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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x22a0}, 0x1, 0x0, 0x0, 0x40008d0}, 0x9000) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:47:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x23c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 362.214811] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.221301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.228025] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.234410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.288030] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 362.294234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.304475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 362.315405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.323563] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.334940] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.351811] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 362.359086] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.365642] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 362.382841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 362.392590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.404250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.415280] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.421732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.438188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 362.445801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.459282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.470261] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.476942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.487825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 362.501679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 362.508797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.522484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.533050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 362.546653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.555551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.570866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 362.581766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.591049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.602786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.615446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 362.626715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.636134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.651325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 362.661248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.671850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.684706] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 362.694134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.716774] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 362.732177] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 362.741893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.751619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.766179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.874902] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 362.890853] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 362.901339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 362.912458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.973292] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 362.985028] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 362.994366] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 363.011078] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 363.020443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.031224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.044104] device veth0_vlan entered promiscuous mode [ 363.053618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.064704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.081333] device veth1_vlan entered promiscuous mode [ 363.090664] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 363.104180] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 363.123040] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 363.135775] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 363.151723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.161337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.172783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.182787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.196431] device veth0_macvtap entered promiscuous mode [ 363.205603] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 363.221511] device veth1_macvtap entered promiscuous mode [ 363.230926] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 363.237120] Bluetooth: hci0 command 0x0409 tx timeout [ 363.244527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 363.259736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 363.272331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.284115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.296152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.313636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.323575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.336786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.346789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.361179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.370720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.384539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.396120] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 363.407564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.414643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.425916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.434652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.448047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.457891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.473009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.482779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.496949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.506076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.520854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.530049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.544469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.560854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.570649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.586028] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 363.593670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.604654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.613603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.307128] Bluetooth: hci0 command 0x041b tx timeout [ 366.856749] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 366.869824] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 366.874949] CPU: 0 PID: 2449 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 366.882724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.892065] Call Trace: [ 366.894658] dump_stack+0x1b2/0x281 [ 366.898288] dump_header+0x178/0x82f [ 366.901999] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 366.907097] ? ___ratelimit+0x2cd/0x530 [ 366.911071] oom_kill_process.cold+0x10/0xa40 [ 366.915843] out_of_memory+0xe3e/0x1190 [ 366.919828] ? oom_killer_disable+0x1c0/0x1c0 [ 366.924322] ? mutex_trylock+0x152/0x1a0 [ 366.928386] __alloc_pages_nodemask+0x23e1/0x2720 [ 366.933240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 366.938099] alloc_pages_current+0x155/0x260 [ 366.942504] filemap_fault+0x11a1/0x1ad0 [ 366.946549] ext4_filemap_fault+0x84/0xb0 [ 366.950683] __do_fault+0xfa/0x380 [ 366.954224] __handle_mm_fault+0x2497/0x4620 [ 366.958726] ? vm_insert_page+0x7c0/0x7c0 [ 366.962871] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 366.967377] ? nanosleep_copyout+0x100/0x100 [ 366.971785] ? mark_held_locks+0xa6/0xf0 [ 366.975853] handle_mm_fault+0x455/0x9c0 [ 366.979913] __do_page_fault+0x549/0xad0 [ 366.983971] ? spurious_fault+0x640/0x640 [ 366.988112] ? do_page_fault+0x60/0x500 [ 366.992080] ? page_fault+0x2f/0x50 [ 366.995716] page_fault+0x45/0x50 [ 366.999166] RIP: 590ac:0x5 [ 367.001996] RSP: 0003:00007ffda1feb6fc EFLAGS: 00000032 [ 367.011276] Mem-Info: [ 367.026401] active_anon:12872 inactive_anon:14853 isolated_anon:0 [ 367.026401] active_file:46 inactive_file:23 isolated_file:0 [ 367.026401] unevictable:0 dirty:34 writeback:26 unstable:0 [ 367.026401] slab_reclaimable:12994 slab_unreclaimable:115065 [ 367.026401] mapped:52642 shmem:15125 pagetables:765 bounce:0 [ 367.026401] free:25161 free_pcp:6 free_cma:0 [ 367.069720] Node 0 active_anon:49564kB inactive_anon:22180kB active_file:68kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 367.099285] Node 1 active_anon:1904kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 367.165679] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.195533] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 367.207044] Node 0 DMA32 free:36104kB min:36200kB low:45248kB high:54296kB active_anon:49564kB inactive_anon:22180kB active_file:0kB inactive_file:116kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2576kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 367.266324] lowmem_reserve[]: 0 0 0 0 0 [ 367.274029] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.306378] lowmem_reserve[]: 0 0 0 0 0 [ 367.310521] Node 1 Normal free:53172kB min:53696kB low:67120kB high:80544kB active_anon:1904kB inactive_anon:37228kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:392kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 367.347955] lowmem_reserve[]: 0 0 0 0 0 [ 367.351974] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11076kB [ 367.376557] Node 0 DMA32: 1712*4kB (UME) 877*8kB (UME) 270*16kB (ME) 50*32kB (ME) 31*64kB (UME) 14*128kB (ME) 3*256kB (M) 5*512kB (M) 5*1024kB (M) 0*2048kB 1*4096kB (M) = 36104kB [ 367.393056] Bluetooth: hci0 command 0x040f tx timeout [ 367.401482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.412279] Node 1 Normal: 197*4kB (M) 156*8kB (UM) 124*16kB (ME) 82*32kB (M) 51*64kB (M) 16*128kB (ME) 7*256kB (UME) 3*512kB (UME) 1*1024kB (E) 0*2048kB 9*4096kB (U) = 53172kB [ 367.437063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.445925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.462183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.500640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.518559] 15155 total pagecache pages [ 367.522544] 0 pages in swap cache [ 367.525984] Swap cache stats: add 0, delete 0, find 0/0 [ 367.577885] Free swap = 0kB [ 367.580930] Total swap = 0kB [ 367.583948] 2097051 pages RAM [ 367.611848] 0 pages HighMem/MovableOnly [ 367.615869] 363849 pages reserved [ 367.624245] 0 pages cma reserved [ 367.646913] Out of memory (oom_kill_allocating_task): Kill process 2449 (syz-executor.4) score 0 or sacrifice child [ 367.674589] Killed process 2719 (syz-executor.4) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 367.728423] oom_reaper: reaped process 2719 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 367.786565] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 367.850559] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 367.855372] CPU: 1 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 367.862814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.872167] Call Trace: [ 367.874759] dump_stack+0x1b2/0x281 [ 367.878387] dump_header+0x178/0x82f [ 367.882097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 367.887218] ? ___ratelimit+0x2cd/0x530 [ 367.891191] oom_kill_process.cold+0x10/0xa40 [ 367.895689] out_of_memory+0xe3e/0x1190 [ 367.899659] ? oom_killer_disable+0x1c0/0x1c0 [ 367.904155] ? mutex_trylock+0x152/0x1a0 [ 367.908214] __alloc_pages_nodemask+0x23e1/0x2720 [ 367.913063] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 367.918031] alloc_pages_current+0x155/0x260 [ 367.922524] filemap_fault+0x11a1/0x1ad0 [ 367.926587] ext4_filemap_fault+0x84/0xb0 [ 367.930747] __do_fault+0xfa/0x380 [ 367.934289] __handle_mm_fault+0x2497/0x4620 [ 367.938779] ? vm_insert_page+0x7c0/0x7c0 [ 367.942922] ? lock_downgrade+0x740/0x740 [ 367.947073] ? mark_held_locks+0xa6/0xf0 [ 367.951131] handle_mm_fault+0x455/0x9c0 [ 367.955188] __do_page_fault+0x549/0xad0 [ 367.959247] ? spurious_fault+0x640/0x640 [ 367.963387] ? do_page_fault+0x60/0x500 [ 367.967369] ? page_fault+0x2f/0x50 [ 367.970990] page_fault+0x45/0x50 [ 367.974452] RIP: 0000:0x947a7c [ 367.977633] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 367.991286] Mem-Info: [ 368.024574] active_anon:12332 inactive_anon:14852 isolated_anon:0 [ 368.024574] active_file:53 inactive_file:0 isolated_file:0 [ 368.024574] unevictable:0 dirty:0 writeback:0 unstable:0 [ 368.024574] slab_reclaimable:12997 slab_unreclaimable:115060 [ 368.024574] mapped:52618 shmem:15124 pagetables:741 bounce:0 [ 368.024574] free:25104 free_pcp:84 free_cma:0 [ 368.063502] Node 0 active_anon:47428kB inactive_anon:22180kB active_file:92kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 368.141006] Node 1 active_anon:1900kB inactive_anon:37228kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 368.186045] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.250585] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 368.255666] Node 0 DMA32 free:36168kB min:36200kB low:45248kB high:54296kB active_anon:47428kB inactive_anon:22180kB active_file:52kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 368.359482] lowmem_reserve[]: 0 0 0 0 0 [ 368.363516] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.452785] lowmem_reserve[]: 0 0 0 0 0 [ 368.456815] Node 1 Normal free:53172kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:37228kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:392kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 368.546547] lowmem_reserve[]: 0 0 0 0 0 [ 368.558588] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11076kB [ 368.587197] Node 0 DMA32: 1712*4kB (UME) 877*8kB (UME) 270*16kB (ME) 50*32kB (ME) 30*64kB (ME) 15*128kB (UME) 3*256kB (M) 5*512kB (M) 5*1024kB (M) 2*2048kB (UM) 0*4096kB = 36168kB [ 368.654507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 368.690140] Node 1 Normal: 197*4kB (M) 156*8kB (UM) 124*16kB (ME) 82*32kB (M) 51*64kB (M) 16*128kB (ME) 7*256kB (UME) 3*512kB (UME) 1*1024kB (E) 0*2048kB 9*4096kB (U) = 53172kB [ 368.754735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.780052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 368.821093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.854719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 368.891972] 15155 total pagecache pages [ 368.895973] 0 pages in swap cache [ 368.915768] Swap cache stats: add 0, delete 0, find 0/0 [ 368.937678] Free swap = 0kB [ 368.940693] Total swap = 0kB [ 368.943703] 2097051 pages RAM [ 368.946797] 0 pages HighMem/MovableOnly [ 368.984641] 363849 pages reserved [ 368.992915] 0 pages cma reserved [ 368.996293] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 369.044659] Killed process 2448 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 369.094518] oom_reaper: reaped process 2448 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 369.184764] oom_reaper: reaped process 2449 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 369.280645] oom_reaper: reaped process 2627 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 369.353213] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 369.368165] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 369.373384] CPU: 1 PID: 2627 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 369.381158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.390495] Call Trace: [ 369.393077] dump_stack+0x1b2/0x281 [ 369.396686] dump_header+0x178/0x82f [ 369.400378] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 369.405458] ? ___ratelimit+0x2cd/0x530 [ 369.409424] oom_kill_process.cold+0x10/0xa40 [ 369.413935] out_of_memory+0xe3e/0x1190 [ 369.417896] ? oom_killer_disable+0x1c0/0x1c0 [ 369.422407] ? mutex_trylock+0x152/0x1a0 [ 369.426466] __alloc_pages_nodemask+0x23e1/0x2720 [ 369.431294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 369.436113] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 369.441109] ? retint_kernel+0x2d/0x2d [ 369.444998] alloc_pages_current+0x155/0x260 [ 369.449388] __vmalloc_area_node+0x40a/0x680 [ 369.453788] ? __vmalloc_node_range+0x150/0x150 [ 369.458454] ? __get_vm_area_node+0x27d/0x340 [ 369.462945] __vmalloc_node_range+0xbe/0x150 [ 369.467355] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 369.472785] vmalloc_user+0x47/0xa0 [ 369.476397] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 369.480728] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 369.486084] vb2_vmalloc_alloc+0xa6/0x2d0 [ 369.490215] __vb2_queue_alloc+0x47a/0xd90 [ 369.494447] vb2_core_create_bufs+0x279/0x5a0 [ 369.498933] ? __vb2_queue_free+0x7a0/0x7a0 [ 369.503246] ? trace_hardirqs_on+0x10/0x10 [ 369.507470] ? __lock_acquire+0x5fc/0x3f20 [ 369.511704] vb2_create_bufs+0x2e1/0x5b0 [ 369.515831] ? futex_wait_queue_me+0x3bb/0x590 [ 369.520396] ? vb2_thread_start+0x310/0x310 [ 369.524696] ? trace_hardirqs_on+0x10/0x10 [ 369.528911] vb2_ioctl_create_bufs+0x1f7/0x330 [ 369.533502] v4l_create_bufs+0xa4/0x150 [ 369.537454] __video_do_ioctl+0x65b/0x6a0 [ 369.541583] ? video_ioctl2+0x30/0x30 [ 369.545372] ? __might_fault+0x177/0x1b0 [ 369.549411] ? video_ioctl2+0x30/0x30 [ 369.553189] video_usercopy+0xfd/0xe70 [ 369.557098] ? v4l_g_ctrl+0x390/0x390 [ 369.560884] ? lock_acquire+0x170/0x3f0 [ 369.564840] ? lock_downgrade+0x740/0x740 [ 369.568969] ? trace_hardirqs_on+0x10/0x10 [ 369.573213] ? futex_exit_release+0x220/0x220 [ 369.577688] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 369.582769] ? debug_check_no_obj_freed+0x2c0/0x680 [ 369.587765] v4l2_ioctl+0x1bb/0x2f0 [ 369.591367] ? v4l2_open+0x2f0/0x2f0 [ 369.595070] do_vfs_ioctl+0x75a/0xff0 [ 369.598853] ? ioctl_preallocate+0x1a0/0x1a0 [ 369.603238] ? lock_downgrade+0x740/0x740 [ 369.607376] ? __fget+0x225/0x360 [ 369.610840] ? do_vfs_ioctl+0xff0/0xff0 [ 369.614804] ? security_file_ioctl+0x83/0xb0 [ 369.619196] SyS_ioctl+0x7f/0xb0 [ 369.622539] ? do_vfs_ioctl+0xff0/0xff0 [ 369.626503] do_syscall_64+0x1d5/0x640 [ 369.630381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 369.635550] RIP: 0033:0x4665f9 [ 369.638717] RSP: 002b:00007f8cbf58f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.646401] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 369.653647] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 369.660895] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 369.668150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 369.675400] R13: 00007ffc2ec9baff R14: 00007f8cbf58f300 R15: 0000000000022000 [ 369.689662] Mem-Info: [ 369.692105] active_anon:11759 inactive_anon:14852 isolated_anon:0 [ 369.692105] active_file:0 inactive_file:34 isolated_file:0 [ 369.692105] unevictable:0 dirty:0 writeback:0 unstable:0 [ 369.692105] slab_reclaimable:12985 slab_unreclaimable:114888 [ 369.692105] mapped:43900 shmem:15124 pagetables:718 bounce:0 [ 369.692105] free:13918 free_pcp:164 free_cma:0 [ 369.696900] Bluetooth: hci0 command 0x0419 tx timeout [ 369.725416] Node 0 active_anon:45140kB inactive_anon:22180kB active_file:16kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139216kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 369.725447] Node 1 active_anon:1896kB inactive_anon:37228kB active_file:0kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 369.725451] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.725470] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 369.725490] Node 0 DMA32 free:17844kB min:36200kB low:45248kB high:54296kB active_anon:45140kB inactive_anon:22180kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2480kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 369.725510] lowmem_reserve[]: 0 0 0 0 0 [ 369.725548] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.725572] lowmem_reserve[]: 0 0 0 0 0 [ 369.879266] Node 1 Normal free:26864kB min:53696kB low:67120kB high:80544kB active_anon:1896kB inactive_anon:37228kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.907609] lowmem_reserve[]: 0 0 0 0 0 [ 369.911589] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 369.924873] Node 0 DMA32: 1646*4kB (UME) 819*8kB (UME) 227*16kB (UME) 32*32kB (UME) 9*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18624kB [ 369.939689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 369.950418] Node 1 Normal: 195*4kB (M) 153*8kB (M) 123*16kB (UME) 80*32kB (M) 52*64kB (UM) 17*128kB (ME) 6*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (U) 2*4096kB (U) = 26884kB [ 369.966785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.975639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 369.984240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.993087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.001681] 15154 total pagecache pages [ 370.005659] 0 pages in swap cache [ 370.009145] Swap cache stats: add 0, delete 0, find 0/0 [ 370.014499] Free swap = 0kB [ 370.017548] Total swap = 0kB [ 370.020583] 2097051 pages RAM [ 370.023673] 0 pages HighMem/MovableOnly [ 370.027732] 363849 pages reserved [ 370.031193] 0 pages cma reserved [ 370.034534] Out of memory (oom_kill_allocating_task): Kill process 2627 (syz-executor.3) score 0 or sacrifice child [ 370.045231] Killed process 2627 (syz-executor.3) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 370.055474] syz-executor.3: vmalloc: allocation failure, allocated 1693233152 of 4294778880 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 370.059099] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 370.072571] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 370.072595] CPU: 1 PID: 2627 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 370.072601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.072605] Call Trace: [ 370.072627] dump_stack+0x1b2/0x281 [ 370.096324] (null) [ 370.107263] warn_alloc.cold+0x96/0x1cc [ 370.107277] ? zone_watermark_ok_safe+0x220/0x220 [ 370.107286] ? retint_kernel+0x2d/0x2d [ 370.107307] __vmalloc_area_node+0x48a/0x680 [ 370.109876] , order=0, oom_score_adj=0 [ 370.113487] ? __vmalloc_node_range+0x150/0x150 [ 370.115604] in:imklog cpuset= [ 370.119558] ? __get_vm_area_node+0x27d/0x340 [ 370.119570] __vmalloc_node_range+0xbe/0x150 [ 370.119586] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 370.119593] vmalloc_user+0x47/0xa0 [ 370.119603] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 370.124419] / [ 370.128292] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 370.132718] mems_allowed=0-1 [ 370.136644] vb2_vmalloc_alloc+0xa6/0x2d0 [ 370.180814] __vb2_queue_alloc+0x47a/0xd90 [ 370.185052] vb2_core_create_bufs+0x279/0x5a0 [ 370.189537] ? __vb2_queue_free+0x7a0/0x7a0 [ 370.193862] ? trace_hardirqs_on+0x10/0x10 [ 370.198084] ? __lock_acquire+0x5fc/0x3f20 [ 370.202309] vb2_create_bufs+0x2e1/0x5b0 [ 370.206378] ? futex_wait_queue_me+0x3bb/0x590 [ 370.210958] ? vb2_thread_start+0x310/0x310 [ 370.215272] ? trace_hardirqs_on+0x10/0x10 [ 370.219504] vb2_ioctl_create_bufs+0x1f7/0x330 [ 370.224185] v4l_create_bufs+0xa4/0x150 [ 370.228150] __video_do_ioctl+0x65b/0x6a0 [ 370.232291] ? video_ioctl2+0x30/0x30 [ 370.236092] ? __might_fault+0x177/0x1b0 [ 370.240142] ? video_ioctl2+0x30/0x30 [ 370.243942] video_usercopy+0xfd/0xe70 [ 370.247823] ? v4l_g_ctrl+0x390/0x390 [ 370.251610] ? lock_acquire+0x170/0x3f0 [ 370.255572] ? lock_downgrade+0x740/0x740 [ 370.259708] ? trace_hardirqs_on+0x10/0x10 [ 370.263943] ? futex_exit_release+0x220/0x220 [ 370.268429] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 370.273539] ? debug_check_no_obj_freed+0x2c0/0x680 [ 370.278572] v4l2_ioctl+0x1bb/0x2f0 [ 370.282206] ? v4l2_open+0x2f0/0x2f0 [ 370.285924] do_vfs_ioctl+0x75a/0xff0 [ 370.289722] ? ioctl_preallocate+0x1a0/0x1a0 [ 370.294120] ? lock_downgrade+0x740/0x740 [ 370.298259] ? __fget+0x225/0x360 [ 370.301713] ? do_vfs_ioctl+0xff0/0xff0 [ 370.305678] ? security_file_ioctl+0x83/0xb0 [ 370.310082] SyS_ioctl+0x7f/0xb0 [ 370.313435] ? do_vfs_ioctl+0xff0/0xff0 [ 370.317398] do_syscall_64+0x1d5/0x640 [ 370.321278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 370.326452] RIP: 0033:0x4665f9 [ 370.329626] RSP: 002b:00007f8cbf58f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.337323] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 370.344581] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 370.351852] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 370.359106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 370.366360] R13: 00007ffc2ec9baff R14: 00007f8cbf58f300 R15: 0000000000022000 [ 370.373636] CPU: 0 PID: 2427 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 370.374078] Mem-Info: [ 370.381015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.381019] Call Trace: [ 370.381036] dump_stack+0x1b2/0x281 [ 370.381049] dump_header+0x178/0x82f [ 370.381061] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 370.383464] active_anon:11759 inactive_anon:14852 isolated_anon:0 [ 370.383464] active_file:16 inactive_file:15 isolated_file:0 [ 370.383464] unevictable:0 dirty:0 writeback:0 unstable:0 [ 370.383464] slab_reclaimable:12979 slab_unreclaimable:114882 [ 370.383464] mapped:43914 shmem:15124 pagetables:695 bounce:0 [ 370.383464] free:14118 free_pcp:0 free_cma:0 [ 370.392797] ? ___ratelimit+0x2cd/0x530 [ 370.392808] oom_kill_process.cold+0x10/0xa40 [ 370.392828] out_of_memory+0xe3e/0x1190 [ 370.392841] ? oom_killer_disable+0x1c0/0x1c0 [ 370.395411] Node 0 active_anon:45140kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.399005] ? mutex_trylock+0x152/0x1a0 [ 370.399018] __alloc_pages_nodemask+0x23e1/0x2720 [ 370.399038] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 370.399063] alloc_pages_current+0x155/0x260 [ 370.402772] Node 1 active_anon:1896kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.407852] filemap_fault+0x11a1/0x1ad0 [ 370.407871] ext4_filemap_fault+0x84/0xb0 [ 370.407881] __do_fault+0xfa/0x380 [ 370.407906] __handle_mm_fault+0x2497/0x4620 [ 370.441019] Node 0 [ 370.444915] ? vm_insert_page+0x7c0/0x7c0 [ 370.449415] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.453334] ? lock_downgrade+0x740/0x740 [ 370.457856] lowmem_reserve[]: [ 370.485491] ? mark_held_locks+0xa6/0xf0 [ 370.485504] handle_mm_fault+0x455/0x9c0 [ 370.485517] __do_page_fault+0x549/0xad0 [ 370.485528] ? spurious_fault+0x640/0x640 [ 370.485536] ? do_page_fault+0x60/0x500 [ 370.485544] ? page_fault+0x2f/0x50 [ 370.485554] page_fault+0x45/0x50 [ 370.489623] 0 [ 370.494426] RIP: ae810da3:0x1f9f [ 370.499284] 2717 [ 370.503628] RSP: 0000:0000000000000004 EFLAGS: 7f99ae810da0 [ 370.524016] Mem-Info: [ 370.530651] 2718 2718 2718 [ 370.530667] Node 0 DMA32 free:18624kB min:36200kB low:45248kB high:54296kB active_anon:45140kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.530690] lowmem_reserve[]: 0 0 0 0 0 [ 370.530711] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.530730] lowmem_reserve[]: 0 0 [ 370.547041] active_anon:11759 inactive_anon:14852 isolated_anon:0 [ 370.547041] active_file:16 inactive_file:15 isolated_file:0 [ 370.547041] unevictable:0 dirty:0 writeback:0 unstable:0 [ 370.547041] slab_reclaimable:12979 slab_unreclaimable:114882 [ 370.547041] mapped:43914 shmem:15124 pagetables:695 bounce:0 [ 370.547041] free:14118 free_pcp:0 free_cma:0 [ 370.549152] 0 [ 370.553310] Node 0 active_anon:45140kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.578842] 0 0 [ 370.578856] Node 1 Normal free:26884kB min:53696kB low:67120kB high:80544kB active_anon:1896kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.578878] lowmem_reserve[]: 0 0 0 0 0 [ 370.578896] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 370.595377] Node 1 active_anon:1896kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.598360] Node 0 DMA32: 1646*4kB (UME) 819*8kB (UME) 227*16kB (UME) 32*32kB (UME) 9*64kB (UME) 2*128kB (UM) 0*256kB [ 370.608019] Node 0 [ 370.610169] 0*512kB [ 370.613579] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.615350] 0*1024kB [ 370.631039] lowmem_reserve[]: [ 370.631896] 0*2048kB [ 370.673414] 0 [ 370.689986] 0*4096kB = 18624kB [ 370.689996] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 370.690046] Node 1 Normal: 195*4kB (M) 153*8kB (M) 123*16kB (UME) 80*32kB (M) 52*64kB (UM) 17*128kB (ME) 6*256kB (ME) [ 370.705863] 2717 [ 370.726674] 2*512kB (ME) 2*1024kB (UE) 1*2048kB (U) 2*4096kB (U) = 26884kB [ 370.726712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.726719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.726726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.726732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.726736] 15155 total pagecache pages [ 370.726746] 0 pages in swap cache [ 370.726751] Swap cache stats: add 0, delete 0, find 0/0 [ 370.726754] Free swap = 0kB [ 370.726758] Total swap = 0kB [ 370.726765] 2097051 pages RAM [ 370.741092] 2718 [ 370.756472] 0 pages HighMem/MovableOnly [ 370.775093] 2718 [ 370.786660] 363849 pages reserved [ 370.786665] 0 pages cma reserved [ 370.993222] 2718 [ 370.995285] Node 0 DMA32 free:18624kB min:36200kB low:45248kB high:54296kB active_anon:45140kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.026185] lowmem_reserve[]: 0 0 0 0 0 [ 371.030236] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.060006] lowmem_reserve[]: 0 0 0 0 0 [ 371.064013] Node 1 Normal free:26884kB min:53696kB low:67120kB high:80544kB active_anon:1896kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.095112] lowmem_reserve[]: 0 0 0 0 0 [ 371.099186] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 371.114783] Node 0 DMA32: 1646*4kB (UME) 830*8kB (UME) 227*16kB (UME) 32*32kB (UME) 9*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18712kB [ 371.132567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 371.143502] Node 1 Normal: 195*4kB (M) 153*8kB (M) 123*16kB (UME) 80*32kB (M) 52*64kB (UM) 17*128kB (ME) 6*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (U) 2*4096kB (U) = 26884kB [ 371.162225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.171106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 371.181856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.192974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 371.203782] 15155 total pagecache pages [ 371.210027] 0 pages in swap cache [ 371.213475] Swap cache stats: add 0, delete 0, find 0/0 [ 371.221070] Free swap = 0kB [ 