsproxy 342KB 343KB vm_area_struct 32253KB 32314KB mm_struct 6594KB 6597KB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe fs_cache 2292KB 2960KB RIP: 0033:0x7fd6a66a5e99 files_cache 8408KB 9817KB Code: Bad RIP value. signal_cache 12892KB 14720KB RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 sighand_cache 9996KB 10059KB RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 task_struct 55474KB 55505KB cred_jar 4969KB 6420KB anon_vma_chain 46499KB 46537KB anon_vma 10791KB 10815KB pid 664KB 948KB Acpi-Operand 156KB 198KB Acpi-ParseExt 9KB 11KB RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 Acpi-Parse 41KB 47KB Acpi-State 52KB 63KB Acpi-Namespace 20KB 23KB RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 numa_policy 0KB 3KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 debug_objects_cache 38731KB 38731KB R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 trace_event_file 297KB 298KB INFO: task syz-executor.4:31419 blocked for more than 140 seconds. ftrace_event_field 398KB 401KB pool_workqueue 4018KB 4020KB Not tainted 4.19.211-syzkaller #0 page->ptl 6595KB 6617KB "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kmalloc-2097152 2050KB 2050KB syz-executor.4 D26800 31419 12394 0x00000000 kmalloc-1048576 1026KB 1026KB Call Trace: kmalloc-524288 2056KB 2056KB kmalloc-262144 1290KB 1290KB kmalloc-131072 1690KB 1690KB kmalloc-65536 2244KB 2574KB kmalloc-32768 211695KB 211695KB context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 kmalloc-16384 65257KB 65257KB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 kmalloc-8192 148054KB 148054KB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 kmalloc-4096 662698KB 662719KB __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 kmalloc-2048 531228KB 531241KB kmalloc-1024 212172KB 212176KB kmalloc-512 173919KB 186135KB kmalloc-256 110334KB 112046KB kmalloc-128 56253KB 56404KB kmalloc-96 14447KB 15120KB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 kmalloc-64 38688KB 40012KB kmalloc-32 34071KB 35130KB kmalloc-192 75185KB 76980KB kmem_cache 178KB 183KB Out of memory: Kill process 17529 (syz-executor.5) score 1002 or sacrifice child Killed process 17529 (syz-executor.5) total-vm:57460kB, anon-rss:2484kB, file-rss:14340kB, shmem-rss:68kB ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 IPVS: ftp: loaded support on port[0] = 21 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 systemd[1]: Starting Journal Service... copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 syz-executor.4: page allocation failure: order:1, mode:0x6044c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=(null) R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 syz-executor.4 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 30587 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 warn_alloc.cold+0x7b/0x18f mm/page_alloc.c:3457 __alloc_pages_slowpath mm/page_alloc.c:4317 [inline] __alloc_pages_nodemask+0x232f/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 slab_alloc_node mm/slab.c:3332 [inline] kmem_cache_alloc_node_trace+0xec/0x3b0 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node+0x38/0x70 mm/slab.c:3696 kmalloc_node include/linux/slab.h:557 [inline] kvmalloc_node+0x61/0xf0 mm/util.c:423 kvmalloc include/linux/mm.h:577 [inline] kvzalloc include/linux/mm.h:585 [inline] alloc_netdev_mqs+0x97/0xd50 net/core/dev.c:9152 __ip_tunnel_create+0x201/0x580 net/ipv4/ip_tunnel.c:267 ip_tunnel_init_net+0x330/0x990 net/ipv4/ip_tunnel.c:1035 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 INFO: task syz-executor.4:32100 blocked for more than 140 seconds. systemd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd cpuset=/ mems_allowed=0-1 syz-executor.4 D26872 32100 12394 0x00000000 CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1132 [inline] out_of_memory+0x34d/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 __do_cache_alloc mm/slab.c:3361 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x1e4/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 user_path_at_empty+0x2a/0x50 fs/namei.c:2609 user_path_at include/linux/namei.h:57 [inline] vfs_statx+0x113/0x210 fs/stat.c:185 vfs_fstatat include/linux/fs.h:3143 [inline] __do_sys_newfstatat fs/stat.c:364 [inline] __se_sys_newfstatat+0x9e/0x120 fs/stat.c:358 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fadb003244b Code: Bad RIP value. RSP: 002b:00007ffc40c2da98 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00007fadb176d51b RCX: 00007fadb003244b RDX: 00007ffc40c2daa0 RSI: 00007ffc40c2db60 RDI: ffffffffffffff9c RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000300 R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000564851bc7f68 R15: 0000564851bc7920 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 INFO: task syz-executor.4:1095 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 