371.224079] Total swap = 0kB [ 371.229488] 2097051 pages RAM [ 371.232611] 0 pages HighMem/MovableOnly [ 371.236658] 363849 pages reserved [ 371.242332] 0 pages cma reserved [ 371.245694] Out of memory (oom_kill_allocating_task): Kill process 2427 (in:imklog) score 0 or sacrifice child [ 371.258834] Killed process 2425 (rsyslogd) total-vm:254332kB, anon-rss:676kB, file-rss:0kB, shmem-rss:0kB [ 371.269940] oom_reaper: reaped process 2425 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 371.289316] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 371.307247] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 371.312036] CPU: 1 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 371.319468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.328811] Call Trace: [ 371.331399] dump_stack+0x1b2/0x281 [ 371.335021] dump_header+0x178/0x82f [ 371.338727] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 371.343818] ? ___ratelimit+0x2cd/0x530 [ 371.347785] oom_kill_process.cold+0x10/0xa40 [ 371.352285] out_of_memory+0xe3e/0x1190 [ 371.356253] ? oom_killer_disable+0x1c0/0x1c0 [ 371.360739] ? mutex_trylock+0x152/0x1a0 [ 371.364790] __alloc_pages_nodemask+0x23e1/0x2720 [ 371.369637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 371.374486] alloc_pages_current+0x155/0x260 [ 371.378884] filemap_fault+0x11a1/0x1ad0 [ 371.382944] ext4_filemap_fault+0x84/0xb0 [ 371.387083] __do_fault+0xfa/0x380 [ 371.390620] __handle_mm_fault+0x2497/0x4620 [ 371.395022] ? vm_insert_page+0x7c0/0x7c0 [ 371.399163] ? setup_sigcontext+0x820/0x820 [ 371.403499] ? mark_held_locks+0xa6/0xf0 [ 371.407556] handle_mm_fault+0x455/0x9c0 [ 371.411633] __do_page_fault+0x549/0xad0 [ 371.415687] ? spurious_fault+0x640/0x640 [ 371.419825] ? do_page_fault+0x60/0x500 [ 371.423787] ? page_fault+0x2f/0x50 [ 371.427403] page_fault+0x45/0x50 [ 371.430840] RIP: 8d1af8: (null) [ 371.434883] RSP: 994e78:000000c000047888 EFLAGS: c0008d1ae8 [ 371.439913] Mem-Info: [ 371.448331] active_anon:11559 inactive_anon:14852 isolated_anon:0 [ 371.448331] active_file:16 inactive_file:15 isolated_file:0 [ 371.448331] unevictable:0 dirty:0 writeback:0 unstable:0 [ 371.448331] slab_reclaimable:12978 slab_unreclaimable:114870 [ 371.448331] mapped:43914 shmem:15124 pagetables:658 bounce:0 [ 371.448331] free:14355 free_pcp:36 free_cma:0 [ 371.486781] Node 0 active_anon:45140kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 371.519177] Node 1 active_anon:1096kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 371.550929] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.581648] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 371.586922] Node 0 DMA32 free:18672kB min:36200kB low:45248kB high:54296kB active_anon:45140kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2388kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 371.620168] lowmem_reserve[]: 0 0 0 0 0 [ 371.624175] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.654281] lowmem_reserve[]: 0 0 0 0 0 [ 371.658331] Node 1 Normal free:27784kB min:53696kB low:67120kB high:80544kB active_anon:1096kB inactive_anon:37228kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:244kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 371.691356] lowmem_reserve[]: 0 0 0 0 0 [ 371.695358] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 371.713520] Node 0 DMA32: 1651*4kB (UME) 829*8kB (UME) 227*16kB (UME) 31*32kB (UME) 10*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18756kB [ 371.732805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 371.743744] Node 1 Normal: 170*4kB (M) 134*8kB (M) 109*16kB (UME) 76*32kB (UM) 49*64kB (UM) 19*128kB (ME) 8*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (U) = 27880kB [ 371.764813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.773719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 371.786675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.795653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 371.808801] 15155 total pagecache pages [ 371.812789] 0 pages in swap cache [ 371.816250] Swap cache stats: add 0, delete 0, find 0/0 [ 371.823987] Free swap = 0kB [ 371.829328] Total swap = 0kB [ 371.832347] 2097051 pages RAM [ 371.835444] 0 pages HighMem/MovableOnly [ 371.846271] 363849 pages reserved [ 371.852017] 0 pages cma reserved [ 371.855382] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 371.874863] Killed process 2080 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 371.895600] oom_reaper: reaped process 2080 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 371.910888] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 371.966563] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 372.004519] CPU: 0 PID: 7990 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 372.011995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.021434] Call Trace: [ 372.024023] dump_stack+0x1b2/0x281 [ 372.027649] dump_header+0x178/0x82f [ 372.031359] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 372.036475] ? ___ratelimit+0x2cd/0x530 [ 372.040457] oom_kill_process.cold+0x10/0xa40 [ 372.044966] out_of_memory+0xe3e/0x1190 [ 372.048953] ? oom_killer_disable+0x1c0/0x1c0 [ 372.053442] ? mutex_trylock+0x152/0x1a0 [ 372.057497] __alloc_pages_nodemask+0x23e1/0x2720 [ 372.062355] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 372.067218] alloc_pages_current+0x155/0x260 [ 372.071620] filemap_fault+0x11a1/0x1ad0 [ 372.075708] ext4_filemap_fault+0x84/0xb0 [ 372.079865] __do_fault+0xfa/0x380 [ 372.083401] __handle_mm_fault+0x2497/0x4620 [ 372.087819] ? vm_insert_page+0x7c0/0x7c0 [ 372.091959] ? __might_fault+0x177/0x1b0 [ 372.096042] ? mark_held_locks+0xa6/0xf0 [ 372.100114] handle_mm_fault+0x455/0x9c0 [ 372.104172] __do_page_fault+0x549/0xad0 [ 372.108233] ? spurious_fault+0x640/0x640 [ 372.112389] ? do_page_fault+0x60/0x500 [ 372.116451] ? page_fault+0x2f/0x50 [ 372.120067] page_fault+0x45/0x50 [ 372.123517] RIP: 0000:0x947910 [ 372.126700] RSP: 184f7e0:00007ffd6e396ce0 EFLAGS: 000000f7 [ 372.141364] Mem-Info: [ 372.156944] active_anon:11497 inactive_anon:14852 isolated_anon:0 [ 372.156944] active_file:40 inactive_file:816 isolated_file:0 [ 372.156944] unevictable:0 dirty:0 writeback:0 unstable:0 [ 372.156944] slab_reclaimable:12978 slab_unreclaimable:114855 [ 372.156944] mapped:35635 shmem:15124 pagetables:620 bounce:0 [ 372.156944] free:72308 free_pcp:446 free_cma:0 [ 372.201573] Node 0 active_anon:44992kB inactive_anon:22180kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 372.337835] Node 1 active_anon:996kB inactive_anon:37228kB active_file:104kB inactive_file:4808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40384kB dirty:0kB writeback:0kB shmem:37440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 372.428164] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.496930] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 372.502029] Node 0 DMA32 free:44624kB min:36200kB low:45248kB high:54296kB active_anon:44992kB inactive_anon:22180kB active_file:556kB inactive_file:5256kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2212kB bounce:0kB free_pcp:1388kB local_pcp:652kB free_cma:0kB [ 372.567048] lowmem_reserve[]: 0 0 0 0 0 [ 372.571083] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.641879] lowmem_reserve[]: 0 0 0 0 0 [ 372.645909] Node 1 Normal free:653564kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:37228kB active_file:3104kB inactive_file:3808kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:416kB bounce:0kB free_pcp:1000kB local_pcp:620kB free_cma:0kB [ 372.681441] lowmem_reserve[]: 0 0 0 0 0 [ 372.691058] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 372.709903] Node 0 DMA32: 1544*4kB (UME) 556*8kB (ME) 131*16kB (UME) 300*32kB (UME) 273*64kB (UME) 7*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40944kB [ 372.730991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 372.742778] Node 1 Normal: 25*4kB (UM) 16*8kB (U) 17*16kB (UE) 21*32kB (U) 42*64kB (UM) 37*128kB (UME) 25*256kB (UME) 21*512kB (UME) 21*1024kB (UME) 14*2048kB (U) 164*4096kB (U) = 747668kB [ 372.764728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.773770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 372.788024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.801460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 372.812587] 18488 total pagecache pages [ 372.819770] 0 pages in swap cache [ 372.823566] Swap cache stats: add 0, delete 0, find 0/0 [ 372.831653] Free swap = 0kB [ 372.832103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.835337] Total swap = 0kB [ 372.852955] 2097051 pages RAM [ 372.856390] 0 pages HighMem/MovableOnly [ 372.857087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.862154] 363849 pages reserved [ 372.878858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.879012] 0 pages cma reserved [ 372.885574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.899075] device bridge_slave_1 left promiscuous mode [ 372.901581] Out of memory (oom_kill_allocating_task): Kill process 7990 (syz-fuzzer) score 0 or sacrifice child [ 372.906287] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.922610] Killed process 1292 (syz-executor.3) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 372.945308] device bridge_slave_0 left promiscuous mode [ 372.949473] oom_reaper: reaped process 1292 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 372.954355] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.003173] device veth1_macvtap left promiscuous mode [ 373.012660] device veth0_macvtap left promiscuous mode [ 373.019299] device veth1_vlan left promiscuous mode [ 373.024346] device veth0_vlan left promiscuous mode [ 373.164119] device hsr_slave_1 left promiscuous mode [ 373.176493] device hsr_slave_0 left promiscuous mode [ 373.199355] team0 (unregistering): Port device team_slave_1 removed [ 373.215743] team0 (unregistering): Port device team_slave_0 removed [ 373.225813] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 373.243283] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 373.285953] bond0 (unregistering): Released all slaves 00:47:34 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:47:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x248, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 374.939443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.946159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.959343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.966044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.978301] device bridge_slave_1 left promiscuous mode [ 374.983868] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.996802] device bridge_slave_0 left promiscuous mode [ 375.003156] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.016745] device veth1_macvtap left promiscuous mode [ 375.022924] device veth0_macvtap left promiscuous mode [ 375.032464] device veth1_vlan left promiscuous mode [ 375.038402] device veth0_vlan left promiscuous mode [ 375.171303] device hsr_slave_1 left promiscuous mode [ 375.181666] device hsr_slave_0 left promiscuous mode [ 375.200095] team0 (unregistering): Port device team_slave_1 removed [ 375.213596] team0 (unregistering): Port device team_slave_0 removed [ 375.223845] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 375.240103] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 375.280069] bond0 (unregistering): Released all slaves [ 376.316103] IPVS: ftp: loaded support on port[0] = 21 [ 376.483950] chnl_net:caif_netlink_parms(): no params data found 00:47:37 executing program 2: ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000200)={0x9, {0x1, 0x1, 0x7fffffff, 0x9}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:47:37 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:47:37 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 00:47:37 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x0, 0x0, 0x2, 0x2}}, 0x2e) 00:47:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1c8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 376.617387] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.624685] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.640034] device bridge_slave_0 entered promiscuous mode 00:47:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:47:37 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:47:37 executing program 2: ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000200)={0x9, {0x1, 0x1, 0x7fffffff, 0x9}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) [ 376.672861] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.693715] bridge0: port 2(bridge_slave_1) entered disabled state 00:47:37 executing program 2: ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000200)={0x9, {0x1, 0x1, 0x7fffffff, 0x9}}) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:47:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 376.738860] device bridge_slave_1 entered promiscuous mode 00:47:37 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) [ 376.842660] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 376.875170] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 376.903864] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 376.915052] team0: Port device team_slave_0 added [ 376.924969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 376.933008] team0: Port device team_slave_1 added [ 376.957101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.963621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.989376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.005025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.011387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.038231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.052911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 377.060587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 377.099572] device hsr_slave_0 entered promiscuous mode [ 377.105653] device hsr_slave_1 entered promiscuous mode [ 377.119186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 377.130830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 377.259743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.274686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.284640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.297579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.306592] device bridge_slave_1 left promiscuous mode [ 377.315339] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.323664] device bridge_slave_0 left promiscuous mode [ 377.332042] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.342431] device veth1_macvtap left promiscuous mode [ 377.350605] device veth0_macvtap left promiscuous mode [ 377.355977] device veth1_vlan left promiscuous mode [ 377.361923] device veth0_vlan left promiscuous mode [ 377.484456] device hsr_slave_1 left promiscuous mode [ 377.498224] device hsr_slave_0 left promiscuous mode [ 377.519135] team0 (unregistering): Port device team_slave_1 removed [ 377.533851] team0 (unregistering): Port device team_slave_0 removed [ 377.544621] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 377.561308] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 377.618582] bond0 (unregistering): Released all slaves [ 377.643468] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.649915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.656969] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.663348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.676015] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.683893] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.751463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.788089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 377.822094] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 377.837125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.844141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.870209] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 377.876309] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.890244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 377.907183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.915051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.927398] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.933781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.945091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 377.953067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.957019] Bluetooth: hci0 command 0x0409 tx timeout [ 377.964035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.973920] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.980345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.994343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 378.002421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.016560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 378.031815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.045848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 378.053980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.063365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.074763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 378.082445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.090764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.100557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.111609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 378.119618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.128375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.138869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 378.148041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.155763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.165239] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 378.172248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.192867] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 378.203298] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 378.212393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.223007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.235067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.331686] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 378.344649] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 378.361967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.372759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.503645] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 378.516014] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 378.537667] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 378.557422] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 378.564073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.572218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.589398] device veth0_vlan entered promiscuous mode [ 378.597489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.604498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.630320] device veth1_vlan entered promiscuous mode [ 378.636359] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 378.665808] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 378.685621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.697652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 378.710274] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 378.740022] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 378.760101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.777639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.787206] device veth0_macvtap entered promiscuous mode [ 378.793525] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 378.825190] device veth1_macvtap entered promiscuous mode [ 378.840822] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 378.850449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 378.864556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 378.873961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 378.892137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.921188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 378.946128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.974908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 379.009804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.025773] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 379.041325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.053820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 379.075060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.084518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 379.098107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.108776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 379.120835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.133174] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 379.142413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.153073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.163881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.172720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.182827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.193070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.203012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.330289] IPVS: ftp: loaded support on port[0] = 21 [ 379.434262] IPVS: ftp: loaded support on port[0] = 21 [ 379.650549] chnl_net:caif_netlink_parms(): no params data found [ 379.841044] chnl_net:caif_netlink_parms(): no params data found [ 379.938493] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.945575] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.959965] device bridge_slave_0 entered promiscuous mode [ 379.971778] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.984176] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.995924] device bridge_slave_1 entered promiscuous mode [ 380.026950] Bluetooth: hci0 command 0x041b tx timeout [ 380.061420] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 380.073950] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.081963] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.093742] device bridge_slave_0 entered promiscuous mode [ 380.103853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 380.123226] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.130586] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.142392] device bridge_slave_1 entered promiscuous mode [ 380.203102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 380.211868] team0: Port device team_slave_0 added [ 380.224104] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 380.233693] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 380.246289] team0: Port device team_slave_1 added [ 380.255109] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 380.323779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.331366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.357547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.368349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 380.376561] team0: Port device team_slave_0 added [ 380.382454] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 380.398926] team0: Port device team_slave_1 added [ 380.418778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.425045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.457064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.483728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.493989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.526090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.538082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 380.549044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.555620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.582373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.597861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 380.615730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 380.624389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 380.654055] device hsr_slave_0 entered promiscuous mode [ 380.660815] device hsr_slave_1 entered promiscuous mode [ 380.680833] device hsr_slave_0 entered promiscuous mode [ 380.688006] device hsr_slave_1 entered promiscuous mode [ 380.694766] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 380.703387] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 380.712441] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 380.720433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 380.903447] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 380.927959] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 380.986919] Bluetooth: hci1 command 0x0409 tx timeout [ 380.989610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.011841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.019410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 381.031507] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 381.040188] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 381.048751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.055746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.066987] Bluetooth: hci2 command 0x0409 tx timeout [ 381.071781] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 381.081670] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 381.088904] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.095524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.103985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.114887] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 381.124955] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.133482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 381.146700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.162809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.171325] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.177743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.192364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 381.202674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 381.214788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.224530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.239535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.247949] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.254323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.262736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.271408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.281801] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.292617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.307641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 381.315089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.326649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.335076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.348019] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.354383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.368715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 381.382326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 381.392040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 381.406236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.414429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.422559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.434627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 381.442050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.450217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.459824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.468517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 381.477746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 381.488687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 381.496026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.504943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.513130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.521615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.529701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.540027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 381.552279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 381.566263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 381.573585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.586022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.594377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.608571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.616247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.625270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.635364] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 381.642986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.654119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 381.664412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.673558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.684171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.699295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 381.717379] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 381.723680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.731773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.741182] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 381.747821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.756117] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 381.764359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.772476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.785677] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 381.798466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.809764] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 381.815995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.823836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.844351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.960617] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 381.978281] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 381.985313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.997490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.024583] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 382.041962] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 382.054117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.062839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.091722] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 382.105096] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 382.115808] Bluetooth: hci0 command 0x040f tx timeout [ 382.122981] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 382.138793] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 382.145428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.158060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.172214] device veth0_vlan entered promiscuous mode [ 382.178808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.185789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.198160] device veth1_vlan entered promiscuous mode [ 382.204222] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 382.216571] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 382.230461] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 382.241700] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 382.249755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.257765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.265051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.280038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.292368] device veth0_macvtap entered promiscuous mode [ 382.301896] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 382.314284] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 382.322694] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 382.331226] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 382.340252] device veth1_macvtap entered promiscuous mode [ 382.346604] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 382.357655] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 382.364300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 382.373451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.381646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.392036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.404670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 382.417401] device veth0_vlan entered promiscuous mode [ 382.429834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.439919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.452044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 382.462633] device veth1_vlan entered promiscuous mode [ 382.471454] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 382.483876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 382.496447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.507990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 382.522174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.533192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 382.546387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.557369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 382.570377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.581830] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 382.593621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.605782] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 382.616761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.625476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.636759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.645648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.664390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 382.680318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.692178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 382.704895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.715634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 382.729655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.740052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 382.754623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.766168] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 382.776687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.790337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.799514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.815131] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 382.845360] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 382.862974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.875166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.888619] device veth0_macvtap entered promiscuous mode [ 382.894917] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 382.911570] device veth1_macvtap entered promiscuous mode [ 382.921943] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 382.932104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 382.943533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 382.954292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 382.964463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.974468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 382.988932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.000941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 383.012356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.024398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 383.035845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.047882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 383.060273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.071302] Bluetooth: hci1 command 0x041b tx timeout [ 383.081896] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 383.090744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.134225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.148098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.155281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.166588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.177728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 383.188297] Bluetooth: hci2 command 0x041b tx timeout [ 383.194296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.204076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 383.214673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.224213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 383.235091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.244695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 383.254729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.264475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 383.274566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.285200] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 383.292502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.305394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.313980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.187733] Bluetooth: hci0 command 0x0419 tx timeout [ 384.562765] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 384.623515] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 384.647414] CPU: 0 PID: 3538 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 384.655333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.664691] Call Trace: [ 384.667289] dump_stack+0x1b2/0x281 [ 384.670921] dump_header+0x178/0x82f [ 384.674635] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 384.679734] ? ___ratelimit+0x2cd/0x530 [ 384.683710] oom_kill_process.cold+0x10/0xa40 [ 384.688211] out_of_memory+0xe3e/0x1190 [ 384.692188] ? oom_killer_disable+0x1c0/0x1c0 [ 384.696677] ? mutex_trylock+0x152/0x1a0 [ 384.700739] __alloc_pages_nodemask+0x23e1/0x2720 [ 384.705590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 384.710446] alloc_pages_current+0x155/0x260 [ 384.714857] filemap_fault+0x11a1/0x1ad0 [ 384.718925] ext4_filemap_fault+0x84/0xb0 [ 384.723066] __do_fault+0xfa/0x380 [ 384.726604] __handle_mm_fault+0x2497/0x4620 [ 384.731028] ? vm_insert_page+0x7c0/0x7c0 [ 384.735172] ? vfs_statx_fd+0x6d/0xd0 [ 384.738982] ? mark_held_locks+0xa6/0xf0 [ 384.743043] handle_mm_fault+0x455/0x9c0 [ 384.747103] __do_page_fault+0x549/0xad0 [ 384.751247] ? spurious_fault+0x640/0x640 [ 384.755402] ? do_page_fault+0x60/0x500 [ 384.759369] ? page_fault+0x2f/0x50 [ 384.762978] page_fault+0x45/0x50 [ 384.766420] RIP: 42dce000:0x801 [ 384.769675] RSP: 0000:0000000000000000 EFLAGS: 7fe3429a0cb6 [ 384.770975] Mem-Info: [ 384.779113] active_anon:12779 inactive_anon:14853 isolated_anon:0 [ 384.779113] active_file:51 inactive_file:0 isolated_file:0 [ 384.779113] unevictable:0 dirty:1 writeback:0 unstable:0 [ 384.779113] slab_reclaimable:12928 slab_unreclaimable:112535 [ 384.779113] mapped:52726 shmem:15124 pagetables:781 bounce:0 [ 384.779113] free:25235 free_pcp:30 free_cma:0 [ 384.817239] Node 0 active_anon:48296kB inactive_anon:22180kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174104kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 384.849136] Node 1 active_anon:2820kB inactive_anon:37232kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36800kB dirty:4kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 384.916461] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.954185] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 384.959491] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:48284kB inactive_anon:22180kB active_file:180kB inactive_file:128kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2512kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 384.988997] lowmem_reserve[]: 0 0 0 0 0 [ 384.993005] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.019761] lowmem_reserve[]: 0 0 0 0 0 [ 385.023761] Node 1 Normal free:53304kB min:53696kB low:67120kB high:80544kB active_anon:2820kB inactive_anon:37232kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:612kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.053168] lowmem_reserve[]: 0 0 0 0 0 [ 385.057209] Node 0 DMA: 1*4kB (M) 2*8kB (M) 1*16kB (U) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11076kB [ 385.072543] Node 0 DMA32: 1777*4kB (UME) 891*8kB (UME) 291*16kB (UME) 61*32kB (UME) 34*64kB (UME) 11*128kB (ME) 6*256kB (M) 6*512kB (M) 3*1024kB (UM) 0*2048kB 1*4096kB (M) = 36204kB [ 385.089532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 385.100311] Node 1 Normal: 222*4kB (M) 167*8kB (UM) 130*16kB (UME) 75*32kB (M) 16*64kB (M) 15*128kB (UME) 8*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 9*4096kB (U) = 53680kB [ 385.116810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.125703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 385.134365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.143255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 385.152352] Bluetooth: hci1 command 0x040f tx timeout [ 385.158415] 15158 total pagecache pages [ 385.162397] 0 pages in swap cache [ 385.165875] Swap cache stats: add 0, delete 0, find 0/0 [ 385.171270] Free swap = 0kB [ 385.174298] Total swap = 0kB [ 385.177661] 2097051 pages RAM [ 385.180792] 0 pages HighMem/MovableOnly [ 385.184737] 363849 pages reserved [ 385.188255] 0 pages cma reserved [ 385.191616] Out of memory (oom_kill_allocating_task): Kill process 3538 (systemd-cgroups) score 0 or sacrifice child [ 385.202418] Killed process 3538 (systemd-cgroups) total-vm:19068kB, anon-rss:96kB, file-rss:0kB, shmem-rss:0kB [ 385.213142] oom_reaper: reaped process 3538 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 385.228747] Bluetooth: hci2 command 0x040f tx timeout [ 385.353822] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 385.392095] in:imklog cpuset=/ mems_allowed=0-1 [ 385.396860] CPU: 1 PID: 2735 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 385.404214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.413559] Call Trace: [ 385.416147] dump_stack+0x1b2/0x281 [ 385.419773] dump_header+0x178/0x82f [ 385.423492] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 385.428593] ? ___ratelimit+0x2cd/0x530 [ 385.432563] oom_kill_process.cold+0x10/0xa40 [ 385.437064] out_of_memory+0xe3e/0x1190 [ 385.441040] ? oom_killer_disable+0x1c0/0x1c0 [ 385.445527] ? mutex_trylock+0x152/0x1a0 [ 385.449586] __alloc_pages_nodemask+0x23e1/0x2720 [ 385.454434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 385.459291] alloc_pages_current+0x155/0x260 [ 385.463716] filemap_fault+0x11a1/0x1ad0 [ 385.467803] ext4_filemap_fault+0x84/0xb0 [ 385.471946] __do_fault+0xfa/0x380 [ 385.475481] __handle_mm_fault+0x2497/0x4620 [ 385.479885] ? vm_insert_page+0x7c0/0x7c0 [ 385.484030] ? lock_downgrade+0x740/0x740 [ 385.488171] ? mark_held_locks+0xa6/0xf0 [ 385.492216] handle_mm_fault+0x455/0x9c0 [ 385.496262] __do_page_fault+0x549/0xad0 [ 385.500315] ? spurious_fault+0x640/0x640 [ 385.504457] ? do_page_fault+0x60/0x500 [ 385.508426] ? page_fault+0x2f/0x50 [ 385.512064] page_fault+0x45/0x50 [ 385.515511] RIP: 1fa0:0x1f9f [ 385.518517] RSP: 0000:000055d3b10749d0 EFLAGS: 7fe5f2650da0 [ 385.518711] Mem-Info: [ 385.526888] active_anon:12779 inactive_anon:14853 isolated_anon:0 [ 385.526888] active_file:13 inactive_file:30 isolated_file:0 [ 385.526888] unevictable:0 dirty:0 writeback:0 unstable:0 [ 385.526888] slab_reclaimable:12928 slab_unreclaimable:112449 [ 385.526888] mapped:52720 shmem:15124 pagetables:781 bounce:0 [ 385.526888] free:25215 free_pcp:48 free_cma:0 [ 385.560142] Node 0 active_anon:48296kB inactive_anon:22180kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 385.598245] Node 1 active_anon:2820kB inactive_anon:37232kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36792kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 385.632198] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.661040] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 385.666095] Node 0 DMA32 free:35788kB min:36200kB low:45248kB high:54296kB active_anon:48204kB inactive_anon:22180kB active_file:88kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 385.695072] lowmem_reserve[]: 0 0 0 0 0 [ 385.699106] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.725149] lowmem_reserve[]: 0 0 0 0 0 [ 385.729182] Node 1 Normal free:53616kB min:53696kB low:67120kB high:80544kB active_anon:2796kB inactive_anon:37232kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:612kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 385.757917] lowmem_reserve[]: 0 0 0 0 0 [ 385.761886] Node 0 DMA: 1*4kB (M) 2*8kB (M) 1*16kB (U) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11076kB [ 385.776470] Node 0 DMA32: 1771*4kB (MEH) 885*8kB (MEH) 291*16kB (MEH) 58*32kB (MEH) 32*64kB (ME) 10*128kB (ME) 4*256kB (M) 7*512kB (MH) 5*1024kB (MH) 1*2048kB (U) 0*4096kB = 35780kB [ 385.792933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 385.803653] Node 1 Normal: 220*4kB (M) 168*8kB (M) 128*16kB (ME) 76*32kB (M) 17*64kB (UM) 14*128kB (ME) 8*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 9*4096kB (U) = 53616kB [ 385.820020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.828909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 385.837535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.846361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 385.855268] 15158 total pagecache pages [ 385.859281] 0 pages in swap cache [ 385.862726] Swap cache stats: add 0, delete 0, find 0/0 [ 385.868294] Free swap = 0kB [ 385.871321] Total swap = 0kB [ 385.874329] 2097051 pages RAM [ 385.877493] 0 pages HighMem/MovableOnly [ 385.881473] 363849 pages reserved [ 385.884920] 0 pages cma reserved [ 385.888372] Out of memory (oom_kill_allocating_task): Kill process 2735 (in:imklog) score 0 or sacrifice child [ 385.898620] Killed process 2730 (rsyslogd) total-vm:254332kB, anon-rss:804kB, file-rss:0kB, shmem-rss:0kB [ 385.910487] oom_reaper: reaped process 2730 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 386.153501] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 386.173396] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 386.178572] CPU: 1 PID: 3002 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 386.186375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.195711] Call Trace: [ 386.198283] dump_stack+0x1b2/0x281 [ 386.201896] dump_header+0x178/0x82f [ 386.205591] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 386.210673] ? ___ratelimit+0x2cd/0x530 [ 386.214625] oom_kill_process.cold+0x10/0xa40 [ 386.219103] out_of_memory+0xe3e/0x1190 [ 386.223058] ? oom_killer_disable+0x1c0/0x1c0 [ 386.227539] ? mutex_trylock+0x152/0x1a0 [ 386.231601] __alloc_pages_nodemask+0x23e1/0x2720 [ 386.236452] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 386.241292] alloc_pages_current+0x155/0x260 [ 386.245691] filemap_fault+0x11a1/0x1ad0 [ 386.249758] ext4_filemap_fault+0x84/0xb0 [ 386.253895] __do_fault+0xfa/0x380 [ 386.257414] __handle_mm_fault+0x2497/0x4620 [ 386.262852] ? vm_insert_page+0x7c0/0x7c0 [ 386.266986] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 386.271387] ? nanosleep_copyout+0x100/0x100 [ 386.275792] ? mark_held_locks+0xa6/0xf0 [ 386.279850] handle_mm_fault+0x455/0x9c0 [ 386.283909] __do_page_fault+0x549/0xad0 [ 386.287975] ? spurious_fault+0x640/0x640 [ 386.292141] ? do_page_fault+0x60/0x500 [ 386.296093] ? page_fault+0x2f/0x50 [ 386.299705] page_fault+0x45/0x50 [ 386.303183] RIP: 5dac3:0x4 [ 386.306008] RSP: 0003:00007ffc8953c4ac EFLAGS: 00000032 [ 386.309289] Mem-Info: [ 386.317124] active_anon:12478 inactive_anon:14853 isolated_anon:0 [ 386.317124] active_file:6 inactive_file:9 isolated_file:0 [ 386.317124] unevictable:0 dirty:0 writeback:0 unstable:0 [ 386.317124] slab_reclaimable:12928 slab_unreclaimable:112465 [ 386.317124] mapped:52738 shmem:15124 pagetables:742 bounce:0 [ 386.317124] free:25131 free_pcp:0 free_cma:0 [ 386.354829] Node 0 active_anon:48216kB inactive_anon:22180kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 386.387142] Node 1 active_anon:1696kB inactive_anon:37232kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 386.415522] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.444783] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 386.449895] Node 0 DMA32 free:35948kB min:36200kB low:45248kB high:54296kB active_anon:48204kB inactive_anon:22180kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.480740] lowmem_reserve[]: 0 0 0 0 0 [ 386.484748] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.513153] lowmem_reserve[]: 0 0 0 0 0 [ 386.517211] Node 1 Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:1696kB inactive_anon:37232kB active_file:44kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.545949] lowmem_reserve[]: 0 0 0 0 0 [ 386.550005] Node 0 DMA: 1*4kB (M) 2*8kB (M) 1*16kB (U) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11076kB [ 386.564723] Node 0 DMA32: 1773*4kB (UMEH) 884*8kB (ME) 293*16kB (UMEH) 60*32kB (UMEH) 33*64kB (UME) 10*128kB (UME) 4*256kB (UM) 7*512kB (UMH) 5*1024kB (UMH) 1*2048kB (M) 0*4096kB = 35940kB [ 386.583802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 386.605691] Node 1 Normal: 188*4kB (UM) 147*8kB (UM) 115*16kB (ME) 72*32kB (M) 42*64kB (UM) 13*128kB (ME) 10*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 0*2048kB 9*4096kB (U) = 53432kB [ 386.626532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.635408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 386.646261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.663986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 386.672637] 15159 total pagecache pages [ 386.676598] 0 pages in swap cache [ 386.684494] Swap cache stats: add 0, delete 0, find 0/0 [ 386.694468] Free swap = 0kB [ 386.699733] Total swap = 0kB [ 386.702746] 2097051 pages RAM [ 386.705842] 0 pages HighMem/MovableOnly [ 386.712322] 363849 pages reserved [ 386.715775] 0 pages cma reserved [ 386.721385] Out of memory (oom_kill_allocating_task): Kill process 3002 (syz-executor.3) score 0 or sacrifice child [ 386.732046] Killed process 3534 (syz-executor.3) total-vm:93384kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 386.754062] oom_reaper: reaped process 3534 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 386.766807] systemd-cgroups invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 386.784447] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 386.792103] CPU: 0 PID: 3539 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 386.799984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.809324] Call Trace: [ 386.811896] dump_stack+0x1b2/0x281 [ 386.815503] dump_header+0x178/0x82f [ 386.819196] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 386.824286] ? ___ratelimit+0x2cd/0x530 [ 386.828434] oom_kill_process.cold+0x10/0xa40 [ 386.832916] out_of_memory+0xe3e/0x1190 [ 386.836875] ? oom_killer_disable+0x1c0/0x1c0 [ 386.841345] ? mutex_trylock+0x152/0x1a0 [ 386.845385] __alloc_pages_nodemask+0x23e1/0x2720 [ 386.850213] ? __schedule+0x893/0x1de0 [ 386.854076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 386.858904] ? lock_acquire+0x170/0x3f0 [ 386.862856] ? reacquire_held_locks+0xb5/0x3f0 [ 386.867414] ? alloc_set_pte+0xd57/0x1610 [ 386.871563] alloc_pages_vma+0xd2/0x6d0 [ 386.875551] wp_page_copy+0x1f5/0x25c0 [ 386.879426] ? _vm_normal_page+0x162/0x3b0 [ 386.883668] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 386.888142] ? __lock_acquire+0x5fc/0x3f20 [ 386.892353] do_wp_page+0x245/0x1db0 [ 386.896053] ? __handle_mm_fault+0x129c/0x4620 [ 386.900612] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 386.905257] ? do_fault_around+0x35e/0x620 [ 386.909477] __handle_mm_fault+0x234f/0x4620 [ 386.913871] ? vm_insert_page+0x7c0/0x7c0 [ 386.917994] ? lock_downgrade+0x740/0x740 [ 386.922125] ? lock_downgrade+0x740/0x740 [ 386.926245] ? SyS_brk+0x3bd/0x580 [ 386.929762] ? mark_held_locks+0xa6/0xf0 [ 386.933800] handle_mm_fault+0x455/0x9c0 [ 386.937842] __do_page_fault+0x549/0xad0 [ 386.941878] ? spurious_fault+0x640/0x640 [ 386.946011] ? do_page_fault+0x60/0x500 [ 386.949972] ? page_fault+0x2f/0x50 [ 386.953577] page_fault+0x45/0x50 [ 386.957016] RIP: 70000021: (null) [ 386.961233] RSP: 6ffffeff:00007ffcebf66740 EFLAGS: 00000001 [ 386.967164] Mem-Info: [ 386.975298] active_anon:12454 inactive_anon:14853 isolated_anon:0 [ 386.975298] active_file:21 inactive_file:14 isolated_file:0 [ 386.975298] unevictable:0 dirty:0 writeback:0 unstable:0 [ 386.975298] slab_reclaimable:12928 slab_unreclaimable:112474 [ 386.975298] mapped:52721 shmem:15124 pagetables:742 bounce:0 [ 386.975298] free:25079 free_pcp:54 free_cma:0 [ 387.011008] Node 0 active_anon:48200kB inactive_anon:22180kB active_file:16kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 387.049257] Node 1 active_anon:1616kB inactive_anon:37232kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36796kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 387.081939] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.110541] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 387.115591] Node 0 DMA32 free:35880kB min:36200kB low:45248kB high:54296kB active_anon:48188kB inactive_anon:22180kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:212kB local_pcp:200kB free_cma:0kB [ 387.153938] lowmem_reserve[]: 0 0 0 0 0 [ 387.158010] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.188145] lowmem_reserve[]: 0 0 0 0 0 [ 387.192157] Node 1 Normal free:53432kB min:53696kB low:67120kB high:80544kB active_anon:1616kB inactive_anon:37232kB active_file:48kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:504kB bounce:0kB free_pcp:80kB local_pcp:80kB free_cma:0kB [ 387.223144] lowmem_reserve[]: 0 0 0 0 0 [ 387.227440] Node 0 DMA: [ 387.227453] Bluetooth: hci1 command 0x0419 tx timeout [ 387.235337] 1*4kB (M) 2*8kB (M) 1*16kB (U) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11076kB [ 387.251228] Node 0 DMA32: 1772*4kB (MEH) 889*8kB (UME) 293*16kB (UME) 57*32kB (MEH) 33*64kB (UME) 10*128kB (UME) 4*256kB (UM) 7*512kB (UMH) 5*1024kB (UMH) 1*2048kB (M) 0*4096kB = 35880kB [ 387.270487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 387.281317] Node 1 Normal: 188*4kB (UM) 147*8kB (UM) 115*16kB (ME) 72*32kB (M) 42*64kB (UM) 13*128kB (ME) 10*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 0*2048kB 9*4096kB (U) = 53432kB [ 387.300132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.307383] Bluetooth: hci2 command 0x0419 tx timeout [ 387.309274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 387.325121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.333984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 387.344930] 15159 total pagecache pages [ 387.348987] 0 pages in swap cache [ 387.352435] Swap cache stats: add 0, delete 0, find 0/0 [ 387.360127] Free swap = 0kB [ 387.363140] Total swap = 0kB [ 387.366173] 2097051 pages RAM [ 387.369294] 0 pages HighMem/MovableOnly [ 387.373254] 363849 pages reserved [ 387.376690] 0 pages cma reserved [ 387.382400] Out of memory (oom_kill_allocating_task): Kill process 3539 (systemd-cgroups) score 0 or sacrifice child [ 387.393712] Killed process 3539 (systemd-cgroups) total-vm:316kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 387.406638] oom_reaper: reaped process 3539 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 387.419246] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 387.434692] systemd-journal cpuset=/ mems_allowed=0-1 [ 387.440002] CPU: 1 PID: 2424 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 387.447876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.457225] Call Trace: [ 387.459825] dump_stack+0x1b2/0x281 [ 387.463439] dump_header+0x178/0x82f [ 387.467140] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 387.472239] ? ___ratelimit+0x2cd/0x530 [ 387.476209] oom_kill_process.cold+0x10/0xa40 [ 387.480727] out_of_memory+0xe3e/0x1190 [ 387.484693] ? oom_killer_disable+0x1c0/0x1c0 [ 387.489174] ? mutex_trylock+0x152/0x1a0 [ 387.493220] __alloc_pages_nodemask+0x23e1/0x2720 [ 387.498062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 387.503121] alloc_pages_current+0x155/0x260 [ 387.507526] filemap_fault+0x11a1/0x1ad0 [ 387.511616] ext4_filemap_fault+0x84/0xb0 [ 387.515740] __do_fault+0xfa/0x380 [ 387.519265] __handle_mm_fault+0x2497/0x4620 [ 387.523666] ? vm_insert_page+0x7c0/0x7c0 [ 387.527831] ? _raw_spin_unlock_irq+0x24/0x80 [ 387.532329] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 387.537334] ? mark_held_locks+0xa6/0xf0 [ 387.541412] handle_mm_fault+0x455/0x9c0 [ 387.545470] __do_page_fault+0x549/0xad0 [ 387.549533] ? spurious_fault+0x640/0x640 [ 387.553682] ? do_page_fault+0x60/0x500 [ 387.557642] ? page_fault+0x2f/0x50 [ 387.561261] page_fault+0x45/0x50 [ 387.564702] RIP: 0001:0x7ffcc7ace84c [ 387.568402] RSP: cc4cf1e0:00005610cc4cf228 EFLAGS: 16eb396f [ 387.570956] Mem-Info: [ 387.579227] active_anon:12454 inactive_anon:14853 isolated_anon:0 [ 387.579227] active_file:14 inactive_file:20 isolated_file:0 [ 387.579227] unevictable:0 dirty:0 writeback:0 unstable:0 [ 387.579227] slab_reclaimable:12917 slab_unreclaimable:112454 [ 387.579227] mapped:52721 shmem:15124 pagetables:742 bounce:0 [ 387.579227] free:25090 free_pcp:42 free_cma:0 [ 387.612477] Node 0 active_anon:48200kB inactive_anon:22180kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 387.642669] Node 1 active_anon:1616kB inactive_anon:37232kB active_file:28kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36796kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 387.672103] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.700628] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 387.705676] Node 0 DMA32 free:35748kB min:36200kB low:45248kB high:54296kB active_anon:48188kB inactive_anon:22180kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 387.734484] lowmem_reserve[]: 0 0 0 0 0 [ 387.738733] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.764329] lowmem_reserve[]: 0 0 0 0 0 [ 387.768363] Node 1 Normal free:53536kB min:53696kB low:67120kB high:80544kB active_anon:1616kB inactive_anon:37232kB active_file:32kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:504kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 387.796972] lowmem_reserve[]: 0 0 0 0 0 [ 387.800996] Node 0 DMA: 1*4kB (M) 2*8kB (M) 1*16kB (U) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11076kB [ 387.815614] Node 0 DMA32: 1776*4kB (MEH) 884*8kB (MEH) 294*16kB (UMEH) 59*32kB (UME) 33*64kB (UME) 10*128kB (UME) 4*256kB (UM) 7*512kB (UMH) 5*1024kB (UMH) 1*2048kB (M) 0*4096kB = 35936kB [ 387.832549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 387.843321] Node 1 Normal: 193*4kB (UM) 152*8kB (UM) 118*16kB (ME) 73*32kB (UM) 42*64kB (UM) 13*128kB (ME) 10*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 0*2048kB 9*4096kB (U) = 53572kB [ 387.862026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.870916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 387.881732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.890623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 387.901452] 15158 total pagecache pages [ 387.905430] 0 pages in swap cache [ 387.908897] Swap cache stats: add 0, delete 0, find 0/0 [ 387.914279] Free swap = 0kB [ 387.919527] Total swap = 0kB [ 387.922536] 2097051 pages RAM [ 387.925621] 0 pages HighMem/MovableOnly [ 387.931840] 363849 pages reserved [ 387.935290] 0 pages cma reserved [ 387.940892] Out of memory (oom_kill_allocating_task): Kill process 2424 (systemd-journal) score 0 or sacrifice child [ 387.953839] Killed process 2424 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1988kB [ 387.965175] oom_reaper: reaped process 2424 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1988kB [ 388.040505] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 388.100690] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 388.105666] CPU: 1 PID: 25 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 388.113133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.122524] Workqueue: events_unbound call_usermodehelper_exec_work [ 388.128930] Call Trace: [ 388.131517] dump_stack+0x1b2/0x281 [ 388.135163] dump_header+0x178/0x82f [ 388.138964] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 388.144065] ? ___ratelimit+0x2cd/0x530 [ 388.148057] oom_kill_process.cold+0x10/0xa40 [ 388.152550] ? lock_downgrade+0x740/0x740 [ 388.156698] out_of_memory+0x2dc/0x1190 [ 388.160669] ? oom_killer_disable+0x1c0/0x1c0 [ 388.165179] ? mutex_trylock+0x152/0x1a0 [ 388.169258] __alloc_pages_nodemask+0x23e1/0x2720 [ 388.174107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 388.178942] ? fs_reclaim_release+0xd0/0x110 [ 388.183356] ? kmem_cache_alloc_node+0x38b/0x410 [ 388.188109] copy_process.part.0+0x265/0x71c0 [ 388.192602] ? __lock_acquire+0x5fc/0x3f20 [ 388.196837] ? debug_object_activate+0x292/0x490 [ 388.201592] ? trace_hardirqs_on+0x10/0x10 [ 388.205819] ? static_obj+0x50/0x50 [ 388.209442] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 388.214888] ? __cleanup_sighand+0x40/0x40 [ 388.219121] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 388.224565] _do_fork+0x184/0xc80 [ 388.228017] ? fork_idle+0x270/0x270 [ 388.231733] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 388.236829] ? process_one_work+0x6c4/0x14a0 [ 388.241228] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 388.246670] kernel_thread+0x2f/0x40 [ 388.250381] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 