Mem-Info: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. active_anon:212827 inactive_anon:7268 isolated_anon:0 active_file:4 inactive_file:27 isolated_file:47 unevictable:0 dirty:3 writeback:0 unstable:0 slab_reclaimable:56068 slab_unreclaimable:1205086 mapped:14966 shmem:9820 pagetables:59174 bounce:0 free:28109 free_pcp:443 free_cma:0 syz-executor.4 D26752 1095 12394 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 Node 0 active_anon:844216kB inactive_anon:29064kB active_file:216kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:45692kB dirty:0kB writeback:0kB shmem:39264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Mem-Info: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 Node 1 active_anon:7092kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14336kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes active_anon:212827 inactive_anon:7268 isolated_anon:0 active_file:55 inactive_file:35 isolated_file:29 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:56068 slab_unreclaimable:1205113 mapped:15007 shmem:9820 pagetables:59177 bounce:0 free:28499 free_pcp:134 free_cma:0 Node 0 DMA free:10832kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 Node 0 active_anon:844216kB inactive_anon:29064kB active_file:176kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:45592kB dirty:0kB writeback:0kB shmem:39264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 lowmem_reserve[]: 0 2693 2695 2695 2695 Node 1 active_anon:7092kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14336kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA32 free:48784kB min:35996kB low:44992kB high:53988kB active_anon:844208kB inactive_anon:29064kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:29792kB pagetables:56020kB bounce:0kB free_pcp:1304kB local_pcp:288kB free_cma:0kB create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 lowmem_reserve[]: 0 0 1 1 1 Node 0 DMA free:10832kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:7092kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:104320kB pagetables:180548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:48596kB min:35996kB low:44992kB high:53988kB active_anon:844208kB inactive_anon:29064kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:29792kB pagetables:56020kB bounce:0kB free_pcp:1188kB local_pcp:944kB free_cma:0kB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 lowmem_reserve[]: 0 0 1 1 1 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 INFO: task syz-executor.4:2009 blocked for more than 140 seconds. Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:7092kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:104320kB pagetables:180548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Node 0 DMA: 2*4kB (UE) 3*8kB (UME) 1*16kB (M) 3*32kB (UM) 1*64kB (M) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10832kB Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D26888 2009 12394 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 2*4kB (UE) 3*8kB (UME) 1*16kB (M) 3*32kB (UM) 1*64kB (M) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10832kB Node 0 DMA32: 345*4kB (UM) 322*8kB (UM) 361*16kB (ME) 504*32kB (ME) 0*64kB 2*128kB (UE) 0*256kB 1*512kB (E) 1*1024kB (E) 10*2048kB (M) 0*4096kB = 48132kB Node 0 DMA32: 345*4kB (UM) 322*8kB (UM) 361*16kB (ME) 504*32kB (ME) 0*64kB 2*128kB (UE) 0*256kB 1*512kB (E) 1*1024kB (E) 10*2048kB (M) 0*4096kB = 48132kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 Node 1 Normal: 1171*4kB (UME) 215*8kB (UM) 56*16kB (UME) 65*32kB (UME) 24*64kB (UME) 12*128kB (UM) 2*256kB (M) 4*512kB (UME) 2*1024kB (M) 2*2048kB (ME) 8*4096kB (M) = 53924kB Node 1 Normal: 1171*4kB (UME) 215*8kB (UM) 56*16kB (UME) 65*32kB (UME) 24*64kB (UME) 12*128kB (UM) 2*256kB (M) 4*512kB (UME) 2*1024kB (M) 2*2048kB (ME) 8*4096kB (M) = 53924kB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 9872 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved Unreclaimable slab info: Name Used Total pid_3 0KB 3KB pid_2 284KB 288KB ubi_wl_entry_slab 0KB 3KB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 IPVS: ftp: loaded support on port[0] = 21 batadv_tl_cache 4KB 12KB TIPC 2932KB 2932KB 10789 total pagecache pages rds_connection 0KB 3KB SCTPv6 8148KB 8148KB DCCPv6 9705KB 9705KB DCCP 9219KB 9219KB KCM 10KB 15KB kcm_mux_cache 2KB 7KB RXRPC 3176KB 3178KB rxrpc_call_jar 21972KB 21979KB bridge_fdb_cache 12KB 19KB fib6_nodes 168KB 216KB ip6_dst_cache 195KB 431KB RAWv6 39345KB 39345KB UDPv6 3682KB 3682KB TCPv6 6063KB 6066KB nf_conntrack 22KB 45KB 0 pages in swap cache t10_alua_lu_gp_cache 0KB 3KB ops_init+0xb3/0x410 net/core/net_namespace.c:129 sd_ext_cdb 0KB 7KB Swap cache stats: add 0, delete 0, find 0/0 scsi_sense_cache 1056KB 1060KB setup_net+0x2c2/0x720 net/core/net_namespace.c:316 virtio_scsi_cmd 16KB 16KB sgpool-128 8KB 8KB Free swap = 0kB sgpool-64 4KB 12KB copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 sgpool-32 