388.255653] ? call_usermodehelper+0x80/0x80 [ 388.260055] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 388.265506] process_one_work+0x793/0x14a0 [ 388.269745] ? work_busy+0x320/0x320 [ 388.273451] ? worker_thread+0x158/0xff0 [ 388.277510] ? _raw_spin_unlock_irq+0x24/0x80 [ 388.282010] worker_thread+0x5cc/0xff0 [ 388.285903] ? rescuer_thread+0xc80/0xc80 [ 388.290046] kthread+0x30d/0x420 [ 388.293404] ? kthread_create_on_node+0xd0/0xd0 [ 388.298065] ret_from_fork+0x24/0x30 [ 388.376765] Mem-Info: [ 388.379270] active_anon:12331 inactive_anon:14852 isolated_anon:0 [ 388.379270] active_file:43 inactive_file:0 isolated_file:0 [ 388.379270] unevictable:0 dirty:0 writeback:0 unstable:0 [ 388.379270] slab_reclaimable:12917 slab_unreclaimable:112198 [ 388.379270] mapped:52250 shmem:15124 pagetables:714 bounce:0 [ 388.379270] free:25071 free_pcp:2 free_cma:0 [ 388.431286] Node 0 active_anon:48188kB inactive_anon:22180kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 388.544591] Node 1 active_anon:1136kB inactive_anon:37228kB active_file:36kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34916kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 388.578187] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.627122] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 388.632190] Node 0 DMA32 free:35816kB min:36200kB low:45248kB high:54296kB active_anon:48176kB inactive_anon:22180kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.713129] lowmem_reserve[]: 0 0 0 0 0 [ 388.736860] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.816207] lowmem_reserve[]: 0 0 0 0 0 [ 388.832857] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:1136kB inactive_anon:37228kB active_file:132kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:396kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 388.869810] lowmem_reserve[]: 0 0 0 0 0 [ 388.873829] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 1*16kB (U) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11052kB [ 388.913273] Node 0 DMA32: 1776*4kB (UME) 885*8kB (UME) 294*16kB (UME) 59*32kB (UME) 31*64kB (ME) 9*128kB (ME) 4*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 0*4096kB = 35688kB [ 388.969386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 389.011383] Node 1 Normal: 178*4kB (UM) 131*8kB (UM) 97*16kB (ME) 61*32kB (M) 41*64kB (UM) 20*128kB (UME) 11*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 0*2048kB 9*4096kB (U) = 53712kB [ 389.039432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.052573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.080855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.115737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.162787] 15158 total pagecache pages [ 389.188422] 0 pages in swap cache [ 389.191894] Swap cache stats: add 0, delete 0, find 0/0 [ 389.222972] Free swap = 0kB [ 389.226024] Total swap = 0kB [ 389.237941] 2097051 pages RAM [ 389.241058] 0 pages HighMem/MovableOnly [ 389.245020] 363849 pages reserved [ 389.264749] 0 pages cma reserved [ 389.279427] Out of memory: Kill process 2909 (syz-executor.0) score 1005 or sacrifice child [ 389.305822] Killed process 2915 (syz-executor.0) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 389.384399] oom_reaper: reaped process 2915 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 389.421185] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 389.442598] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 389.447496] CPU: 1 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 389.454956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.464312] Call Trace: [ 389.466901] dump_stack+0x1b2/0x281 [ 389.470522] dump_header+0x178/0x82f [ 389.474230] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 389.479322] ? ___ratelimit+0x2cd/0x530 [ 389.483285] oom_kill_process.cold+0x10/0xa40 [ 389.487776] out_of_memory+0xe3e/0x1190 [ 389.491732] ? oom_killer_disable+0x1c0/0x1c0 [ 389.496216] ? mutex_trylock+0x152/0x1a0 [ 389.500273] __alloc_pages_nodemask+0x23e1/0x2720 [ 389.505157] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 389.510010] alloc_pages_current+0x155/0x260 [ 389.514408] filemap_fault+0x11a1/0x1ad0 [ 389.518471] ext4_filemap_fault+0x84/0xb0 [ 389.522607] __do_fault+0xfa/0x380 [ 389.526125] __handle_mm_fault+0x2497/0x4620 [ 389.530532] ? vm_insert_page+0x7c0/0x7c0 [ 389.534684] ? mark_held_locks+0xa6/0xf0 [ 389.538736] handle_mm_fault+0x455/0x9c0 [ 389.542799] __do_page_fault+0x549/0xad0 [ 389.546918] ? spurious_fault+0x640/0x640 [ 389.551056] ? do_page_fault+0x60/0x500 [ 389.555011] ? page_fault+0x2f/0x50 [ 389.558640] page_fault+0x45/0x50 [ 389.562082] RIP: 0005:0x64f4f76010 [ 389.565603] RSP: 0000:000000c00038fd20 EFLAGS: 64f4f76010 [ 389.566450] syz-executor.0: vmalloc: allocation failure, allocated 1705222144 of 4294778880 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 389.572377] Mem-Info: [ 389.586022] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 389.586049] CPU: 1 PID: 2915 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 389.586055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.586059] Call Trace: [ 389.586080] dump_stack+0x1b2/0x281 [ 389.586094] warn_alloc.cold+0x96/0x1cc [ 389.592879] active_anon:11799 inactive_anon:14852 isolated_anon:0 [ 389.592879] active_file:23 inactive_file:18 isolated_file:11 [ 389.592879] unevictable:0 dirty:0 writeback:0 unstable:0 [ 389.592879] slab_reclaimable:12914 slab_unreclaimable:112099 [ 389.592879] mapped:52225 shmem:15124 pagetables:714 bounce:0 [ 389.592879] free:13943 free_pcp:61 free_cma:0 [ 389.593601] ? zone_watermark_ok_safe+0x220/0x220 [ 389.601441] Node 0 active_anon:46060kB inactive_anon:22180kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 389.610741] __vmalloc_area_node+0x48a/0x680 [ 389.610757] ? __vmalloc_node_range+0x150/0x150 [ 389.610764] ? __get_vm_area_node+0x27d/0x340 [ 389.610776] __vmalloc_node_range+0xbe/0x150 [ 389.610791] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 389.610798] vmalloc_user+0x47/0xa0 [ 389.610808] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 389.610817] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 389.610825] vb2_vmalloc_alloc+0xa6/0x2d0 [ 389.610836] __vb2_queue_alloc+0x47a/0xd90 [ 389.610856] vb2_core_create_bufs+0x279/0x5a0 [ 389.610867] ? __vb2_queue_free+0x7a0/0x7a0 [ 389.617846] Node 1 active_anon:1136kB inactive_anon:37228kB active_file:60kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:34816kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 389.621019] ? trace_hardirqs_on+0x10/0x10 [ 389.658428] Node 0 [ 389.659078] ? __lock_acquire+0x5fc/0x3f20 [ 389.691494] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.695805] vb2_create_bufs+0x2e1/0x5b0 [ 389.700332] lowmem_reserve[]: [ 389.704683] ? ___preempt_schedule+0x16/0x18 [ 389.715485] 0 [ 389.718138] ? vb2_thread_start+0x310/0x310 [ 389.718149] ? trace_hardirqs_on+0x10/0x10 [ 389.718161] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 389.718174] vb2_ioctl_create_bufs+0x1f7/0x330 [ 389.718188] v4l_create_bufs+0xa4/0x150 [ 389.723534] 2717 [ 389.727674] __video_do_ioctl+0x65b/0x6a0 [ 389.727688] ? video_ioctl2+0x30/0x30 [ 389.727698] ? __might_fault+0x177/0x1b0 [ 389.727707] ? video_ioctl2+0x30/0x30 [ 389.727715] video_usercopy+0xfd/0xe70 [ 389.727727] ? v4l_g_ctrl+0x390/0x390 [ 389.727737] ? lock_acquire+0x170/0x3f0 [ 389.727746] ? lock_downgrade+0x740/0x740 [ 389.727757] ? trace_hardirqs_on+0x10/0x10 [ 389.727769] ? futex_exit_release+0x220/0x220 [ 389.727780] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 389.727791] ? debug_check_no_obj_freed+0x2c0/0x680 [ 389.727802] v4l2_ioctl+0x1bb/0x2f0 [ 389.727811] ? v4l2_open+0x2f0/0x2f0 [ 389.735823] 2718 [ 389.736966] do_vfs_ioctl+0x75a/0xff0 [ 389.736979] ? ioctl_preallocate+0x1a0/0x1a0 [ 389.736989] ? lock_downgrade+0x740/0x740 [ 389.737001] ? __fget+0x225/0x360 [ 389.737009] ? do_vfs_ioctl+0xff0/0xff0 [ 389.737019] ? security_file_ioctl+0x83/0xb0 [ 389.737029] SyS_ioctl+0x7f/0xb0 [ 389.737036] ? do_vfs_ioctl+0xff0/0xff0 [ 389.737046] do_syscall_64+0x1d5/0x640 [ 389.737062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 389.741466] 2718 [ 389.768617] RIP: 0033:0x4665f9 [ 389.768623] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.768632] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 389.768637] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 389.768641] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 389.768645] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 389.768650] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 389.768906] Mem-Info: [ 389.777429] 2718 [ 389.779582] active_anon:11799 inactive_anon:14852 isolated_anon:0 [ 389.779582] active_file:23 inactive_file:18 isolated_file:11 [ 389.779582] unevictable:0 dirty:0 writeback:0 unstable:0 [ 389.779582] slab_reclaimable:12914 slab_unreclaimable:112099 [ 389.779582] mapped:52225 shmem:15124 pagetables:714 bounce:0 [ 389.779582] free:13943 free_pcp:61 free_cma:0 [ 389.812316] Node 0 active_anon:46060kB inactive_anon:22180kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 389.816670] Node 0 [ 389.818508] Node 1 active_anon:1136kB inactive_anon:37228kB active_file:60kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:34816kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 389.818513] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.818537] lowmem_reserve[]: [ 389.823514] DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:46048kB inactive_anon:22180kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2460kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 389.827101] 0 2717 2718 2718 2718 [ 389.827120] Node 0 DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:46048kB inactive_anon:22180kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2460kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 389.827143] lowmem_reserve[]: 0 0 0 0 0 [ 389.827162] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.827185] lowmem_reserve[]: [ 389.836007] lowmem_reserve[]: [ 389.836906] 0 0 0 0 0 [ 389.836924] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1136kB inactive_anon:37228kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:396kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 389.836952] lowmem_reserve[]: [ 389.840915] 0 0 [ 389.842976] 0 [ 389.850957] 0 [ 389.854991] 0 [ 389.858842] 0 [ 389.862702] 0 [ 389.866481] 0 [ 389.870480] 0 0 [ 389.870490] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 0*16kB 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10972kB [ 389.870564] Node 0 DMA32: 1570*4kB (MEH) 799*8kB (MEH) 222*16kB (ME) 29*32kB (MEH) 13*64kB (MEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17984kB [ 389.870626] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 389.870673] Node 1 Normal: 162*4kB [ 389.879066] (M) [ 389.883515] Node 0 [ 389.888642] 126*8kB (UM) 98*16kB (UME) 61*32kB (M) 40*64kB [ 389.896955] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.899915] (M) [ 389.903583] lowmem_reserve[]: [ 389.905631] 19*128kB [ 389.913370] 0 [ 389.913883] (ME) [ 389.918064] 0 [ 389.921511] 11*256kB [ 389.925464] 0 [ 389.929896] (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 2*4096kB (U) = 26808kB [ 389.929934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.929941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.929947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.929953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.929957] 15158 total pagecache pages [ 389.929966] 0 pages in swap cache [ 389.929972] Swap cache stats: add 0, delete 0, find 0/0 [ 389.929975] Free swap = 0kB [ 389.929981] Total swap = 0kB [ 389.937621] 0 [ 389.941190] 2097051 pages RAM [ 389.946371] 0 [ 389.948468] 0 pages HighMem/MovableOnly [ 389.948472] 363849 pages reserved [ 389.948475] 0 pages cma reserved [ 390.442766] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1136kB inactive_anon:37228kB active_file:24kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:396kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 390.471409] lowmem_reserve[]: 0 0 0 0 0 [ 390.475425] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 0*16kB 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10972kB [ 390.489891] Node 0 DMA32: 1570*4kB (MEH) 798*8kB (ME) 222*16kB (ME) 29*32kB (MEH) 13*64kB (MEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 390.504145] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 390.515194] Node 1 Normal: 162*4kB (M) 126*8kB (UM) 98*16kB (UME) 61*32kB (M) 40*64kB (M) 19*128kB (ME) 11*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 2*4096kB (U) = 26808kB [ 390.531711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.540591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 390.549383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.558268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 390.567517] 15158 total pagecache pages [ 390.571495] 0 pages in swap cache [ 390.575201] Swap cache stats: add 0, delete 0, find 0/0 [ 390.580603] Free swap = 0kB [ 390.583628] Total swap = 0kB [ 390.586652] 2097051 pages RAM [ 390.589838] 0 pages HighMem/MovableOnly [ 390.593825] 363849 pages reserved [ 390.603906] 0 pages cma reserved [ 390.607327] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 390.624063] Killed process 2750 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 390.650902] oom_reaper: reaped process 2750 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 390.675483] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 390.698134] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 390.702936] CPU: 0 PID: 7994 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 390.710374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.719723] Call Trace: [ 390.722311] dump_stack+0x1b2/0x281 [ 390.725951] dump_header+0x178/0x82f [ 390.729663] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 390.734758] ? ___ratelimit+0x2cd/0x530 [ 390.738729] oom_kill_process.cold+0x10/0xa40 [ 390.743228] out_of_memory+0xe3e/0x1190 [ 390.747202] ? oom_killer_disable+0x1c0/0x1c0 [ 390.751689] ? mutex_trylock+0x152/0x1a0 [ 390.755750] __alloc_pages_nodemask+0x23e1/0x2720 [ 390.760598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 390.765467] alloc_pages_current+0x155/0x260 [ 390.769880] filemap_fault+0x11a1/0x1ad0 [ 390.773946] ext4_filemap_fault+0x84/0xb0 [ 390.778093] __do_fault+0xfa/0x380 [ 390.781655] __handle_mm_fault+0x2497/0x4620 [ 390.786065] ? vm_insert_page+0x7c0/0x7c0 [ 390.790214] ? mark_held_locks+0xa6/0xf0 [ 390.794299] handle_mm_fault+0x455/0x9c0 [ 390.798358] __do_page_fault+0x549/0xad0 [ 390.802414] ? spurious_fault+0x640/0x640 [ 390.806554] ? do_page_fault+0x60/0x500 [ 390.810521] ? page_fault+0x2f/0x50 [ 390.814494] page_fault+0x45/0x50 [ 390.820033] RIP: 0f00:0x4 [ 390.823046] RSP: 0133:000000c000039e40 EFLAGS: 00000003 [ 390.830517] Mem-Info: [ 390.840544] active_anon:11795 inactive_anon:14852 isolated_anon:0 [ 390.840544] active_file:13 inactive_file:21 isolated_file:0 [ 390.840544] unevictable:0 dirty:0 writeback:0 unstable:0 [ 390.840544] slab_reclaimable:12907 slab_unreclaimable:112098 [ 390.840544] mapped:52225 shmem:15124 pagetables:676 bounce:0 [ 390.840544] free:13941 free_pcp:141 free_cma:0 [ 390.882653] Node 0 active_anon:46044kB inactive_anon:22180kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:23060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 390.917033] Node 1 active_anon:1136kB inactive_anon:37228kB active_file:24kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:37436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 390.950944] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.984182] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 390.989314] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:46032kB inactive_anon:22180kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2308kB bounce:0kB free_pcp:408kB local_pcp:292kB free_cma:0kB [ 391.024673] lowmem_reserve[]: 0 0 0 0 0 [ 391.028884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.055111] lowmem_reserve[]: 0 0 0 0 0 [ 391.064985] Node 1 Normal free:86296kB min:53696kB low:67120kB high:80544kB active_anon:1136kB inactive_anon:37228kB active_file:24kB inactive_file:1260kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:396kB bounce:0kB free_pcp:756kB local_pcp:8kB free_cma:0kB [ 391.103363] lowmem_reserve[]: 0 0 0 0 0 [ 391.108454] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 0*16kB 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10972kB [ 391.129506] Node 0 DMA32: 1570*4kB (MEH) 810*8kB (UMEH) 225*16kB (UMEH) 30*32kB (UME) 13*64kB (MEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 391.153173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 391.177245] Node 1 Normal: 2*4kB (U) 1*8kB (M) 2*16kB (ME) 5*32kB (UM) 50*64kB (UM) 32*128kB (UME) 25*256kB (UME) 16*512kB (UME) 16*1024kB (UME) 9*2048kB (U) 46*4096kB (U) = 245328kB [ 391.201085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.210780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 391.225449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.234898] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 391.235218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 391.258144] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 391.258502] 16564 total pagecache pages [ 391.274455] 0 pages in swap cache [ 391.279258] Swap cache stats: add 0, delete 0, find 0/0 [ 391.279261] systemd[1]: rsyslog.service: Unit entered failed state. [ 391.279479] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 391.290558] Free swap = 0kB [ 391.305118] Total swap = 0kB [ 391.311704] 2097051 pages RAM [ 391.314881] 0 pages HighMem/MovableOnly [ 391.321632] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 391.334645] 363849 pages reserved [ 391.338964] 0 pages cma reserved [ 391.342943] Out of memory (oom_kill_allocating_task): Kill process 7994 (syz-fuzzer) score 0 or sacrifice child [ 391.357836] Killed process 3000 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 391.374114] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 391.379890] oom_reaper: reaped process 3000 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 391.395325] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 391.405398] systemd[1]: Stopped Journal Service. [ 391.432663] systemd[1]: Starting Journal Service... [ 391.442335] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 391.675004] systemd-journald[3541]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 00:47:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:47:52 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 00:47:52 executing program 2: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:47:52 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:47:52 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:47:53 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 00:47:53 executing program 2: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) [ 392.700381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.707229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.716767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.723804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.732280] device bridge_slave_1 left promiscuous mode [ 392.738285] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.746416] device bridge_slave_0 left promiscuous mode [ 392.754363] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.763988] device veth1_macvtap left promiscuous mode [ 392.770263] device veth0_macvtap left promiscuous mode [ 392.776134] device veth1_vlan left promiscuous mode [ 392.781488] device veth0_vlan left promiscuous mode [ 392.902646] device hsr_slave_1 left promiscuous mode [ 392.915924] device hsr_slave_0 left promiscuous mode [ 392.938949] team0 (unregistering): Port device team_slave_1 removed [ 392.954735] team0 (unregistering): Port device team_slave_0 removed [ 392.965206] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 392.982011] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 393.025239] bond0 (unregistering): Released all slaves [ 394.186907] Bluetooth: hci3 command 0x0406 tx timeout [ 394.499633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.506469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.521229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.529548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.540865] device bridge_slave_1 left promiscuous mode [ 394.548575] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.556375] device bridge_slave_0 left promiscuous mode [ 394.566706] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.580484] device veth1_macvtap left promiscuous mode [ 394.585797] device veth0_macvtap left promiscuous mode [ 394.593588] device veth1_vlan left promiscuous mode [ 394.603024] device veth0_vlan left promiscuous mode [ 394.723461] device hsr_slave_1 left promiscuous mode [ 394.732973] device hsr_slave_0 left promiscuous mode [ 394.754633] team0 (unregistering): Port device team_slave_1 removed [ 394.771611] team0 (unregistering): Port device team_slave_0 removed [ 394.784448] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 394.800581] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 394.880002] bond0 (unregistering): Released all slaves 00:47:56 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:47:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1c0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:47:56 executing program 2: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:47:56 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x2, 0x2}}, 0x2e) 00:47:56 executing program 2: syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:47:56 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) 00:47:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1b8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 396.033085] IPVS: ftp: loaded support on port[0] = 21 [ 396.089245] IPVS: ftp: loaded support on port[0] = 21 [ 396.280860] chnl_net:caif_netlink_parms(): no params data found [ 396.417807] chnl_net:caif_netlink_parms(): no params data found [ 396.623048] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.630026] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.639052] device bridge_slave_0 entered promiscuous mode [ 396.646497] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.654709] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.667222] device bridge_slave_1 entered promiscuous mode [ 396.711700] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.719182] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.728412] device bridge_slave_0 entered promiscuous mode [ 396.737363] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 396.750257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 396.758028] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.764593] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.773525] device bridge_slave_1 entered promiscuous mode [ 396.822415] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 396.835297] team0: Port device team_slave_0 added [ 396.844347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 396.857969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 396.865890] team0: Port device team_slave_1 added [ 396.877930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 396.906948] Bluetooth: hci0 command 0x0409 tx timeout [ 396.915682] Bluetooth: hci2 command 0x0409 tx timeout [ 396.948582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 396.956259] team0: Port device team_slave_0 added [ 396.963491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.972371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.998784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.010446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 397.020868] team0: Port device team_slave_1 added [ 397.026725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.034112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.060613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.080583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 397.088558] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 397.122916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.133889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.166393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.197200] device hsr_slave_0 entered promiscuous mode [ 397.204642] device hsr_slave_1 entered promiscuous mode [ 397.216574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.224701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.257748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.273240] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 397.285993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 397.299077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 397.319946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 397.394288] device hsr_slave_0 entered promiscuous mode [ 397.400663] device hsr_slave_1 entered promiscuous mode [ 397.426671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 397.457072] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 397.545219] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 397.650312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.671528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 397.695276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 397.702134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.711316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.724846] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 397.731943] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.742140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 397.753930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.762789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.772956] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.780430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.797669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 397.806662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.819331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.830421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.840439] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.847311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.864125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 397.873650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 397.882453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.893738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 397.908004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.929965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 397.938356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.946327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.963300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 397.978432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.985485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.996366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.008784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.024884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 398.033250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.041630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.052528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 398.065036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 398.073033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.084611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.096119] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 398.110798] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 398.120821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.129734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.141352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.153177] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 398.161058] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.174621] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 398.187580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 398.194774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.204583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.215129] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.221920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.232611] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 398.242924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 398.253466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.261916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.270800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.281591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.291899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.303699] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.311567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.330578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.344562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 398.354556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.373673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 398.389611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.411432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 398.424020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.435054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.451004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 398.458896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.474595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.492941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.506606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 398.521791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.541156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.557705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 398.566133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.582449] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 398.589180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.598885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.616444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.641089] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 398.658832] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 398.665150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.683457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.700927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.715054] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 398.737615] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 398.744671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.758876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.848752] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 398.856398] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 398.869509] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 398.882954] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 398.889888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.901277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.915791] device veth0_vlan entered promiscuous mode [ 398.932863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.943136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.955724] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 398.970461] device veth1_vlan entered promiscuous mode [ 398.976476] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 398.988073] Bluetooth: hci2 command 0x041b tx timeout [ 398.993389] Bluetooth: hci0 command 0x041b tx timeout [ 399.007783] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 399.016560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 399.029993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.041439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.062165] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 399.090296] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 399.112180] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 399.129678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 399.140647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.151731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.165460] device veth0_macvtap entered promiscuous mode [ 399.174007] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 399.186775] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 399.200341] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 399.209346] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 399.219847] device veth1_macvtap entered promiscuous mode [ 399.226134] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 399.236097] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 399.249070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.256362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.264022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.272039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.280951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.290153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.300835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 399.308927] device veth0_vlan entered promiscuous mode [ 399.316396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 399.338870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.352697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.362648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.377200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.386341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.400650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.409940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.423781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.434369] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 399.445837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.454042] device veth1_vlan entered promiscuous mode [ 399.465478] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 399.474713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 399.486558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.495213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.510215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.523325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.534871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.551076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.561982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.575896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.587150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.600646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.613183] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 399.624112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.641818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.651001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.674982] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 399.687155] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 399.694247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.702610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.713638] device veth0_macvtap entered promiscuous mode [ 399.724692] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 399.737074] device veth1_macvtap entered promiscuous mode [ 399.743782] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 399.754351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 399.771902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 399.782586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.792662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.807450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.817800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.827325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.837404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.846531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.860375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.870984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.887259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.901314] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 399.909134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.924043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.937962] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.945145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.974600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.988116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.003321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.013794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.028321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.040593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.053783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.065978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.080186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.089461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.103888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.115424] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 400.130024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.139583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.151069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.067453] Bluetooth: hci0 command 0x040f tx timeout [ 401.072985] Bluetooth: hci2 command 0x040f tx timeout [ 402.074952] oom_reaper: reaped process 3609 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 402.136075] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 402.150936] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 402.156064] CPU: 0 PID: 3586 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 402.163854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.173204] Call Trace: [ 402.175796] dump_stack+0x1b2/0x281 [ 402.179423] dump_header+0x178/0x82f [ 402.183148] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 402.188253] ? ___ratelimit+0x2cd/0x530 [ 402.192225] oom_kill_process.cold+0x10/0xa40 [ 402.196732] out_of_memory+0xe3e/0x1190 [ 402.200712] ? oom_killer_disable+0x1c0/0x1c0 [ 402.205206] ? mutex_trylock+0x152/0x1a0 [ 402.209267] __alloc_pages_nodemask+0x23e1/0x2720 [ 402.214117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 402.215620] syz-executor.0: [ 402.218968] alloc_pages_current+0x155/0x260 [ 402.218987] filemap_fault+0x11a1/0x1ad0 [ 402.222080] vmalloc: allocation failure, allocated 1696088064 of 4294778880 bytes [ 402.226492] ext4_filemap_fault+0x84/0xb0 [ 402.230600] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 402.238170] __do_fault+0xfa/0x380 [ 402.238181] __handle_mm_fault+0x2497/0x4620 [ 402.238192] ? vm_insert_page+0x7c0/0x7c0 [ 402.242338] (null) [ 402.248292] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 402.248301] ? nanosleep_copyout+0x100/0x100 [ 402.248316] ? mark_held_locks+0xa6/0xf0 [ 402.248328] handle_mm_fault+0x455/0x9c0 [ 402.251854] syz-executor.0 cpuset= [ 402.256256] __do_page_fault+0x549/0xad0 [ 402.260400] / [ 402.262514] ? spurious_fault+0x640/0x640 [ 402.266915] mems_allowed=0-1 [ 402.271284] ? do_page_fault+0x60/0x500 [ 402.299798] ? page_fault+0x2f/0x50 [ 402.303429] page_fault+0x45/0x50 [ 402.306869] RIP: 61f4c:0x5 [ 402.309693] RSP: 0003:00007fffd12151ac EFLAGS: 00000032 [ 402.309717] CPU: 1 PID: 3609 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 402.315628] Mem-Info: [ 402.322882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.322888] Call Trace: [ 402.322909] dump_stack+0x1b2/0x281 [ 402.322923] warn_alloc.cold+0x96/0x1cc [ 402.322934] ? zone_watermark_ok_safe+0x220/0x220 [ 402.322957] __vmalloc_area_node+0x48a/0x680 [ 402.322971] ? __vmalloc_node_range+0x150/0x150 [ 402.325383] active_anon:12783 inactive_anon:16884 isolated_anon:0 [ 402.325383] active_file:18 inactive_file:13 isolated_file:0 [ 402.325383] unevictable:0 dirty:0 writeback:0 unstable:0 [ 402.325383] slab_reclaimable:12703 slab_unreclaimable:111416 [ 402.325383] mapped:52644 shmem:17172 pagetables:769 bounce:0 [ 402.325383] free:13872 free_pcp:89 free_cma:0 [ 402.334719] ? __get_vm_area_node+0x27d/0x340 [ 402.334734] __vmalloc_node_range+0xbe/0x150 [ 402.334754] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 402.334762] vmalloc_user+0x47/0xa0 [ 402.334770] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 402.334779] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 402.334786] vb2_vmalloc_alloc+0xa6/0x2d0 [ 402.334798] __vb2_queue_alloc+0x47a/0xd90 [ 402.334817] vb2_core_create_bufs+0x279/0x5a0 [ 402.334828] ? __vb2_queue_free+0x7a0/0x7a0 [ 402.334841] ? trace_hardirqs_on+0x10/0x10 [ 402.341654] Node 0 active_anon:48640kB inactive_anon:22180kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 402.344976] ? __lock_acquire+0x5fc/0x3f20 [ 402.350403] Node 1 active_anon:2492kB inactive_anon:45356kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36488kB dirty:0kB writeback:0kB shmem:45624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 402.354186] vb2_create_bufs+0x2e1/0x5b0 [ 402.363052] Node 0 [ 402.391985] ? futex_wait_queue_me+0x3bb/0x590 [ 402.391999] ? vb2_thread_start+0x310/0x310 [ 402.392009] ? trace_hardirqs_on+0x10/0x10 [ 402.392022] vb2_ioctl_create_bufs+0x1f7/0x330 [ 402.392035] v4l_create_bufs+0xa4/0x150 [ 402.392045] __video_do_ioctl+0x65b/0x6a0 [ 402.392058] ? video_ioctl2+0x30/0x30 [ 402.392068] ? __might_fault+0x177/0x1b0 [ 402.392078] ? video_ioctl2+0x30/0x30 [ 402.392086] video_usercopy+0xfd/0xe70 [ 402.392100] ? v4l_g_ctrl+0x390/0x390 [ 402.400833] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.400976] ? lock_acquire+0x170/0x3f0 [ 402.406311] lowmem_reserve[]: [ 402.409923] ? lock_downgrade+0x740/0x740 [ 402.409934] ? trace_hardirqs_on+0x10/0x10 [ 402.409945] ? futex_exit_release+0x220/0x220 [ 402.409956] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 402.409967] ? debug_check_no_obj_freed+0x2c0/0x680 [ 402.409978] v4l2_ioctl+0x1bb/0x2f0 [ 402.409987] ? v4l2_open+0x2f0/0x2f0 [ 402.409998] do_vfs_ioctl+0x75a/0xff0 [ 402.414325] 0 [ 402.419649] ? ioctl_preallocate+0x1a0/0x1a0 [ 402.419658] ? lock_downgrade+0x740/0x740 [ 402.419671] ? __fget+0x225/0x360 [ 402.419680] ? do_vfs_ioctl+0xff0/0xff0 [ 402.419692] ? security_file_ioctl+0x83/0xb0 [ 402.419702] SyS_ioctl+0x7f/0xb0 [ 402.428178] 2717 [ 402.432536] ? do_vfs_ioctl+0xff0/0xff0 [ 402.437467] 2718 [ 402.441049] do_syscall_64+0x1d5/0x640 [ 402.472951] 2718 [ 402.500006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 402.500016] RIP: 0033:0x4665f9 [ 402.500021] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.500030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 402.500035] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 402.500039] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 402.500044] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 402.500049] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 402.512016] Mem-Info: [ 402.519756] 2718 [ 402.519764] Node 0 DMA32 free:17748kB min:36200kB low:45248kB high:54296kB active_anon:48640kB inactive_anon:22180kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2452kB bounce:0kB free_pcp:224kB local_pcp:116kB free_cma:0kB [ 402.519783] lowmem_reserve[]: 0 0 0 0 0 [ 402.519801] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.519817] lowmem_reserve[]: 0 0 0 0 [ 402.526673] active_anon:12783 inactive_anon:16884 isolated_anon:0 [ 402.526673] active_file:18 inactive_file:13 isolated_file:0 [ 402.526673] unevictable:0 dirty:0 writeback:0 unstable:0 [ 402.526673] slab_reclaimable:12703 slab_unreclaimable:111416 [ 402.526673] mapped:52644 shmem:17172 pagetables:769 bounce:0 [ 402.526673] free:13872 free_pcp:86 free_cma:0 [ 402.528510] 0 [ 402.544748] Node 0 active_anon:48640kB inactive_anon:22180kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 402.581854] Node 1 active_anon:2492kB inactive_anon:45356kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36488kB dirty:0kB writeback:0kB shmem:45624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 402.596885] Node 1 [ 402.602037] Node 0 [ 402.603015] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:2492kB inactive_anon:45356kB active_file:72kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:624kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 402.608137] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.608141] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 402.608163] Node 0 DMA32 free:17748kB min:36200kB low:45248kB high:54296kB active_anon:48640kB inactive_anon:22180kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2452kB bounce:0kB free_pcp:224kB local_pcp:108kB free_cma:0kB [ 402.608186] lowmem_reserve[]: [ 402.622133] lowmem_reserve[]: [ 402.628844] 0 [ 402.632864] 0 [ 402.633104] 0 [ 402.643878] 0 [ 402.647526] 0 [ 402.654556] 0 [ 402.657381] 0 0 [ 402.657392] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.657413] lowmem_reserve[]: 0 0 0 0 0 [ 402.657433] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:2492kB inactive_anon:45356kB active_file:72kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:624kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 402.657458] lowmem_reserve[]: [ 402.666407] 0 [ 402.670001] 0 [ 402.688173] 0 [ 402.692634] 0 [ 402.714494] 0 [ 402.727860] Node 0 [ 402.748109] 0 [ 402.762090] DMA: [ 402.777554] 0 [ 402.791293] 1*4kB [ 402.842452] (U) [ 402.875494] Node 0 [ 402.910863] 1*8kB [ 402.936269] DMA: [ 402.967858] (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) [ 402.977823] 1*4kB [ 402.982882] 2*4096kB [ 403.020034] (U) [ 403.043758] (M) [ 403.052883] 1*8kB [ 403.053386] = 10956kB [ 403.055192] (U) [ 403.061402] Node 0 [ 403.063180] 0*16kB [ 403.065395] DMA32: [ 403.078280] 0*32kB [ 403.083133] 1544*4kB [ 403.084999] 1*64kB [ 403.090802] (ME) [ 403.097484] (U) [ 403.102507] 794*8kB [ 403.102527] 1*128kB [ 403.104917] (UME) [ 403.111961] (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 403.120927] 241*16kB [ 403.125634] Node 0 [ 403.125642] (UME) 26*32kB (UME) 10*64kB (UM) 0*128kB [ 403.134492] DMA32: [ 403.134494] 0*256kB 0*512kB [ 403.139760] 1544*4kB (ME) 794*8kB (UME) 241*16kB (UME) 26*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17856kB [ 403.146362] 0*1024kB [ 403.158311] Bluetooth: hci2 command 0x0419 tx timeout [ 403.164145] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 403.174250] 0*2048kB 0*4096kB = 17856kB [ 403.176630] Node 1 [ 403.181344] Bluetooth: hci0 command 0x0419 tx timeout [ 403.186684] Normal: 207*4kB (M) 163*8kB (M) 129*16kB (UME) 72*32kB (M) 51*64kB (M) 15*128kB (ME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26788kB [ 403.195975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 403.210848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.224811] Node 1 Normal: 207*4kB (M) 163*8kB (M) 129*16kB (UME) 72*32kB (M) 51*64kB (M) 15*128kB (ME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26788kB [ 403.230831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 403.250150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.255826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.263643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 403.274607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 403.284954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.285657] 17203 total pagecache pages [ 403.294522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 403.294528] 17203 total pagecache pages [ 403.294538] 0 pages in swap cache [ 403.294546] Swap cache stats: add 0, delete 0, find 0/0 [ 403.304630] 0 pages in swap cache [ 403.307299] net_ratelimit: 16 callbacks suppressed [ 403.307304] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 403.315023] Free swap = 0kB [ 403.326254] Swap cache stats: add 0, delete 0, find 0/0 [ 403.337061] Total swap = 0kB [ 403.344196] Free swap = 0kB [ 403.346407] 2097051 pages RAM [ 403.349450] Total swap = 0kB [ 403.349457] 2097051 pages RAM [ 403.349460] 0 pages HighMem/MovableOnly [ 403.349464] 363849 pages reserved [ 403.349467] 0 pages cma reserved [ 403.378201] 0 pages HighMem/MovableOnly [ 403.382168] 363849 pages reserved [ 403.385604] 0 pages cma reserved [ 403.396656] Out of memory (oom_kill_allocating_task): Kill process 3586 (syz-executor.4) score 0 or sacrifice child [ 403.415708] Killed process 4144 (syz-executor.4) total-vm:93384kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 403.436416] oom_reaper: reaped process 4144 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 403.473218] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 403.494776] in:imklog cpuset=/ mems_allowed=0-1 [ 403.499505] CPU: 0 PID: 3545 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 403.506853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.516212] Call Trace: [ 403.518803] dump_stack+0x1b2/0x281 [ 403.522424] dump_header+0x178/0x82f [ 403.526128] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 403.531225] ? ___ratelimit+0x2cd/0x530 [ 403.535193] oom_kill_process.cold+0x10/0xa40 [ 403.539696] out_of_memory+0xe3e/0x1190 [ 403.543669] ? oom_killer_disable+0x1c0/0x1c0 [ 403.548155] ? mutex_trylock+0x152/0x1a0 [ 403.552207] __alloc_pages_nodemask+0x23e1/0x2720 [ 403.557054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 403.561905] alloc_pages_current+0x155/0x260 [ 403.566306] filemap_fault+0x11a1/0x1ad0 [ 403.570370] ext4_filemap_fault+0x84/0xb0 [ 403.574509] __do_fault+0xfa/0x380 [ 403.578040] __handle_mm_fault+0x2497/0x4620 [ 403.582438] ? vm_insert_page+0x7c0/0x7c0 [ 403.586576] ? lock_downgrade+0x740/0x740 [ 403.590741] ? mark_held_locks+0xa6/0xf0 [ 403.594809] handle_mm_fault+0x455/0x9c0 [ 403.598865] __do_page_fault+0x549/0xad0 [ 403.602918] ? spurious_fault+0x640/0x640 [ 403.607055] ? do_page_fault+0x60/0x500 [ 403.611017] ? page_fault+0x2f/0x50 [ 403.614635] page_fault+0x45/0x50 [ 403.618084] RIP: 1fa0:0x1f9f [ 403.621086] RSP: 0000:0000559a5f6859d0 EFLAGS: 7f4504b53da0 [ 403.627439] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 403.634427] Mem-Info: [ 403.646256] active_anon:12243 inactive_anon:16884 isolated_anon:0 [ 403.646256] active_file:12 inactive_file:19 isolated_file:0 [ 403.646256] unevictable:0 dirty:0 writeback:0 unstable:0 [ 403.646256] slab_reclaimable:12701 slab_unreclaimable:111418 [ 403.646256] mapped:52644 shmem:17172 pagetables:767 bounce:0 [ 403.646256] free:14412 free_pcp:108 free_cma:0 [ 403.688332] Node 0 active_anon:46560kB inactive_anon:22180kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 403.726851] Node 1 active_anon:2412kB inactive_anon:45356kB active_file:36kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36488kB dirty:0kB writeback:0kB shmem:45624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 403.763443] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.800164] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 403.805218] Node 0 DMA32 free:19904kB min:36200kB low:45248kB high:54296kB active_anon:46560kB inactive_anon:22180kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2448kB bounce:0kB free_pcp:224kB local_pcp:132kB free_cma:0kB [ 403.843364] lowmem_reserve[]: 0 0 0 0 0 [ 403.849448] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.885923] lowmem_reserve[]: 0 0 0 0 0 [ 403.890596] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:2412kB inactive_anon:45356kB active_file:36kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:620kB bounce:0kB free_pcp:200kB local_pcp:80kB free_cma:0kB [ 403.928096] lowmem_reserve[]: 0 0 0 0 0 [ 403.932101] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 403.954409] Node 0 DMA32: 1544*4kB (ME) 794*8kB (UME) 241*16kB (UME) 26*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 19904kB [ 403.977511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 403.994466] Node 1 Normal: 207*4kB (M) 163*8kB (M) 129*16kB (UME) 72*32kB (M) 51*64kB (M) 15*128kB (ME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26788kB [ 404.020174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.035516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 404.036900] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 404.054701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.063661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 404.076709] 17203 total pagecache pages [ 404.080725] 0 pages in swap cache [ 404.084167] Swap cache stats: add 0, delete 0, find 0/0 [ 404.093833] Free swap = 0kB [ 404.100939] Total swap = 0kB [ 404.103958] 2097051 pages RAM [ 404.112444] 0 pages HighMem/MovableOnly [ 404.116419] 363849 pages reserved [ 404.123922] 0 pages cma reserved [ 404.131814] Out of memory (oom_kill_allocating_task): Kill process 3545 (in:imklog) score 0 or sacrifice child [ 404.146122] Killed process 3543 (rsyslogd) total-vm:254332kB, anon-rss:676kB, file-rss:4kB, shmem-rss:0kB [ 404.166844] oom_reaper: reaped process 3543 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 404.203527] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 404.229259] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 404.234882] CPU: 0 PID: 3586 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 404.242675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.252040] Call Trace: [ 404.254632] dump_stack+0x1b2/0x281 [ 404.258255] dump_header+0x178/0x82f [ 404.261972] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 404.267076] ? ___ratelimit+0x2cd/0x530 [ 404.271065] oom_kill_process.cold+0x10/0xa40 [ 404.275562] out_of_memory+0xe3e/0x1190 [ 404.279547] ? oom_killer_disable+0x1c0/0x1c0 [ 404.284034] ? mutex_trylock+0x152/0x1a0 [ 404.288090] __alloc_pages_nodemask+0x23e1/0x2720 [ 404.292967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 404.297815] alloc_pages_current+0x155/0x260 [ 404.302227] filemap_fault+0x11a1/0x1ad0 [ 404.306290] ext4_filemap_fault+0x84/0xb0 [ 404.310446] __do_fault+0xfa/0x380 [ 404.313999] __handle_mm_fault+0x2497/0x4620 [ 404.318399] ? vm_insert_page+0x7c0/0x7c0 [ 404.322550] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 404.326953] ? nanosleep_copyout+0x100/0x100 [ 404.331358] ? mark_held_locks+0xa6/0xf0 [ 404.335424] handle_mm_fault+0x455/0x9c0 [ 404.339487] __do_page_fault+0x549/0xad0 [ 404.343545] ? spurious_fault+0x640/0x640 [ 404.347682] ? do_page_fault+0x60/0x500 [ 404.351645] ? page_fault+0x2f/0x50 [ 404.355258] page_fault+0x45/0x50 [ 404.358700] RIP: 61f4c:0x5 [ 404.361535] RSP: 0003:00007fffd12151ac EFLAGS: 00000032 [ 404.371423] Mem-Info: [ 404.382768] active_anon:11993 inactive_anon:16884 isolated_anon:0 [ 404.382768] active_file:65 inactive_file:913 isolated_file:0 [ 404.382768] unevictable:0 dirty:0 writeback:0 unstable:0 [ 404.382768] slab_reclaimable:12701 slab_unreclaimable:111424 [ 404.382768] mapped:53119 shmem:17172 pagetables:730 bounce:0 [ 404.382768] free:91164 free_pcp:282 free_cma:0 [ 404.422895] Node 0 active_anon:46560kB inactive_anon:22180kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 404.457008] Node 1 active_anon:1412kB inactive_anon:45356kB active_file:348kB inactive_file:5040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39288kB dirty:0kB writeback:0kB shmem:45624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 404.484857] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.512902] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 404.518014] Node 0 DMA32 free:20004kB min:36200kB low:45248kB high:54296kB active_anon:46560kB inactive_anon:22180kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2448kB bounce:0kB free_pcp:108kB local_pcp:108kB free_cma:0kB [ 404.547518] lowmem_reserve[]: 0 0 0 0 0 [ 404.552347] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.578896] lowmem_reserve[]: 0 0 0 0 0 [ 404.583862] Node 1 Normal free:638784kB min:53696kB low:67120kB high:80544kB active_anon:1412kB inactive_anon:45356kB active_file:348kB inactive_file:6040kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:472kB bounce:0kB free_pcp:980kB local_pcp:352kB free_cma:0kB [ 404.613671] lowmem_reserve[]: 0 0 0 0 0 [ 404.625614] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 404.640152] Node 0 DMA32: 1546*4kB (UME) 1159*8kB (UME) 264*16kB (UME) 26*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 23200kB [ 404.656377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.668395] Node 1 Normal: 52*4kB (U) 0*8kB 1*16kB (E) 3*32kB (UM) 33*64kB (UM) 38*128kB (UME) 22*256kB (UME) 21*512kB (UME) 15*1024kB (UME) 16*2048kB (U) 159*4096kB (UM) = 723072kB [ 404.693797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.704656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 404.714148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.723784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 404.732816] 19090 total pagecache pages [ 404.736829] 0 pages in swap cache [ 404.741010] Swap cache stats: add 0, delete 0, find 0/0 [ 404.746377] Free swap = 0kB [ 404.750275] Total swap = 0kB [ 404.753309] 2097051 pages RAM [ 404.756424] 0 pages HighMem/MovableOnly [ 404.761090] 363849 pages reserved [ 404.765186] 0 pages cma reserved [ 404.777077] Out of memory (oom_kill_allocating_task): Kill process 3586 (syz-executor.4) score 0 or sacrifice child [ 404.796858] Killed process 3586 (syz-executor.4) total-vm:93120kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 404.853771] oom_reaper: reaped process 3586 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:48:05 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1ac, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:05 executing program 2: syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:48:05 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x2e) 00:48:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 405.829473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.836195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.850758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.859005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.872167] device bridge_slave_1 left promiscuous mode [ 405.879375] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.891141] device bridge_slave_0 left promiscuous mode [ 405.896836] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.912149] device veth1_macvtap left promiscuous mode [ 405.917647] device veth0_macvtap left promiscuous mode [ 405.923040] device veth1_vlan left promiscuous mode [ 405.934156] device veth0_vlan left promiscuous mode [ 406.080999] device hsr_slave_1 left promiscuous mode [ 406.092070] device hsr_slave_0 left promiscuous mode [ 406.121207] team0 (unregistering): Port device team_slave_1 removed [ 406.132456] team0 (unregistering): Port device team_slave_0 removed [ 406.151120] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 406.166391] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 406.220807] bond0 (unregistering): Released all slaves 00:48:08 executing program 2: syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:48:08 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0xf0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1ac, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:08 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, 0x0) 00:48:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1b8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x24004044) 00:48:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, 0x0) 00:48:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:48:08 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) [ 410.453985] IPVS: ftp: loaded support on port[0] = 21 [ 410.636449] chnl_net:caif_netlink_parms(): no params data found [ 410.826558] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.833917] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.846521] device bridge_slave_0 entered promiscuous mode [ 410.855231] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.866358] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.875203] device bridge_slave_1 entered promiscuous mode [ 410.912542] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 410.926335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 410.964082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 410.971923] team0: Port device team_slave_0 added [ 410.982691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 410.991495] team0: Port device team_slave_1 added [ 411.026876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.033458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.063943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.080737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.087259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.118801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.131976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 411.143013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 411.185068] device hsr_slave_0 entered promiscuous mode [ 411.193301] device hsr_slave_1 entered promiscuous mode [ 411.202944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 411.213064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 411.354695] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.361175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.367916] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.374306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.419015] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 