2KB 15KB Total swap = 0kB sgpool-16 1KB 7KB sgpool-8 0KB 7KB mqueue_inode_cache 13KB 22KB bio_post_read_ctx 14KB 15KB create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 bio-2 14KB 15KB copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 jfs_mp 7KB 7KB 2097051 pages RAM cifs_small_rq 15KB 16KB 0 pages HighMem/MovableOnly cifs_request 67KB 67KB copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 cifs_mpx_ids 0KB 7KB nfs_commit_data 3KB 14KB nfs_write_data 34KB 44KB ext4_system_zone 1KB 7KB 369649 pages reserved dio 70KB 73KB 0 pages cma reserved copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 bio-1 1KB 7KB pid_namespace 3KB 11KB kvm_vcpu 0KB 308KB rpc_buffers 17KB 25KB rpc_tasks 2KB 7KB UNIX 95KB 97KB UDP-Lite 5KB 6KB tcp_bind_bucket 245KB 248KB inet_peer_cache 66KB 68KB ip_fib_trie 23KB 35KB ip_fib_alias 110KB 154KB ip_dst_cache 9KB 64KB RAW 23316KB 23317KB UDP 6577KB 6581KB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 TCP 112KB 123KB Code: Bad RIP value. hugetlbfs_inode_cache 14KB 31KB fscache_cookie_jar 1KB 7KB RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 eventpoll_pwq 12KB 35KB eventpoll_epi 22KB 51KB inotify_inode_mark 6KB 15KB request_queue 132KB 132KB blkdev_requests 1KB 3KB RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 blkdev_ioc 38KB 38KB RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 bio-0 9679KB 9682KB biovec-max 2887KB 2887KB RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 biovec-64 4662KB 4662KB biovec-16 2095KB 2096KB bio_integrity_payload 1KB 8KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 khugepaged_mm_slot 217KB 221KB R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 user_namespace 0KB 3KB uid_cache 0KB 4KB INFO: task syz-executor.4:2011 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 dmaengine-unmap-2 0KB 3KB "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. skbuff_fclone_cache 29KB 30KB syz-executor.4 D26792 2011 12394 0x00000000 skbuff_head_cache 10471KB 10496KB Call Trace: configfs_dir_cache 3KB 7KB file_lock_cache 3KB 7KB file_lock_ctx 6KB 11KB fsnotify_mark_connector 2KB 15KB context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 net_namespace 33993KB 33993KB shmem_inode_cache 7822KB 8115KB task_delay_info 1694KB 2182KB taskstats 11KB 65KB proc_dir_entry 175873KB 175875KB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 pde_opener 1KB 19KB __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 seq_file 59KB 63KB sigqueue 145KB 145KB kernfs_node_cache 493668KB 493668KB mnt_cache 176KB 216KB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 filp 4321KB 6232KB names_cache 37693KB 37693KB iint_cache 89KB 91KB ops_init+0xb3/0x410 net/core/net_namespace.c:129 key_jar 8KB 15KB setup_net+0x2c2/0x720 net/core/net_namespace.c:316 uts_namespace 5KB 15KB copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 nsproxy 340KB 343KB copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 vm_area_struct 32311KB 32372KB copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 mm_struct 6597KB 6597KB fs_cache 2282KB 2960KB copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 files_cache 8367KB 9806KB signal_cache 12795KB 14691KB sighand_cache 9996KB 10059KB task_struct 55038KB 55038KB cred_jar 4900KB 6420KB anon_vma_chain 46538KB 46576KB anon_vma 10799KB 10822KB pid 664KB 948KB Acpi-Operand 156KB 198KB Acpi-ParseExt 9KB 11KB Acpi-Parse 41KB 47KB Acpi-State 52KB 63KB Acpi-Namespace 20KB 23KB numa_policy 0KB 3KB debug_objects_cache 38777KB 38777KB trace_event_file 297KB 298KB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 ftrace_event_field 398KB 401KB RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 pool_workqueue 4017KB 4020KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 page->ptl 6603KB 6625KB R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 kmalloc-2097152 2050KB 2050KB INFO: task syz-executor.4:2400 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 kmalloc-1048576 1026KB 1026KB kmalloc-524288 2056KB 2056KB kmalloc-262144 1290KB 1290KB kmalloc-131072 1690KB 1690KB kmalloc-65536 2244KB 2574KB "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kmalloc-32768 211794KB 211794KB syz-executor.4 D26888 2400 12394 0x00000000 kmalloc-16384 65290KB 65290KB Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 kmalloc-8192 148128KB 148128KB kmalloc-4096 662762KB 662762KB kmalloc-2048 531585KB 531585KB kmalloc-1024 212500KB 212506KB kmalloc-512 174058KB 186273KB kmalloc-256 110424KB 112136KB kmalloc-128 56288KB 56440KB kmalloc-96 14471KB 15144KB kmalloc-64 38708KB 40032KB kmalloc-32 34091KB 35150KB kmalloc-192 75213KB 77008KB kmem_cache 178KB 183KB Out of memory: Kill process 12847 (syz-executor.5) score 1002 or sacrifice child Killed process 12847 (syz-executor.5) total-vm:57856kB, anon-rss:2512kB, file-rss:14340kB, shmem-rss:36kB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 