411.425114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.436221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 411.446699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.454945] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.462500] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.474501] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 411.482104] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.492987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.502265] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.508706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.528025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.535831] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.542304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.564908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.575073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.587470] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 411.594064] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 411.604299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.613148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.622450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.631386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.653963] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 411.660823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.670184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.679236] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 411.689246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.696029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.708073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.788530] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 411.799481] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 411.806522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.818075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.862243] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 411.870375] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 411.882549] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 411.894295] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 411.906098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.915064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.929633] device veth0_vlan entered promiscuous mode [ 411.938482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.945453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.956559] device veth1_vlan entered promiscuous mode [ 411.963833] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 411.974929] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 411.989651] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 412.001042] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 412.007962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.015222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 412.024478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.032843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.048406] device veth0_macvtap entered promiscuous mode [ 412.054699] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 412.065639] device veth1_macvtap entered promiscuous mode [ 412.072874] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 412.083335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 412.095330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 412.105247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 412.116194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.126219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 412.137057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.146173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 412.157360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.166732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 412.180831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.190598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 412.204455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.215039] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 412.225966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.234091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 412.245708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.253570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.265843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.275961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 412.291099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.300702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 412.315436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.325250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 412.339462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.351274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 412.365227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.375700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 412.389316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.401203] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 412.411840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.421242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.432385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.516947] Bluetooth: hci2 command 0x0409 tx timeout [ 413.303201] oom_reaper: reaped process 4204 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 413.374581] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 413.389122] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 413.393902] CPU: 1 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 413.401322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.410655] Call Trace: [ 413.413229] dump_stack+0x1b2/0x281 [ 413.416846] dump_header+0x178/0x82f [ 413.420543] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 413.425622] ? ___ratelimit+0x2cd/0x530 [ 413.429586] oom_kill_process.cold+0x10/0xa40 [ 413.434093] out_of_memory+0xe3e/0x1190 [ 413.438069] ? oom_killer_disable+0x1c0/0x1c0 [ 413.442553] ? mutex_trylock+0x152/0x1a0 [ 413.446608] __alloc_pages_nodemask+0x23e1/0x2720 [ 413.451453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 413.456282] alloc_pages_current+0x155/0x260 [ 413.460673] filemap_fault+0x11a1/0x1ad0 [ 413.464732] ext4_filemap_fault+0x84/0xb0 [ 413.468872] __do_fault+0xfa/0x380 [ 413.472400] __handle_mm_fault+0x2497/0x4620 [ 413.476876] ? vm_insert_page+0x7c0/0x7c0 [ 413.481003] ? lock_downgrade+0x740/0x740 [ 413.485130] ? mark_held_locks+0xa6/0xf0 [ 413.489180] handle_mm_fault+0x455/0x9c0 [ 413.493231] __do_page_fault+0x549/0xad0 [ 413.497284] ? spurious_fault+0x640/0x640 [ 413.501409] ? do_page_fault+0x60/0x500 [ 413.505360] ? page_fault+0x2f/0x50 [ 413.508968] page_fault+0x45/0x50 [ 413.512422] RIP: 0000:0x947a7c [ 413.515598] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 413.518586] syz-executor.0: [ 413.520097] Mem-Info: [ 413.524043] vmalloc: allocation failure, allocated 1686491136 of 4294778880 bytes [ 413.531033] active_anon:12265 inactive_anon:16886 isolated_anon:0 [ 413.531033] active_file:13 inactive_file:6 isolated_file:0 [ 413.531033] unevictable:0 dirty:0 writeback:0 unstable:0 [ 413.531033] slab_reclaimable:12716 slab_unreclaimable:114379 [ 413.531033] mapped:52702 shmem:17173 pagetables:765 bounce:0 [ 413.531033] free:13811 free_pcp:78 free_cma:0 [ 413.537418] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 413.542950] Node 0 active_anon:46856kB inactive_anon:22180kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 413.576029] (null) [ 413.587187] Node 1 active_anon:2204kB inactive_anon:45364kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:0kB writeback:0kB shmem:45636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 413.608829] syz-executor.0 cpuset= [ 413.641444] Node 0 [ 413.643708] / [ 413.645005] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.647495] mems_allowed=0-1 [ 413.649031] lowmem_reserve[]: [ 413.680631] CPU: 1 PID: 4204 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 413.682095] 0 [ 413.683740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.691665] 2717 [ 413.693319] Call Trace: [ 413.707288] dump_stack+0x1b2/0x281 [ 413.707908] 2718 2718 [ 413.710919] warn_alloc.cold+0x96/0x1cc [ 413.710932] ? zone_watermark_ok_safe+0x220/0x220 [ 413.713411] 2718 [ 413.717366] ? retint_kernel+0x2d/0x2d [ 413.717387] __vmalloc_area_node+0x48a/0x680 [ 413.717401] ? __vmalloc_node_range+0x150/0x150 [ 413.717408] ? __get_vm_area_node+0x27d/0x340 [ 413.717419] __vmalloc_node_range+0xbe/0x150 [ 413.717433] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 413.717440] vmalloc_user+0x47/0xa0 [ 413.717450] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 413.717459] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 413.717469] vb2_vmalloc_alloc+0xa6/0x2d0 [ 413.724337] __vb2_queue_alloc+0x47a/0xd90 [ 413.731187] Node 0 [ 413.732617] vb2_core_create_bufs+0x279/0x5a0 [ 413.737344] DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:46856kB inactive_anon:22180kB active_file:24kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2648kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 413.741731] ? __vb2_queue_free+0x7a0/0x7a0 [ 413.746108] lowmem_reserve[]: [ 413.751459] ? trace_hardirqs_on+0x10/0x10 [ 413.751468] ? __lock_acquire+0x5fc/0x3f20 [ 413.751481] vb2_create_bufs+0x2e1/0x5b0 [ 413.751493] ? ___preempt_schedule+0x16/0x18 [ 413.751502] ? vb2_thread_start+0x310/0x310 [ 413.751512] ? trace_hardirqs_on+0x10/0x10 [ 413.751523] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 413.751535] vb2_ioctl_create_bufs+0x1f7/0x330 [ 413.751548] v4l_create_bufs+0xa4/0x150 [ 413.751558] __video_do_ioctl+0x65b/0x6a0 [ 413.759480] 0 [ 413.764828] ? video_ioctl2+0x30/0x30 [ 413.769589] 0 [ 413.773160] ? __might_fault+0x177/0x1b0 [ 413.775367] 0 [ 413.779846] ? video_ioctl2+0x30/0x30 [ 413.779855] video_usercopy+0xfd/0xe70 [ 413.779869] ? v4l_g_ctrl+0x390/0x390 [ 413.779879] ? lock_acquire+0x170/0x3f0 [ 413.779888] ? lock_downgrade+0x740/0x740 [ 413.779899] ? trace_hardirqs_on+0x10/0x10 [ 413.779911] ? futex_exit_release+0x220/0x220 [ 413.779925] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 413.813131] 0 [ 413.815595] ? debug_check_no_obj_freed+0x2c0/0x680 [ 413.820033] 0 [ 413.824211] v4l2_ioctl+0x1bb/0x2f0 [ 413.832734] ? v4l2_open+0x2f0/0x2f0 [ 413.837102] Node 0 [ 413.841270] do_vfs_ioctl+0x75a/0xff0 [ 413.846354] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.850926] ? ioctl_preallocate+0x1a0/0x1a0 [ 413.850936] ? lock_downgrade+0x740/0x740 [ 413.850948] ? __fget+0x225/0x360 [ 413.850956] ? do_vfs_ioctl+0xff0/0xff0 [ 413.850967] ? security_file_ioctl+0x83/0xb0 [ 413.850976] SyS_ioctl+0x7f/0xb0 [ 413.850983] ? do_vfs_ioctl+0xff0/0xff0 [ 413.850994] do_syscall_64+0x1d5/0x640 [ 413.851009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 413.851018] RIP: 0033:0x4665f9 [ 413.851022] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.851033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 413.851040] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 413.859320] lowmem_reserve[]: [ 413.860913] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 413.864706] 0 [ 413.866487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 413.866494] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 413.871728] 0 [ 413.883113] Mem-Info: [ 413.887959] 0 0 0 [ 413.887973] Node 1 Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:2204kB inactive_anon:45364kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:412kB bounce:0kB free_pcp:192kB local_pcp:72kB free_cma:0kB [ 413.887993] lowmem_reserve[]: 0 0 0 0 0 [ 413.888012] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB [ 413.896223] active_anon:12265 inactive_anon:16886 isolated_anon:0 [ 413.896223] active_file:13 inactive_file:6 isolated_file:0 [ 413.896223] unevictable:0 dirty:0 writeback:0 unstable:0 [ 413.896223] slab_reclaimable:12716 slab_unreclaimable:114379 [ 413.896223] mapped:52702 shmem:17173 pagetables:765 bounce:0 [ 413.896223] free:13811 free_pcp:78 free_cma:0 [ 413.896408] 1*512kB [ 413.903167] Node 0 active_anon:46856kB inactive_anon:22180kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 413.910110] (U) [ 413.917026] Node 1 active_anon:2204kB inactive_anon:45364kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:0kB writeback:0kB shmem:45636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 413.919565] 0*1024kB [ 413.922075] Node 0 [ 413.924301] 1*2048kB (M) [ 413.934352] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.959063] 2*4096kB [ 413.970435] lowmem_reserve[]: [ 413.976475] (M) [ 413.983769] 0 [ 413.988579] = 10952kB [ 413.991941] 2717 [ 413.994339] Node 0 [ 414.007437] 2718 [ 414.013700] DMA32: [ 414.016633] 2718 [ 414.019821] 1443*4kB (UMEH) 751*8kB (UMEH) 229*16kB (UMEH) 31*32kB (UMEH) 10*64kB (H) 3*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17716kB [ 414.019883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 414.019930] Node 1 Normal: 237*4kB (UM) 173*8kB (M) 134*16kB (ME) 96*32kB (M) 43*64kB (M) 10*128kB (UME) 3*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26684kB [ 414.020005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.020011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 414.020017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.020022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 414.020026] 17209 total pagecache pages [ 414.020037] 0 pages in swap cache [ 414.034570] 2718 [ 414.040853] Swap cache stats: add 0, delete 0, find 0/0 [ 414.045520] Free swap = 0kB [ 414.047954] Node 0 DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:46840kB inactive_anon:22180kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2644kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 414.047977] lowmem_reserve[]: 0 0 0 0 0 [ 414.050739] Total swap = 0kB [ 414.085512] Node 0 [ 414.094976] 2097051 pages RAM [ 414.131170] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.154423] 0 pages HighMem/MovableOnly [ 414.166197] lowmem_reserve[]: [ 414.184213] 363849 pages reserved [ 414.196612] 0 [ 414.221124] 0 pages cma reserved [ 414.227545] 0 [ 414.228544] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 414.230492] 0 [ 414.232771] Killed process 4232 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 414.449410] 0 0 [ 414.451407] Node 1 Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:412kB bounce:0kB free_pcp:192kB local_pcp:72kB free_cma:0kB [ 414.454297] oom_reaper: reaped process 4232 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 414.490280] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 414.510839] lowmem_reserve[]: 0 0 0 0 0 [ 414.512913] systemd-journal cpuset= [ 414.514842] Node 0 [ 414.514844] / mems_allowed=0-1 [ 414.518617] DMA: [ 414.520739] CPU: 1 PID: 3541 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 414.523908] 0*4kB [ 414.525950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.538078] 1*8kB [ 414.545278] Call Trace: [ 414.545285] (U) [ 414.547428] dump_stack+0x1b2/0x281 [ 414.547441] dump_header+0x178/0x82f [ 414.547451] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 414.547459] ? ___ratelimit+0x2cd/0x530 [ 414.547469] oom_kill_process.cold+0x10/0xa40 [ 414.547487] out_of_memory+0xe3e/0x1190 [ 414.552221] 0*16kB [ 414.555635] ? oom_killer_disable+0x1c0/0x1c0 [ 414.561414] 0*32kB [ 414.564404] ? mutex_trylock+0x152/0x1a0 [ 414.570949] 1*64kB [ 414.572828] __alloc_pages_nodemask+0x23e1/0x2720 [ 414.578842] (U) [ 414.579005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 414.583462] 1*128kB [ 414.585710] alloc_pages_current+0x155/0x260 [ 414.590070] Bluetooth: hci2 command 0x041b tx timeout [ 414.591952] filemap_fault+0x11a1/0x1ad0 [ 414.601008] (U) [ 414.603564] ext4_filemap_fault+0x84/0xb0 [ 414.605850] 0*256kB [ 414.610240] __do_fault+0xfa/0x380 [ 414.610249] __handle_mm_fault+0x2497/0x4620 [ 414.610260] ? vm_insert_page+0x7c0/0x7c0 [ 414.610282] ? mark_held_locks+0xa6/0xf0 [ 414.610293] handle_mm_fault+0x455/0x9c0 [ 414.615569] 1*512kB [ 414.619514] __do_page_fault+0x549/0xad0 [ 414.619527] ? spurious_fault+0x640/0x640 [ 414.619535] ? do_page_fault+0x60/0x500 [ 414.619543] ? page_fault+0x2f/0x50 [ 414.619550] page_fault+0x45/0x50 [ 414.619558] RIP: 0001:0xffffffffffffffff [ 414.619563] RSP: b4df01e0:00007ffc781d1780 EFLAGS: 7ffc781d1590 [ 414.625653] Mem-Info: [ 414.628996] (U) [ 414.631648] active_anon:12260 inactive_anon:16886 isolated_anon:0 [ 414.631648] active_file:13 inactive_file:11 isolated_file:0 [ 414.631648] unevictable:0 dirty:0 writeback:0 unstable:0 [ 414.631648] slab_reclaimable:12716 slab_unreclaimable:114366 [ 414.631648] mapped:52702 shmem:17173 pagetables:764 bounce:0 [ 414.631648] free:13838 free_pcp:90 free_cma:0 [ 414.636025] 0*1024kB 1*2048kB [ 414.646088] Node 0 active_anon:46840kB inactive_anon:22180kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 414.651509] (M) [ 414.654707] Node 1 active_anon:2200kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:0kB writeback:0kB shmem:45636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 414.658872] 2*4096kB (M) = 10952kB [ 414.658884] Node 0 DMA32: 1443*4kB (UMEH) 751*8kB (UMEH) 229*16kB (UMEH) 31*32kB (UMEH) 10*64kB (H) [ 414.669166] Node 0 [ 414.674027] 3*128kB [ 414.685972] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.723325] (H) [ 414.754838] lowmem_reserve[]: [ 414.789037] 1*256kB [ 414.791859] 0 [ 414.794020] (H) [ 414.796326] 2717 [ 414.828465] 0*512kB [ 414.833078] 2718 [ 414.835086] 0*1024kB [ 414.837440] 2718 2718 [ 414.837451] Node 0 DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:46840kB inactive_anon:22180kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2644kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB [ 414.837470] lowmem_reserve[]: 0 0 0 [ 414.843744] 0*2048kB [ 414.844399] 0 0 [ 414.878024] 0*4096kB = 17716kB [ 414.884528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 414.895298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.899506] Node 1 Normal: 237*4kB (UM) 173*8kB (M) 134*16kB (ME) 96*32kB (M) 43*64kB (M) 10*128kB (UME) 3*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26684kB [ 414.928325] lowmem_reserve[]: [ 414.946898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.948577] 0 [ 414.950369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 414.963090] 0 0 0 0 [ 414.973881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.974181] Node 1 [ 414.983142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 414.986992] Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:412kB bounce:0kB free_pcp:192kB local_pcp:120kB free_cma:0kB [ 414.998233] 17197 total pagecache pages [ 415.027992] lowmem_reserve[]: 0 0 0 0 0 [ 415.031991] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 415.032996] 0 pages in swap cache [ 415.048280] Node 0 DMA32: 1443*4kB (UMEH) 753*8kB (UMEH) 230*16kB (UMEH) 31*32kB (UMEH) 10*64kB (H) 3*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17748kB [ 415.054570] Swap cache stats: add 0, delete 0, find 0/0 [ 415.067631] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 415.075689] Free swap = 0kB [ 415.082874] Total swap = 0kB [ 415.084456] Node 1 Normal: [ 415.085880] 2097051 pages RAM [ 415.085886] 0 pages HighMem/MovableOnly [ 415.088837] 237*4kB (UM) 173*8kB (M) 134*16kB (ME) 96*32kB (M) 43*64kB (M) 10*128kB (UME) 3*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26684kB [ 415.098350] 363849 pages reserved [ 415.115285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.120873] 0 pages cma reserved [ 415.124193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.136790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.145737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.159369] 17197 total pagecache pages [ 415.163355] 0 pages in swap cache [ 415.168845] Swap cache stats: add 0, delete 0, find 0/0 [ 415.174217] Free swap = 0kB [ 415.179455] Total swap = 0kB [ 415.182486] 2097051 pages RAM [ 415.185580] 0 pages HighMem/MovableOnly [ 415.191656] 363849 pages reserved [ 415.195109] 0 pages cma reserved [ 415.200635] Out of memory (oom_kill_allocating_task): Kill process 3541 (systemd-journal) score 0 or sacrifice child [ 415.213410] Killed process 3541 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1832kB [ 415.239007] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 415.255168] in:imklog cpuset= [ 415.266819] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 415.287841] / mems_allowed=0-1 [ 415.294071] CPU: 1 PID: 4162 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 415.301441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.310787] Call Trace: [ 415.313373] dump_stack+0x1b2/0x281 [ 415.316998] dump_header+0x178/0x82f [ 415.320704] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 415.325803] ? ___ratelimit+0x2cd/0x530 [ 415.329775] oom_kill_process.cold+0x10/0xa40 [ 415.334285] out_of_memory+0xe3e/0x1190 [ 415.338256] ? oom_killer_disable+0x1c0/0x1c0 [ 415.342747] ? mutex_trylock+0x152/0x1a0 [ 415.346802] __alloc_pages_nodemask+0x23e1/0x2720 [ 415.351652] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 415.356510] alloc_pages_current+0x155/0x260 [ 415.360916] filemap_fault+0x11a1/0x1ad0 [ 415.364978] ext4_filemap_fault+0x84/0xb0 [ 415.369125] __do_fault+0xfa/0x380 [ 415.372664] __handle_mm_fault+0x2497/0x4620 [ 415.372843] systemd-journal cpuset= [ 415.377067] ? vm_insert_page+0x7c0/0x7c0 [ 415.377078] ? lock_downgrade+0x740/0x740 [ 415.377092] ? mark_held_locks+0xa6/0xf0 [ 415.377103] handle_mm_fault+0x455/0x9c0 [ 415.377116] __do_page_fault+0x549/0xad0 [ 415.377128] ? spurious_fault+0x640/0x640 [ 415.380752] / mems_allowed=0-1 [ 415.384900] ? do_page_fault+0x60/0x500 [ 415.412421] ? page_fault+0x2f/0x50 [ 415.416057] page_fault+0x45/0x50 [ 415.419505] RIP: 1fa0:0x1f9f [ 415.422511] RSP: 0000:00005580153ab9d0 EFLAGS: 7fbdc1fd6da0 [ 415.433397] CPU: 0 PID: 3541 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 415.434450] Mem-Info: [ 415.439144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.439148] Call Trace: [ 415.439166] dump_stack+0x1b2/0x281 [ 415.439178] warn_alloc.cold+0x96/0x1cc [ 415.439188] ? zone_watermark_ok_safe+0x220/0x220 [ 415.439196] ? usleep_range+0x130/0x130 [ 415.439204] ? try_to_free_pages+0x23f/0x6e0 [ 415.439213] ? _find_next_bit+0xdb/0x100 [ 415.439222] ? run_timer_softirq+0x5a0/0x5a0 [ 415.439237] __alloc_pages_nodemask+0x2127/0x2720 [ 415.439267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 415.439294] alloc_pages_current+0x155/0x260 [ 415.439307] filemap_fault+0x11a1/0x1ad0 [ 415.439327] ext4_filemap_fault+0x84/0xb0 [ 415.439337] __do_fault+0xfa/0x380 [ 415.439347] __handle_mm_fault+0x2497/0x4620 [ 415.439357] ? vm_insert_page+0x7c0/0x7c0 [ 415.439375] ? mark_held_locks+0xa6/0xf0 [ 415.439385] handle_mm_fault+0x455/0x9c0 [ 415.447692] active_anon:12248 inactive_anon:16886 isolated_anon:0 [ 415.447692] active_file:12 inactive_file:12 isolated_file:0 [ 415.447692] unevictable:0 dirty:0 writeback:0 unstable:0 [ 415.447692] slab_reclaimable:12716 slab_unreclaimable:114366 [ 415.447692] mapped:44002 shmem:17173 pagetables:727 bounce:0 [ 415.447692] free:16813 free_pcp:274 free_cma:0 [ 415.449665] __do_page_fault+0x549/0xad0 [ 415.459042] Node 0 active_anon:46792kB inactive_anon:22180kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139288kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 415.461583] ? spurious_fault+0x640/0x640 [ 415.465201] Node 1 active_anon:2200kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:0kB writeback:0kB shmem:45636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 415.469153] ? do_page_fault+0x60/0x500 [ 415.469161] ? page_fault+0x2f/0x50 [ 415.469168] page_fault+0x45/0x50 [ 415.469177] RIP: 0001:0xffffffffffffffff [ 415.469183] RSP: b4df01e0:00007ffc781d1780 EFLAGS: 7ffc781d1590 [ 415.474006] Node 0 [ 415.643465] Mem-Info: [ 415.650578] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.692361] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 415.700861] Node 0 DMA32 free:29616kB min:36200kB low:45248kB high:54296kB active_anon:46792kB inactive_anon:22180kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2496kB bounce:0kB free_pcp:852kB local_pcp:720kB free_cma:0kB [ 415.750439] lowmem_reserve[]: 0 0 0 0 0 [ 415.753007] active_anon:12248 inactive_anon:16886 isolated_anon:0 [ 415.753007] active_file:37 inactive_file:78 isolated_file:0 [ 415.753007] unevictable:0 dirty:0 writeback:0 unstable:0 [ 415.753007] slab_reclaimable:12716 slab_unreclaimable:114029 [ 415.753007] mapped:44027 shmem:17173 pagetables:727 bounce:0 [ 415.753007] free:20226 free_pcp:277 free_cma:0 [ 415.757171] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.757189] lowmem_reserve[]: 0 0 0 0 0 [ 415.757210] Node 1 Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:412kB bounce:0kB free_pcp:244kB local_pcp:172kB free_cma:0kB [ 415.757228] lowmem_reserve[]: 0 0 0 0 0 [ 415.757246] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 415.894632] Node 0 DMA32: 1539*4kB (UMEH) 1091*8kB (UMEH) 517*16kB (UMEH) 316*32kB (UMEH) 287*64kB (UH) 3*128kB (H) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52532kB [ 415.896860] Node 0 active_anon:46792kB inactive_anon:22180kB active_file:488kB inactive_file:568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139988kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 415.911206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 415.986812] Node 1 active_anon:2200kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:0kB writeback:0kB shmem:45636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 415.992761] Node 1 [ 416.042580] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.056794] Normal: 237*4kB (UM) 173*8kB (M) 134*16kB (ME) 96*32kB (M) 43*64kB (M) 10*128kB (UME) 3*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26684kB [ 416.116790] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 416.124941] Node 0 DMA32 free:53424kB min:36200kB low:45248kB high:54296kB active_anon:46732kB inactive_anon:22180kB active_file:416kB inactive_file:688kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2468kB bounce:0kB free_pcp:536kB local_pcp:108kB free_cma:0kB [ 416.146799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.199796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.207368] lowmem_reserve[]: 0 0 0 0 0 [ 416.212751] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.216944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.271472] lowmem_reserve[]: 0 0 0 0 0 [ 416.277284] Node 1 Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:2156kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:408kB bounce:0kB free_pcp:244kB local_pcp:72kB free_cma:0kB [ 416.288118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.354299] 17247 total pagecache pages [ 416.359420] lowmem_reserve[]: 0 0 0 0 0 [ 416.362188] 0 pages in swap cache [ 416.363535] Node 0 DMA: 0*4kB 3*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 416.369161] Swap cache stats: add 0, delete 0, find 0/0 [ 416.392498] Free swap = 0kB [ 416.396383] Total swap = 0kB [ 416.396821] Node 0 DMA32: 1590*4kB (UMEH) 1244*8kB (UMEH) 523*16kB (UMEH) 323*32kB (UMEH) 290*64kB (UH) 5*128kB (UH) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54728kB [ 416.400922] 2097051 pages RAM [ 416.423946] 0 pages HighMem/MovableOnly [ 416.431856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 416.433904] 363849 pages reserved [ 416.451335] 0 pages cma reserved [ 416.455565] Out of memory (oom_kill_allocating_task): Kill process 4162 (in:imklog) score 0 or sacrifice child [ 416.456804] Node 1 Normal: 237*4kB (UM) 173*8kB (M) 134*16kB (ME) 96*32kB (M) 43*64kB (M) 10*128kB (UME) 3*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 26684kB [ 416.466504] Killed process 4160 (rsyslogd) total-vm:254332kB, anon-rss:764kB, file-rss:0kB, shmem-rss:0kB [ 416.503297] oom_reaper: reaped process 3541 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1832kB [ 416.516800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.525644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.534389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.543985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.552948] 18246 total pagecache pages [ 416.557088] 0 pages in swap cache [ 416.560614] Swap cache stats: add 0, delete 0, find 0/0 [ 416.566047] Free swap = 0kB [ 416.568471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.569162] Total swap = 0kB [ 416.575733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.578806] 2097051 pages RAM [ 416.588338] 0 pages HighMem/MovableOnly [ 416.592302] 363849 pages reserved [ 416.595738] 0 pages cma reserved [ 416.599367] systemd-journal invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 416.601816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.609300] systemd-journal cpuset=/ mems_allowed=0-1 [ 416.621827] CPU: 0 PID: 3541 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 416.629702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.636810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.639043] Call Trace: [ 416.648011] dump_stack+0x1b2/0x281 [ 416.651632] dump_header+0x178/0x82f [ 416.655338] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 416.660434] ? ___ratelimit+0x2cd/0x530 [ 416.664402] oom_kill_process.cold+0x10/0xa40 [ 416.668900] out_of_memory+0xe3e/0x1190 [ 416.672865] ? pagefault_out_of_memory+0xaa/0xd0 [ 416.677614] ? oom_killer_disable+0x1c0/0x1c0 [ 416.682099] ? mutex_trylock+0x152/0x1a0 [ 416.686148] ? pagefault_out_of_memory+0xaa/0xd0 [ 416.690894] pagefault_out_of_memory+0xbb/0xd0 [ 416.695465] ? out_of_memory+0x1190/0x1190 [ 416.699693] ? lock_downgrade+0x740/0x740 [ 416.703835] mm_fault_error+0xad/0x2c0 [ 416.707715] __do_page_fault+0x93c/0xad0 [ 416.711771] ? spurious_fault+0x640/0x640 [ 416.715913] ? do_page_fault+0x60/0x500 [ 416.719878] ? page_fault+0x2f/0x50 [ 416.723506] page_fault+0x45/0x50 [ 416.726946] RIP: 0001:0xffffffffffffffff [ 416.730989] RSP: b4df01e0:00007ffc781d1780 EFLAGS: 7ffc781d1590 [ 416.731800] Mem-Info: [ 416.732786] device bridge_slave_1 left promiscuous mode [ 416.744409] active_anon:11897 inactive_anon:16886 isolated_anon:0 [ 416.744409] active_file:55 inactive_file:1286 isolated_file:0 [ 416.744409] unevictable:0 dirty:0 writeback:0 unstable:0 [ 416.744409] slab_reclaimable:12714 slab_unreclaimable:113679 [ 416.744409] mapped:44996 shmem:17173 pagetables:682 bounce:0 [ 416.744409] free:22100 free_pcp:256 free_cma:0 [ 416.757035] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.780392] Node 0 active_anon:46732kB inactive_anon:22180kB active_file:188kB inactive_file:5216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143264kB dirty:0kB writeback:0kB shmem:23056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 416.814379] Node 1 active_anon:856kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:0kB writeback:0kB shmem:45636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 416.841703] device bridge_slave_0 left promiscuous mode [ 416.842225] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.851099] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.874194] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 416.885108] Node 0 DMA32 free:49500kB min:36200kB low:45248kB high:54296kB active_anon:46732kB inactive_anon:22180kB active_file:152kB inactive_file:5392kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2468kB bounce:0kB free_pcp:256kB local_pcp:68kB free_cma:0kB [ 416.915145] lowmem_reserve[]: 0 0 0 0 0 [ 416.919193] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.945253] lowmem_reserve[]: 0 0 0 0 0 [ 416.949301] Node 1 Normal free:132984kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:45364kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:260kB bounce:0kB free_pcp:756kB local_pcp:76kB free_cma:0kB [ 416.979150] device veth1_macvtap left promiscuous mode [ 416.979251] lowmem_reserve[]: 0 0 0 0 0 [ 416.984526] device veth0_macvtap left promiscuous mode [ 416.998633] Node 0 DMA: 0*4kB 3*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 417.011742] device veth1_vlan left promiscuous mode [ 417.020184] Node 0 DMA32: 1346*4kB (UMEH) 956*8kB (UMEH) 411*16kB (UEH) 302*32kB (UMEH) 289*64kB (UH) 5*128kB (UMH) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48920kB [ 417.035951] device veth0_vlan left promiscuous mode [ 417.036136] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 417.053003] Node 1 Normal: 220*4kB (UM) 156*8kB (UM) 131*16kB (UME) 95*32kB (UM) 54*64kB (UM) 32*128kB (UME) 15*256kB (UME) 10*512kB (UME) 11*1024kB (UME) 10*2048kB (U) 46*4096kB (UM) = 243936kB [ 417.072052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.099135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 417.130051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.156865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 417.165564] 19001 total pagecache pages [ 417.170210] 0 pages in swap cache [ 417.173658] Swap cache stats: add 0, delete 0, find 0/0 [ 417.186819] Free swap = 0kB [ 417.189858] Total swap = 0kB [ 417.192867] 2097051 pages RAM [ 417.196048] 0 pages HighMem/MovableOnly [ 417.200162] 363849 pages reserved [ 417.203681] 0 pages cma reserved [ 417.207536] Out of memory (oom_kill_allocating_task): Kill process 3541 (systemd-journal) score 0 or sacrifice child [ 417.222717] Killed process 3541 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1832kB [ 417.243690] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 417.251146] device hsr_slave_1 left promiscuous mode [ 417.256324] device hsr_slave_0 left promiscuous mode [ 417.261783] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 417.294900] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 417.311893] team0 (unregistering): Port device team_slave_1 removed [ 417.339682] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 417.362318] team0 (unregistering): Port device team_slave_0 removed [ 417.371274] systemd[1]: Stopped Journal Service. [ 417.401080] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 417.404961] systemd[1]: Starting Journal Service... [ 417.429635] systemd[1]: Started System Logging Service. [ 417.448119] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 417.486002] bond0 (unregistering): Released all slaves [ 417.605478] systemd-journald[4491]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 418.249525] systemd[1]: Started Journal Service. 00:48:21 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:21 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 00:48:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, 0x0) 00:48:21 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:48:21 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:48:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:21 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 00:48:21 executing program 1: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 00:48:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', &(0x7f0000000100)=0x9}) 00:48:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 422.969293] IPVS: ftp: loaded support on port[0] = 21 [ 423.199262] chnl_net:caif_netlink_parms(): no params data found [ 423.349245] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.355955] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.368610] device bridge_slave_0 entered promiscuous mode [ 423.375859] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.385748] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.395226] device bridge_slave_1 entered promiscuous mode [ 423.433137] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 423.446326] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 423.479065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 423.486519] team0: Port device team_slave_0 added [ 423.496500] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 423.504390] team0: Port device team_slave_1 added [ 423.537991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.545717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.575952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.592015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.598474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.628356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.642082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 423.651363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 423.691609] device hsr_slave_0 entered promiscuous mode [ 423.698554] device hsr_slave_1 entered promiscuous mode [ 423.704886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 423.716540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 423.865462] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.871912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.878670] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.885043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.940317] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 423.946407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.962289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 423.975495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.983656] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.993786] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.005742] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 424.016515] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.032826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.041740] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.048168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.070682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.082222] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.088634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.112029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.125465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.134287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.151604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.166488] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 424.173744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 424.185453] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 424.194129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.205823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.225143] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 424.235635] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 424.248374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.255091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.275391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.373727] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 424.390652] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 424.403033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.412931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.461673] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 424.469565] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 424.476434] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 424.491926] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 424.502428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.511719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.526053] device veth0_vlan entered promiscuous mode [ 424.534861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.546827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.561694] device veth1_vlan entered promiscuous mode [ 424.568148] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 424.582942] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 424.602094] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 424.613107] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 424.624490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.632355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.644219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.652245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.666593] device veth0_macvtap entered promiscuous mode [ 424.673589] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 424.682890] device veth1_macvtap entered promiscuous mode [ 424.689754] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 424.699721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 424.710524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 424.719636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 424.731029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.740840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 424.751349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.761876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 424.772162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.781839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 424.792177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.801825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 424.812064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.822920] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 424.830573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.839963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.850373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.860041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.870329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.879961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.890187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.899863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.910078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.916828] Bluetooth: hci4 command 0x0406 tx timeout [ 424.920037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.934566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.945445] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 424.952899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.960268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 424.969293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.976445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.985399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.994024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.997059] Bluetooth: hci2 command 0x0409 tx timeout [ 425.003167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.808649] oom_reaper: reaped process 4508 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 425.841159] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 425.855886] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 425.861046] CPU: 0 PID: 4508 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 425.868833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.878187] Call Trace: [ 425.880765] dump_stack+0x1b2/0x281 [ 425.884373] dump_header+0x178/0x82f [ 425.888066] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 425.893147] ? ___ratelimit+0x2cd/0x530 [ 425.897114] oom_kill_process.cold+0x10/0xa40 [ 425.901593] out_of_memory+0xe3e/0x1190 [ 425.905549] ? oom_killer_disable+0x1c0/0x1c0 [ 425.910023] ? mutex_trylock+0x152/0x1a0 [ 425.914065] __alloc_pages_nodemask+0x23e1/0x2720 [ 425.918895] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 425.923717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 425.928452] ? retint_kernel+0x2d/0x2d [ 425.932323] alloc_pages_current+0x155/0x260 [ 425.936713] __vmalloc_area_node+0x40a/0x680 [ 425.941107] ? __vmalloc_node_range+0x150/0x150 [ 425.945752] ? __get_vm_area_node+0x27d/0x340 [ 425.950230] __vmalloc_node_range+0xbe/0x150 [ 425.954617] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 425.959956] vmalloc_user+0x47/0xa0 [ 425.963561] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 425.967894] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 425.973252] vb2_vmalloc_alloc+0xa6/0x2d0 [ 425.977401] __vb2_queue_alloc+0x47a/0xd90 [ 425.981629] vb2_core_create_bufs+0x279/0x5a0 [ 425.986113] ? __vb2_queue_free+0x7a0/0x7a0 [ 425.990414] ? trace_hardirqs_on+0x10/0x10 [ 425.994632] ? __lock_acquire+0x5fc/0x3f20 [ 425.998850] vb2_create_bufs+0x2e1/0x5b0 [ 426.003064] ? ___preempt_schedule+0x16/0x18 [ 426.007465] ? vb2_thread_start+0x310/0x310 [ 426.011774] ? trace_hardirqs_on+0x10/0x10 [ 426.015990] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 426.021087] vb2_ioctl_create_bufs+0x1f7/0x330 [ 426.025649] v4l_create_bufs+0xa4/0x150 [ 426.029614] __video_do_ioctl+0x65b/0x6a0 [ 426.033740] ? video_ioctl2+0x30/0x30 [ 426.037524] ? __might_fault+0x177/0x1b0 [ 426.041603] ? video_ioctl2+0x30/0x30 [ 426.045411] video_usercopy+0xfd/0xe70 [ 426.049281] ? v4l_g_ctrl+0x390/0x390 [ 426.053084] ? lock_acquire+0x170/0x3f0 [ 426.057038] ? lock_downgrade+0x740/0x740 [ 426.061162] ? trace_hardirqs_on+0x10/0x10 [ 426.065403] ? futex_exit_release+0x220/0x220 [ 426.069880] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 426.074960] ? debug_check_no_obj_freed+0x2c0/0x680 [ 426.079958] v4l2_ioctl+0x1bb/0x2f0 [ 426.083571] ? v4l2_open+0x2f0/0x2f0 [ 426.087278] do_vfs_ioctl+0x75a/0xff0 [ 426.091068] ? ioctl_preallocate+0x1a0/0x1a0 [ 426.095454] ? lock_downgrade+0x740/0x740 [ 426.099626] ? __fget+0x225/0x360 [ 426.103093] ? do_vfs_ioctl+0xff0/0xff0 [ 426.107065] ? security_file_ioctl+0x83/0xb0 [ 426.111454] SyS_ioctl+0x7f/0xb0 [ 426.114827] ? do_vfs_ioctl+0xff0/0xff0 [ 426.118815] do_syscall_64+0x1d5/0x640 [ 426.122684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 426.127851] RIP: 0033:0x4665f9 [ 426.131017] RSP: 002b:00007f06b7616188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.138813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 426.146063] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 426.153309] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 426.160557] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 426.167804] R13: 00007ffd10d9ec1f R14: 00007f06b7616300 R15: 0000000000022000 [ 426.184685] Mem-Info: [ 426.187541] active_anon:12249 inactive_anon:18917 isolated_anon:0 [ 426.187541] active_file:15 inactive_file:16 isolated_file:0 [ 426.187541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 426.187541] slab_reclaimable:12847 slab_unreclaimable:114517 [ 426.187541] mapped:52616 shmem:19221 pagetables:764 bounce:0 [ 426.187541] free:13804 free_pcp:393 free_cma:0 [ 426.221385] Node 0 active_anon:46888kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 426.249523] Node 1 active_anon:2108kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36336kB dirty:0kB writeback:0kB shmem:53792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 426.277808] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.304358] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 426.310079] Node 0 DMA32 free:17492kB min:36200kB low:45248kB high:54296kB active_anon:44840kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:1448kB local_pcp:776kB free_cma:0kB [ 426.339204] lowmem_reserve[]: 0 0 0 0 0 [ 426.343178] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.369322] lowmem_reserve[]: 0 0 0 0 0 [ 426.373420] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:2108kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:316kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 426.402160] lowmem_reserve[]: 0 0 0 0 0 [ 426.406145] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 10972kB [ 426.419818] Node 0 DMA32: 1407*4kB (UMEH) 745*8kB (MEH) 199*16kB (ME) 35*32kB (MEH) 11*64kB (MH) 1*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17492kB [ 426.435319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 426.446462] Node 1 Normal: 164*4kB (UM) 82*8kB (UM) 28*16kB (UME) 3*32kB (UM) 5*64kB (UM) 2*128kB (UE) 9*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 4*4096kB (UM) = 26752kB [ 426.462881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.471784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 426.480453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.489341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 426.498007] 19252 total pagecache pages [ 426.501995] 0 pages in swap cache [ 426.505471] Swap cache stats: add 0, delete 0, find 0/0 [ 426.511730] Free swap = 0kB [ 426.514736] Total swap = 0kB [ 426.517830] 2097051 pages RAM [ 426.520929] 0 pages HighMem/MovableOnly [ 426.524885] 363849 pages reserved [ 426.528579] 0 pages cma reserved [ 426.531951] Out of memory (oom_kill_allocating_task): Kill process 4508 (syz-executor.3) score 0 or sacrifice child [ 426.542611] Killed process 4508 (syz-executor.3) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 426.552771] syz-executor.3: vmalloc: allocation failure, allocated 1675841536 of 4294778880 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 426.558971] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 426.571476] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 426.584306] CPU: 0 PID: 4508 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 426.585282] in:imklog cpuset= [ 426.592088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.592092] Call Trace: [ 426.592114] dump_stack+0x1b2/0x281 [ 426.592127] warn_alloc.cold+0x96/0x1cc [ 426.592138] ? zone_watermark_ok_safe+0x220/0x220 [ 426.592160] __vmalloc_area_node+0x48a/0x680 [ 426.592175] ? __vmalloc_node_range+0x150/0x150 [ 426.592183] ? __get_vm_area_node+0x27d/0x340 [ 426.592196] __vmalloc_node_range+0xbe/0x150 [ 426.592212] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 426.592220] vmalloc_user+0x47/0xa0 [ 426.592229] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 426.592239] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 426.592248] vb2_vmalloc_alloc+0xa6/0x2d0 [ 426.592259] __vb2_queue_alloc+0x47a/0xd90 [ 426.592280] vb2_core_create_bufs+0x279/0x5a0 [ 426.592291] ? __vb2_queue_free+0x7a0/0x7a0 [ 426.595380] / [ 426.604737] ? trace_hardirqs_on+0x10/0x10 [ 426.607335] mems_allowed=0-1 [ 426.610911] ? __lock_acquire+0x5fc/0x3f20 [ 426.686476] vb2_create_bufs+0x2e1/0x5b0 [ 426.690566] ? ___preempt_schedule+0x16/0x18 [ 426.694963] ? vb2_thread_start+0x310/0x310 [ 426.699272] ? trace_hardirqs_on+0x10/0x10 [ 426.703507] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 426.708607] vb2_ioctl_create_bufs+0x1f7/0x330 [ 426.713184] v4l_create_bufs+0xa4/0x150 [ 426.717152] __video_do_ioctl+0x65b/0x6a0 [ 426.721296] ? video_ioctl2+0x30/0x30 [ 426.725089] ? __might_fault+0x177/0x1b0 [ 426.729171] ? video_ioctl2+0x30/0x30 [ 426.732993] video_usercopy+0xfd/0xe70 [ 426.736883] ? v4l_g_ctrl+0x390/0x390 [ 426.740684] ? lock_acquire+0x170/0x3f0 [ 426.744738] ? lock_downgrade+0x740/0x740 [ 426.749330] ? trace_hardirqs_on+0x10/0x10 [ 426.753556] ? futex_exit_release+0x220/0x220 [ 426.758055] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 426.763160] ? debug_check_no_obj_freed+0x2c0/0x680 [ 426.768169] v4l2_ioctl+0x1bb/0x2f0 [ 426.771783] ? v4l2_open+0x2f0/0x2f0 [ 426.775486] do_vfs_ioctl+0x75a/0xff0 [ 426.779294] ? ioctl_preallocate+0x1a0/0x1a0 [ 426.783693] ? lock_downgrade+0x740/0x740 [ 426.787836] ? __fget+0x225/0x360 [ 426.791275] ? do_vfs_ioctl+0xff0/0xff0 [ 426.795236] ? security_file_ioctl+0x83/0xb0 [ 426.799635] SyS_ioctl+0x7f/0xb0 [ 426.802990] ? do_vfs_ioctl+0xff0/0xff0 [ 426.806956] do_syscall_64+0x1d5/0x640 [ 426.810839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 426.816014] RIP: 0033:0x4665f9 [ 426.819191] RSP: 002b:00007f06b7616188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.826889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 426.834155] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 426.841429] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 426.848712] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 426.855972] R13: 00007ffd10d9ec1f R14: 00007f06b7616300 R15: 0000000000022000 [ 426.863256] CPU: 1 PID: 4490 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 426.869748] Mem-Info: [ 426.870627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.873040] active_anon:12249 inactive_anon:18917 isolated_anon:0 [ 426.873040] active_file:15 inactive_file:16 isolated_file:0 [ 426.873040] unevictable:0 dirty:0 writeback:0 unstable:0 [ 426.873040] slab_reclaimable:12847 slab_unreclaimable:114517 [ 426.873040] mapped:52616 shmem:19221 pagetables:764 bounce:0 [ 426.873040] free:13804 free_pcp:393 free_cma:0 [ 426.882366] Call Trace: [ 426.882389] dump_stack+0x1b2/0x281 [ 426.882406] dump_header+0x178/0x82f [ 426.882417] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 426.882425] ? ___ratelimit+0x2cd/0x530 [ 426.882434] oom_kill_process.cold+0x10/0xa40 [ 426.882452] out_of_memory+0xe3e/0x1190 [ 426.882479] ? oom_killer_disable+0x1c0/0x1c0 [ 426.920071] Node 0 active_anon:46888kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 426.921888] ? mutex_trylock+0x152/0x1a0 [ 426.925589] Node 1 active_anon:2108kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36336kB dirty:0kB writeback:0kB shmem:53792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 426.930666] __alloc_pages_nodemask+0x23e1/0x2720 [ 426.930689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 426.930713] alloc_pages_current+0x155/0x260 [ 426.930725] filemap_fault+0x11a1/0x1ad0 [ 426.930744] ext4_filemap_fault+0x84/0xb0 [ 426.934687] Node 0 [ 426.939167] __do_fault+0xfa/0x380 [ 426.939177] __handle_mm_fault+0x2497/0x4620 [ 426.939187] ? vm_insert_page+0x7c0/0x7c0 [ 426.939196] ? lock_downgrade+0x740/0x740 [ 426.939209] ? mark_held_locks+0xa6/0xf0 [ 426.939221] handle_mm_fault+0x455/0x9c0 [ 426.939234] __do_page_fault+0x549/0xad0 [ 426.947584] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.947673] ? spurious_fault+0x640/0x640 [ 426.979681] lowmem_reserve[]: [ 427.006353] ? do_page_fault+0x60/0x500 [ 427.006363] ? page_fault+0x2f/0x50 [ 427.006369] page_fault+0x45/0x50 [ 427.006378] RIP: 1fa0:0x1f9f [ 427.006382] RSP: 0000:0000562cf5c519d0 EFLAGS: 7f168aa5eda0 [ 427.016309] Mem-Info: [ 427.023116] 0 [ 427.025193] active_anon:12249 inactive_anon:18917 isolated_anon:0 [ 427.025193] active_file:15 inactive_file:16 isolated_file:0 [ 427.025193] unevictable:0 dirty:0 writeback:0 unstable:0 [ 427.025193] slab_reclaimable:12847 slab_unreclaimable:114517 [ 427.025193] mapped:52616 shmem:19221 pagetables:764 bounce:0 [ 427.025193] free:13804 free_pcp:393 free_cma:0 [ 427.030010] 2717 [ 427.035470] Node 0 active_anon:46888kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 427.046124] 2718 [ 427.047960] Node 1 active_anon:2108kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36336kB dirty:0kB writeback:0kB shmem:53792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 427.047965] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.047988] lowmem_reserve[]: [ 427.052071] 2718 [ 427.056084] 0 [ 427.066421] 2718 [ 427.090414] 2717 [ 427.090519] Bluetooth: hci2 command 0x041b tx timeout [ 427.093544] 2718 [ 427.106769] 2718 [ 427.107698] Node 0 [ 427.113330] 2718 [ 427.115760] DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:44840kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:1328kB local_pcp:656kB free_cma:0kB [ 427.153126] lowmem_reserve[]: [ 427.188890] Node 0 [ 427.212711] 0 [ 427.248287] DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:44840kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:1328kB local_pcp:672kB free_cma:0kB [ 427.255029] 0 [ 427.264984] lowmem_reserve[]: [ 427.295778] 0 [ 427.301219] 0 [ 427.333695] 0 0 [ 427.336816] 0 0 0 0 [ 427.338097] Node 0 [ 427.339793] Node 0 [ 427.339811] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.339816] lowmem_reserve[]: [ 427.342040] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.344246] 0 [ 427.371431] lowmem_reserve[]: [ 427.380469] 0 [ 427.399537] 0 0 0 0 0 [ 427.406612] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:2108kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:316kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 427.410893] 0 [ 427.437330] lowmem_reserve[]: 0 0 0 0 0 [ 427.443110] Node 0 DMA: 1*4kB [ 427.443125] 0 [ 427.443129] (U) 1*8kB [ 427.446315] 0 [ 427.448139] (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 4*256kB (U) 3*512kB (U) [ 427.452828] 0*1024kB 0*2048kB 2*4096kB (M) = 10972kB [ 427.468286] Node 0 DMA32: 1406*4kB (UMEH) 749*8kB (MEH) 201*16kB (UME) 35*32kB (MEH) 12*64kB (UMH) 1*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17616kB [ 427.469345] Node 1 [ 427.485856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 427.491661] Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:2108kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:316kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 427.501016] Node 1 Normal: 164*4kB (UM) 82*8kB (UM) 28*16kB (UME) 3*32kB (UM) 5*64kB (UM) 2*128kB (UE) 9*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 4*4096kB (UM) = 26752kB [ 427.535230] lowmem_reserve[]: [ 427.545774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.545781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 427.545790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.557518] 0 [ 427.559899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 427.566350] 0 [ 427.575211] 19252 total pagecache pages [ 427.575222] 0 pages in swap cache [ 427.575227] Swap cache stats: add 0, delete 0, find 0/0 [ 427.575231] Free swap = 0kB [ 427.575234] Total swap = 0kB [ 427.575241] 2097051 pages RAM [ 427.575244] 0 pages HighMem/MovableOnly [ 427.575248] 363849 pages reserved [ 427.575250] 0 pages cma reserved [ 427.575257] Out of memory (oom_kill_allocating_task): Kill process 4490 (in:imklog) score 0 or sacrifice child [ 427.575305] Killed process 4487 (rsyslogd) total-vm:254332kB, anon-rss:672kB, file-rss:0kB, shmem-rss:0kB [ 427.643659] oom_reaper: reaped process 4487 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 427.648899] 0 0 0 [ 427.655277] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 10972kB [ 427.671328] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 427.675163] Node 0 [ 427.684030] syz-fuzzer cpuset= [ 427.686038] in:imklog: [ 427.686266] / [ 427.689467] page allocation failure: order:0 [ 427.692115] mems_allowed=0-1 [ 427.693702] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 427.700318] CPU: 0 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 427.707380] DMA32: [ 427.708158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.715596] 1443*4kB [ 427.717811] Call Trace: [ 427.717832] dump_stack+0x1b2/0x281 [ 427.717843] dump_header+0x178/0x82f [ 427.717854] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 427.717865] ? ___ratelimit+0x2cd/0x530 [ 427.727238] (null) [ 427.729626] oom_kill_process.cold+0x10/0xa40 [ 427.732175] in:imklog cpuset= [ 427.735809] out_of_memory+0xe3e/0x1190 [ 427.739538] / [ 427.744610] ? oom_killer_disable+0x1c0/0x1c0 [ 427.748607] (UMEH) [ 427.750702] ? mutex_trylock+0x152/0x1a0 [ 427.755165] 761*8kB [ 427.758254] __alloc_pages_nodemask+0x23e1/0x2720 [ 427.758281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 427.762239] mems_allowed=0-1 [ 427.763947] alloc_pages_current+0x155/0x260 [ 427.768440] (UMEH) [ 427.770622] filemap_fault+0x11a1/0x1ad0 [ 427.774667] 207*16kB [ 427.776990] ext4_filemap_fault+0x84/0xb0 [ 427.777002] __do_fault+0xfa/0x380 [ 427.777012] __handle_mm_fault+0x2497/0x4620 [ 427.796752] (UME) [ 427.800385] ? vm_insert_page+0x7c0/0x7c0 [ 427.802768] 37*32kB [ 427.806905] ? mark_held_locks+0xa6/0xf0 [ 427.806918] handle_mm_fault+0x455/0x9c0 [ 427.826743] (UMEH) [ 427.827414] __do_page_fault+0x549/0xad0 [ 427.831539] 12*64kB [ 427.833763] ? spurious_fault+0x640/0x640 [ 427.844221] ? do_page_fault+0x60/0x500 [ 427.846742] (UMH) [ 427.848182] ? page_fault+0x2f/0x50 [ 427.848184] 1*128kB (H) [ 427.850319] page_fault+0x45/0x50 [ 427.853923] 3*256kB [ 427.856596] RIP: 1e00:0x947879 [ 427.865486] RSP: 03e6:000000c00038fe40 EFLAGS: 00000003 [ 427.865510] CPU: 1 PID: 4490 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 427.869232] Mem-Info: [ 427.870864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.878315] active_anon:12049 inactive_anon:18917 isolated_anon:0 [ 427.878315] active_file:13 inactive_file:15 isolated_file:0 [ 427.878315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 427.878315] slab_reclaimable:12847 slab_unreclaimable:114517 [ 427.878315] mapped:52616 shmem:19221 pagetables:764 bounce:0 [ 427.878315] free:13930 free_pcp:492 free_cma:0 [ 427.880593] Call Trace: [ 427.892130] Node 0 active_anon:46488kB inactive_anon:22216kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 427.923165] dump_stack+0x1b2/0x281 [ 427.923178] warn_alloc.cold+0x96/0x1cc [ 427.923188] ? zone_watermark_ok_safe+0x220/0x220 [ 427.923196] ? usleep_range+0x130/0x130 [ 427.923203] ? try_to_free_pages+0x23f/0x6e0 [ 427.923212] ? _find_next_bit+0xdb/0x100 [ 427.923219] ? run_timer_softirq+0x5a0/0x5a0 [ 427.923233] __alloc_pages_nodemask+0x2127/0x2720 [ 427.923254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 427.923276] alloc_pages_current+0x155/0x260 [ 427.928076] Node 1 active_anon:1708kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36336kB dirty:0kB writeback:0kB shmem:53792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 427.953529] filemap_fault+0x11a1/0x1ad0 [ 427.953548] ext4_filemap_fault+0x84/0xb0 [ 427.953558] __do_fault+0xfa/0x380 [ 427.953567] __handle_mm_fault+0x2497/0x4620 [ 