INFO: task syz-executor.4:2449 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D26920 2449 12394 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 INFO: task syz-executor.4:2981 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D26888 2981 12394 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd6a66a5e99 Code: Bad RIP value. RSP: 002b:00007fd6a4ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fd6a67b9030 RCX: 00007fd6a66a5e99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040808000 RBP: 00007fd6a66ffff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd05821d4f R14: 00007fd6a4ffa300 R15: 0000000000022000 Showing all locks held in the system: 3 locks held by systemd/1: #0: 00000000cc52dff3 (&mm->mmap_sem){++++}, at: __do_page_fault+0x398/0xd60 arch/x86/mm/fault.c:1341 #1: 00000000e3869bfd (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6378 #2: 00000000c61196fa (fs_reclaim){+.+.}, at: fs_reclaim_release mm/page_alloc.c:3778 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: fs_reclaim_release mm/page_alloc.c:3774 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __perform_reclaim mm/page_alloc.c:3805 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __alloc_pages_direct_reclaim mm/page_alloc.c:3821 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __alloc_pages_slowpath mm/page_alloc.c:4211 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __alloc_pages_nodemask+0x191e/0x2890 mm/page_alloc.c:4419 3 locks held by kworker/0:1/14: kworker/u4:3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 #0: 00000000e9f9a82d ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 0000000016c4392c ((addr_chk_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 000000008cd29607 (rtnl_mutex){+.+.}, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4476 3 locks held by kworker/1:0/19: #0: 00000000e9f9a82d ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 00000000dfba3b73 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 000000008cd29607 (rtnl_mutex){+.+.}, at: addrconf_dad_work+0x9c/0x10a0 net/ipv6/addrconf.c:3989 1 lock held by khungtaskd/1571: #0: 00000000a4ca73d8 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441 1 lock held by kswapd0/1969: #0: 00000000c61196fa (fs_reclaim){+.+.}, at: __fs_reclaim_acquire+0x0/0x30 mm/page_alloc.c:3459 3 locks held by kworker/0:2/4679: #0: 00000000c2491523 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 00000000a56806bd ((linkwatch_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 000000008cd29607 (rtnl_mutex){+.+.}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:236 3 locks held by in:imklog/7799: #0: 00000000918fb443 (&mm->mmap_sem){++++}, at: __do_page_fault+0x398/0xd60 arch/x86/mm/fault.c:1341 #1: 00000000e3869bfd (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6378 #2: 00000000c61196fa (fs_reclaim){+.+.}, at: fs_reclaim_release mm/page_alloc.c:3778 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: fs_reclaim_release mm/page_alloc.c:3774 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __perform_reclaim mm/page_alloc.c:3805 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __alloc_pages_direct_reclaim mm/page_alloc.c:3821 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __alloc_pages_slowpath mm/page_alloc.c:4211 [inline] #2: 00000000c61196fa (fs_reclaim){+.+.}, at: __alloc_pages_nodemask+0x191e/0x2890 mm/page_alloc.c:4419 4 locks held by kworker/u4:9/12339: #0: 00000000a847c15b ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 00000000d3c3c54d (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521 #3: 000000008cd29607 (rtnl_mutex){+.+.}, at: netdev_run_todo+0x719/0xab0 net/core/dev.c:9005 4 locks held by kworker/u4:12/15325: #0: 000000009df1e118 ((wq_completion)"writeback"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 0000000012fe440a ((work_completion)(&(&wb->dwork)->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 0000000031552f20 (&type->s_umount_key#37){++++}, at: trylock_super+0x1d/0x100 fs/super.c:412 #3: 00000000b7d1352d (&sbi->s_writepages_rwsem){++++}, at: do_writepages+0xe5/0x290 mm/page-writeback.c:2344 3 locks held by kworker/u4:15/15336: 1 lock held by syz-executor.3/27031: #0: 000000008cd29607 (rtnl_mutex){+.+.}, at: tun_detach drivers/net/tun.c:759 [inline] #0: 000000008cd29607 (rtnl_mutex){+.+.