427.953575] ? vm_insert_page+0x7c0/0x7c0 [ 427.953585] ? lock_downgrade+0x740/0x740 [ 427.953598] ? mark_held_locks+0xa6/0xf0 [ 427.953607] handle_mm_fault+0x455/0x9c0 [ 427.953618] __do_page_fault+0x549/0xad0 [ 427.953627] ? spurious_fault+0x640/0x640 [ 427.953635] ? do_page_fault+0x60/0x500 [ 427.953643] ? page_fault+0x2f/0x50 [ 427.953650] page_fault+0x45/0x50 [ 427.953657] RIP: 1fa0:0x1f9f [ 427.953662] RSP: 0000:0000562cf5c519d0 EFLAGS: 7f168aa5eda0 [ 428.004377] (H) [ 428.036543] Node 0 [ 428.038317] 0*512kB [ 428.042430] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.046514] 0*1024kB [ 428.059098] lowmem_reserve[]: [ 428.072252] 0*2048kB [ 428.082855] 0 [ 428.090492] 0*4096kB [ 428.091417] 2717 [ 428.093679] = 18020kB [ 428.129587] Mem-Info: [ 428.131637] Node 0 [ 428.133694] active_anon:12027 inactive_anon:18917 isolated_anon:0 [ 428.133694] active_file:15 inactive_file:16 isolated_file:0 [ 428.133694] unevictable:0 dirty:0 writeback:0 unstable:0 [ 428.133694] slab_reclaimable:12847 slab_unreclaimable:114547 [ 428.133694] mapped:52616 shmem:19221 pagetables:764 bounce:0 [ 428.133694] free:13952 free_pcp:461 free_cma:0 [ 428.136066] Normal: 0*4kB [ 428.145168] 2718 [ 428.173998] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.174038] Node 1 Normal: 164*4kB (UM) 82*8kB (UM) 28*16kB (UME) 5*32kB (UM) 5*64kB (UM) 2*128kB (UE) 9*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 4*4096kB (UM) = 26816kB [ 428.188084] Node 0 active_anon:46484kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 428.204322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.204330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.204337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.204343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.204347] 19252 total pagecache pages [ 428.204357] 0 pages in swap cache [ 428.204363] Swap cache stats: add 0, delete 0, find 0/0 [ 428.204366] Free swap = 0kB [ 428.204369] Total swap = 0kB [ 428.204375] 2097051 pages RAM [ 428.204378] 0 pages HighMem/MovableOnly [ 428.204382] 363849 pages reserved [ 428.204385] 0 pages cma reserved [ 428.267134] 2718 2718 [ 428.267146] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:44436kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2740kB bounce:0kB free_pcp:1236kB local_pcp:580kB free_cma:0kB [ 428.267164] lowmem_reserve[]: 0 0 0 0 0 [ 428.267181] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.267199] lowmem_reserve[]: 0 0 0 0 0 [ 428.267217] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:1624kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:316kB bounce:0kB free_pcp:608kB local_pcp:488kB free_cma:0kB [ 428.267235] lowmem_reserve[]: 0 0 0 0 0 [ 428.267253] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 10972kB [ 428.267317] Node 0 DMA32: 1443*4kB (UMEH) 761*8kB (UMEH) 207*16kB (UME) 37*32kB (UMEH) 12*64kB (UMH) 1*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 428.267379] Node 0 Normal: 0*4kB [ 428.280409] Node 1 active_anon:1624kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36336kB dirty:0kB writeback:0kB shmem:53792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 428.283313] 0*8kB [ 428.286296] Node 0 [ 428.299447] 0*16kB [ 428.300405] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.302851] 0*32kB [ 428.338649] lowmem_reserve[]: [ 428.439019] 0*64kB [ 428.462990] 0 [ 428.486765] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.510606] 2717 [ 428.513571] Node 1 [ 428.513573] 2718 2718 [ 428.515617] Normal: [ 428.517882] 2718 [ 428.517890] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:44436kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2740kB bounce:0kB free_pcp:1236kB local_pcp:656kB free_cma:0kB [ 428.517912] lowmem_reserve[]: [ 428.524608] 164*4kB [ 428.524739] 0 [ 428.560133] (UM) 82*8kB (UM) 28*16kB (UME) 5*32kB (UM) 5*64kB (UM) 2*128kB (UE) 9*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 4*4096kB (UM) = 26816kB [ 428.576798] 0 0 0 0 [ 428.578569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.579141] Node 0 [ 428.592564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.594207] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.594807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.616775] lowmem_reserve[]: [ 428.634616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.655315] 19252 total pagecache pages [ 428.659368] 0 pages in swap cache [ 428.662814] Swap cache stats: add 0, delete 0, find 0/0 [ 428.666787] 0 0 0 0 0 [ 428.670671] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:1624kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:316kB bounce:0kB free_pcp:608kB local_pcp:120kB free_cma:0kB [ 428.674369] Free swap = 0kB [ 428.708675] Total swap = 0kB [ 428.711702] 2097051 pages RAM [ 428.714797] 0 pages HighMem/MovableOnly [ 428.721014] 363849 pages reserved [ 428.724460] 0 pages cma reserved [ 428.732021] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 428.744645] Killed process 4543 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 428.754774] lowmem_reserve[]: 0 0 0 0 0 [ 428.761231] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 428.780427] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 10972kB [ 428.796395] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 428.805371] CPU: 1 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 428.812820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.822165] Call Trace: [ 428.824751] dump_stack+0x1b2/0x281 [ 428.828374] dump_header+0x178/0x82f [ 428.832079] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 428.837173] ? ___ratelimit+0x2cd/0x530 [ 428.841144] oom_kill_process.cold+0x10/0xa40 [ 428.845645] out_of_memory+0xe3e/0x1190 [ 428.849622] ? oom_killer_disable+0x1c0/0x1c0 [ 428.854108] ? mutex_trylock+0x152/0x1a0 [ 428.858165] __alloc_pages_nodemask+0x23e1/0x2720 [ 428.863014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 428.867867] alloc_pages_current+0x155/0x260 [ 428.872269] filemap_fault+0x11a1/0x1ad0 [ 428.876339] ext4_filemap_fault+0x84/0xb0 [ 428.880485] __do_fault+0xfa/0x380 [ 428.884019] __handle_mm_fault+0x2497/0x4620 [ 428.888420] ? vm_insert_page+0x7c0/0x7c0 [ 428.892577] ? mark_held_locks+0xa6/0xf0 [ 428.896632] handle_mm_fault+0x455/0x9c0 [ 428.900689] __do_page_fault+0x549/0xad0 [ 428.904743] ? spurious_fault+0x640/0x640 [ 428.908882] ? do_page_fault+0x60/0x500 [ 428.912847] ? page_fault+0x2f/0x50 [ 428.916484] page_fault+0x45/0x50 [ 428.919929] RIP: 1e00:0x947879 [ 428.923889] RSP: 03e6:000000c00038fe40 EFLAGS: 00000003 [ 428.930296] Node 0 DMA32: 1443*4kB (UMEH) 761*8kB (UMEH) 207*16kB (UME) 37*32kB (UMEH) 12*64kB (UMH) 1*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 428.957540] Mem-Info: [ 428.959997] active_anon:12027 inactive_anon:18917 isolated_anon:0 [ 428.959997] active_file:15 inactive_file:16 isolated_file:0 [ 428.959997] unevictable:0 dirty:0 writeback:0 unstable:0 [ 428.959997] slab_reclaimable:12847 slab_unreclaimable:114547 [ 428.959997] mapped:52616 shmem:19221 pagetables:764 bounce:0 [ 428.959997] free:13952 free_pcp:460 free_cma:0 [ 428.960655] Node 0 [ 429.000347] Node 0 active_anon:46484kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 429.036665] Node 1 active_anon:1624kB inactive_anon:53452kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36336kB dirty:0kB writeback:0kB shmem:53792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 429.049299] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 429.083526] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.083811] Node 1 Normal: 164*4kB (UM) 93*8kB (UM) 29*16kB (UME) 5*32kB (UM) 5*64kB (UM) 2*128kB (UE) 9*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 4*4096kB (UM) = 26920kB [ 429.135888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.143009] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 429.144819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.158898] Bluetooth: hci2 command 0x040f tx timeout [ 429.171114] Node 0 DMA32 free:18988kB min:36200kB low:45248kB high:54296kB active_anon:44436kB inactive_anon:22216kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2740kB bounce:0kB free_pcp:1252kB local_pcp:584kB free_cma:0kB [ 429.171842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.215233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.223991] 19252 total pagecache pages [ 429.234295] 0 pages in swap cache [ 429.237166] lowmem_reserve[]: 0 0 0 0 0 [ 429.237862] Swap cache stats: add 0, delete 0, find 0/0 [ 429.241749] Node 0 [ 429.253342] Free swap = 0kB [ 429.259223] Total swap = 0kB [ 429.262240] 2097051 pages RAM [ 429.265336] 0 pages HighMem/MovableOnly [ 429.266843] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.275326] 363849 pages reserved [ 429.303940] 0 pages cma reserved [ 429.308071] lowmem_reserve[]: 0 0 0 0 0 [ 429.312071] Node 1 Normal free:26920kB min:53696kB low:67120kB high:80544kB active_anon:1624kB inactive_anon:53452kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:316kB bounce:0kB free_pcp:608kB local_pcp:120kB free_cma:0kB [ 429.349810] lowmem_reserve[]: 0 0 0 0 0 [ 429.353903] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 10972kB [ 429.373876] Node 0 DMA32: 1443*4kB (UMEH) 877*8kB (UMEH) 215*16kB (UME) 37*32kB (UMEH) 12*64kB (UMH) 1*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19076kB [ 429.396819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 429.415562] Node 1 Normal: 164*4kB (UM) 93*8kB (UM) 29*16kB (UME) 5*32kB (UM) 5*64kB (UM) 2*128kB (UE) 9*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 4*4096kB (UM) = 26920kB [ 429.438457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.451525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.462182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.476634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.491701] 19252 total pagecache pages [ 429.495684] 0 pages in swap cache [ 429.499233] Swap cache stats: add 0, delete 0, find 0/0 [ 429.504589] Free swap = 0kB [ 429.510006] Total swap = 0kB [ 429.513042] 2097051 pages RAM [ 429.516131] 0 pages HighMem/MovableOnly [ 429.520841] 363849 pages reserved [ 429.524288] 0 pages cma reserved [ 429.528011] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 429.538845] Killed process 2999 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 429.566400] oom_reaper: reaped process 2999 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 430.079590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.086325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.109204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.117067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.138770] device bridge_slave_1 left promiscuous mode [ 430.144307] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.168245] device bridge_slave_0 left promiscuous mode [ 430.173769] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.189230] device veth1_macvtap left promiscuous mode [ 430.194538] device veth0_macvtap left promiscuous mode [ 430.201274] device veth1_vlan left promiscuous mode [ 430.206343] device veth0_vlan left promiscuous mode [ 430.300641] device hsr_slave_1 left promiscuous mode [ 430.312581] device hsr_slave_0 left promiscuous mode [ 430.326429] team0 (unregistering): Port device team_slave_1 removed [ 430.338096] team0 (unregistering): Port device team_slave_0 removed [ 430.349251] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 430.360677] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 430.395286] bond0 (unregistering): Released all slaves 00:48:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 431.879186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.885914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.898633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.905338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.917604] device bridge_slave_1 left promiscuous mode [ 431.923141] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.937797] device bridge_slave_0 left promiscuous mode [ 431.943334] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.957741] device veth1_macvtap left promiscuous mode [ 431.963049] device veth0_macvtap left promiscuous mode [ 431.973925] device veth1_vlan left promiscuous mode [ 431.979918] device veth0_vlan left promiscuous mode [ 432.088894] device hsr_slave_1 left promiscuous mode [ 432.102790] device hsr_slave_0 left promiscuous mode [ 432.124656] team0 (unregistering): Port device team_slave_1 removed [ 432.134670] team0 (unregistering): Port device team_slave_0 removed [ 432.150311] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 432.167108] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 432.209275] bond0 (unregistering): Released all slaves 00:48:34 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', 0x0}) 00:48:34 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:34 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:34 executing program 1: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 00:48:34 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:48:34 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:34 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:34 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:34 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:34 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:34 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 435.999845] IPVS: ftp: loaded support on port[0] = 21 [ 436.139660] IPVS: ftp: loaded support on port[0] = 21 [ 436.314678] chnl_net:caif_netlink_parms(): no params data found [ 436.504409] chnl_net:caif_netlink_parms(): no params data found [ 436.601810] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.609095] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.616613] device bridge_slave_0 entered promiscuous mode [ 436.625151] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.632006] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.639631] device bridge_slave_1 entered promiscuous mode [ 436.678056] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 436.694617] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.707418] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.714874] device bridge_slave_0 entered promiscuous mode [ 436.728211] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 436.749667] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.756044] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.768019] device bridge_slave_1 entered promiscuous mode [ 436.787621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 436.794950] team0: Port device team_slave_0 added [ 436.817727] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 436.825082] team0: Port device team_slave_1 added [ 436.833371] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 436.851134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 436.885691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.892521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.918962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.930225] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 436.938562] team0: Port device team_slave_0 added [ 436.944481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.951574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.977155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.988550] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 436.995909] team0: Port device team_slave_1 added [ 437.001849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 437.010078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 437.053030] device hsr_slave_0 entered promiscuous mode [ 437.063633] device hsr_slave_1 entered promiscuous mode [ 437.082602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 437.091232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.098997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.129246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.142293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 437.160316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.166584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.194021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.206062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 437.214644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 437.275390] device hsr_slave_0 entered promiscuous mode [ 437.281947] device hsr_slave_1 entered promiscuous mode [ 437.302916] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 437.332623] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 437.430553] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 437.518321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.539218] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 437.560135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 437.566302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.575164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.594083] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 437.608746] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 437.614843] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.646245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 437.654141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.668454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.676187] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.682611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.707812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 437.721888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 437.729298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.741070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.749809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.763002] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.769445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.781313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.802140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.810721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 437.822711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.833762] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 437.847612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 437.854884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.867446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.877721] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 437.887785] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 437.893864] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.902698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 437.910645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.918945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.926007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.934256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.942971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.957573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 437.972563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 437.982036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 437.994713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.003778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.016071] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.022514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.035695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.036827] Bluetooth: hci1 command 0x0409 tx timeout [ 438.044739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.056846] Bluetooth: hci2 command 0x0409 tx timeout [ 438.060732] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.068424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.080968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.091225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.105992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 438.118206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 438.126504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.142808] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 438.148981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.156420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.169856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.179929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.191366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 438.205779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 438.222643] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 438.234244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.245925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 438.259527] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 438.271484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.280855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.293128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.301453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.314418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 438.323903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.335027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.344407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.359564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 438.373609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.380463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.393436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.413639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 438.420980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.435828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 438.446685] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 438.462988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.501057] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 438.521230] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 438.532663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.540039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.552282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.639969] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 438.655758] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 438.664804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.681423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.715542] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 438.726564] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 438.740889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.754990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.790366] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 438.798339] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 438.805099] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 438.823313] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 438.831000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.840117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 438.855238] device veth0_vlan entered promiscuous mode [ 438.864928] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 438.875463] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 438.883240] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 438.891760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 438.902516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 438.916238] device veth1_vlan entered promiscuous mode [ 438.957657] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 438.987986] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 438.994984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.053115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.069610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.080357] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 439.105881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.117719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.147468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.154785] device veth0_vlan entered promiscuous mode [ 439.172613] device veth1_vlan entered promiscuous mode [ 439.178925] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 439.262696] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 439.274772] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 439.327169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.334834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.377662] oom_reaper: reaped process 4832 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 439.410927] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 439.443753] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 439.455568] CPU: 1 PID: 4865 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 439.463393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.472749] Call Trace: [ 439.475344] dump_stack+0x1b2/0x281 [ 439.478996] dump_header+0x178/0x82f [ 439.482733] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 439.487832] ? ___ratelimit+0x2cd/0x530 [ 439.491804] oom_kill_process.cold+0x10/0xa40 [ 439.496310] out_of_memory+0xe3e/0x1190 [ 439.500283] ? oom_killer_disable+0x1c0/0x1c0 [ 439.504770] ? mutex_trylock+0x152/0x1a0 [ 439.508809] __alloc_pages_nodemask+0x23e1/0x2720 [ 439.513636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 439.518469] alloc_pages_current+0x155/0x260 [ 439.522855] filemap_fault+0x11a1/0x1ad0 [ 439.526901] ext4_filemap_fault+0x84/0xb0 [ 439.531042] __do_fault+0xfa/0x380 [ 439.534569] __handle_mm_fault+0x2497/0x4620 [ 439.538975] ? vm_insert_page+0x7c0/0x7c0 [ 439.543160] ? mark_held_locks+0xa6/0xf0 [ 439.547204] handle_mm_fault+0x455/0x9c0 [ 439.551249] __do_page_fault+0x549/0xad0 [ 439.555287] ? spurious_fault+0x640/0x640 [ 439.559410] ? do_page_fault+0x60/0x500 [ 439.563357] ? page_fault+0x2f/0x50 [ 439.566963] page_fault+0x45/0x50 [ 439.570403] RIP: 4bf950:0x7ffcd7533620 [ 439.574263] RSP: 0000:00007ffcd75334d0 EFLAGS: 7ffcd75334e0 [ 439.588357] Mem-Info: [ 439.590437] syz-executor.0: [ 439.594103] active_anon:11722 inactive_anon:18916 isolated_anon:0 [ 439.594103] active_file:11 inactive_file:18 isolated_file:0 [ 439.594103] unevictable:0 dirty:0 writeback:0 unstable:0 [ 439.594103] slab_reclaimable:12757 slab_unreclaimable:115464 [ 439.594103] mapped:52694 shmem:19221 pagetables:762 bounce:0 [ 439.594103] free:13907 free_pcp:54 free_cma:0 [ 439.596504] vmalloc: allocation failure, allocated 1675296768 of 4294778880 bytes [ 439.602769] Node 0 active_anon:45428kB inactive_anon:22208kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 439.644006] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 439.676489] Node 1 active_anon:1460kB inactive_anon:53456kB active_file:12kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36648kB dirty:0kB writeback:0kB shmem:53800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 439.681401] (null) [ 439.682586] Node 0 [ 439.716924] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 439.724328] CPU: 0 PID: 4832 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 439.724962] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.732109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.732114] Call Trace: [ 439.732134] dump_stack+0x1b2/0x281 [ 439.732147] warn_alloc.cold+0x96/0x1cc [ 439.732159] ? zone_watermark_ok_safe+0x220/0x220 [ 439.732180] __vmalloc_area_node+0x48a/0x680 [ 439.732195] ? __vmalloc_node_range+0x150/0x150 [ 439.732203] ? __get_vm_area_node+0x27d/0x340 [ 439.732215] __vmalloc_node_range+0xbe/0x150 [ 439.732229] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 439.732236] vmalloc_user+0x47/0xa0 [ 439.732245] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 439.732254] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 439.732263] vb2_vmalloc_alloc+0xa6/0x2d0 [ 439.732274] __vb2_queue_alloc+0x47a/0xd90 [ 439.732303] vb2_core_create_bufs+0x279/0x5a0 [ 439.732314] ? __vb2_queue_free+0x7a0/0x7a0 [ 439.732328] ? trace_hardirqs_on+0x10/0x10 [ 439.732338] ? __lock_acquire+0x5fc/0x3f20 [ 439.732351] vb2_create_bufs+0x2e1/0x5b0 [ 439.732365] ? futex_wait_queue_me+0x3bb/0x590 [ 439.732375] ? vb2_thread_start+0x310/0x310 [ 439.732385] ? trace_hardirqs_on+0x10/0x10 [ 439.732400] vb2_ioctl_create_bufs+0x1f7/0x330 [ 439.732413] v4l_create_bufs+0xa4/0x150 [ 439.732424] __video_do_ioctl+0x65b/0x6a0 [ 439.732439] ? video_ioctl2+0x30/0x30 [ 439.732450] ? __might_fault+0x177/0x1b0 [ 439.732459] ? video_ioctl2+0x30/0x30 [ 439.732469] video_usercopy+0xfd/0xe70 [ 439.770461] lowmem_reserve[]: [ 439.773518] ? v4l_g_ctrl+0x390/0x390 [ 439.783732] 0 [ 439.786719] ? lock_acquire+0x170/0x3f0 [ 439.786730] ? lock_downgrade+0x740/0x740 [ 439.786740] ? trace_hardirqs_on+0x10/0x10 [ 439.786752] ? futex_exit_release+0x220/0x220 [ 439.786763] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 439.786773] ? debug_check_no_obj_freed+0x2c0/0x680 [ 439.786787] v4l2_ioctl+0x1bb/0x2f0 [ 439.786795] ? v4l2_open+0x2f0/0x2f0 [ 439.786806] do_vfs_ioctl+0x75a/0xff0 [ 439.786817] ? ioctl_preallocate+0x1a0/0x1a0 [ 439.786825] ? lock_downgrade+0x740/0x740 [ 439.786838] ? __fget+0x225/0x360 [ 439.786847] ? do_vfs_ioctl+0xff0/0xff0 [ 439.786859] ? security_file_ioctl+0x83/0xb0 [ 439.786869] SyS_ioctl+0x7f/0xb0 [ 439.803818] 2717 [ 439.805781] ? do_vfs_ioctl+0xff0/0xff0 [ 439.812030] 2718 [ 439.814248] do_syscall_64+0x1d5/0x640 [ 439.830101] 2718 [ 439.832452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 439.842720] 2718 [ 439.845181] RIP: 0033:0x4665f9 [ 439.858078] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.858089] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 439.858094] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 439.858099] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 439.858103] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 439.858108] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 439.869361] Mem-Info: [ 439.880188] Node 0 [ 439.889814] active_anon:11722 inactive_anon:18916 isolated_anon:0 [ 439.889814] active_file:11 inactive_file:18 isolated_file:0 [ 439.889814] unevictable:0 dirty:0 writeback:0 unstable:0 [ 439.889814] slab_reclaimable:12757 slab_unreclaimable:115464 [ 439.889814] mapped:52694 shmem:19221 pagetables:762 bounce:0 [ 439.889814] free:13876 free_pcp:75 free_cma:0 [ 439.895359] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:45428kB inactive_anon:22208kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2768kB bounce:0kB free_pcp:180kB local_pcp:60kB free_cma:0kB [ 439.904497] Node 0 active_anon:45428kB inactive_anon:22208kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 439.914771] lowmem_reserve[]: [ 439.927228] Node 1 active_anon:1460kB inactive_anon:53456kB active_file:12kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36648