}, at: tun_chr_close+0x3a/0x180 drivers/net/tun.c:3323 2 locks held by syz-executor.4/28779: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/28822: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/28908: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/28917: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29026: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29037: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29054: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29059: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29141: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29185: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29217: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29227: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29228: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29249: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29251: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29254: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29526: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29720: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: vti6_exit_batch_net+0x82/0x620 net/ipv6/ip6_vti.c:1173 2 locks held by syz-executor.4/29723: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29758: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29763: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29792: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29797: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29799: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29812: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29815: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29820: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29822: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29827: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29830: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/29832: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29856: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/29918: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30237: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30341: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30342: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30450: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30469: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 kworker/u4:3 cpuset=/ mems_allowed=0-1 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 CPU: 0 PID: 21000 Comm: kworker/u4:3 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_unbound call_usermodehelper_exec_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1132 [inline] out_of_memory+0x34d/0x1390 mm/oom_kill.c:1064 2 locks held by syz-executor.4/30470: __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] alloc_pages_node include/linux/gfp.h:523 [inline] alloc_thread_stack_node kernel/fork.c:240 [inline] dup_task_struct kernel/fork.c:811 [inline] copy_process.part.0+0x3cf/0x8260 kernel/fork.c:1753 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30516: copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 kernel_thread+0x2f/0x40 kernel/fork.c:2278 call_usermodehelper_exec_work kernel/umh.c:199 [inline] call_usermodehelper_exec_work+0x16d/0x260 kernel/umh.c:185 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Mem-Info: 2 locks held by syz-executor.4/30517: active_anon:212225 inactive_anon:7268 isolated_anon:0 active_file:48 inactive_file:5 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:56143 slab_unreclaimable:1205517 mapped:14922 shmem:9820 pagetables:59153 bounce:0 free:28447 free_pcp:369 free_cma:0 #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 Node 0 active_anon:841812kB inactive_anon:29064kB active_file:152kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45340kB dirty:0kB writeback:0kB shmem:39264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30537: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30578: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30579: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30577: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30580: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30582: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30587: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_delete_nets+0x8e/0x580 net/ipv4/ip_tunnel.c:1083 2 locks held by syz-executor.4/30615: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 Node 1 active_anon:7092kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14336kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 Node 0 DMA free:10832kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 2 locks held by syz-executor.4/30642: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30652: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30654: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30655: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30656: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30657: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30659: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30674: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30688: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.4/30728: #0: 0000000056f60f2b (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 000000008cd29607 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.4/30730: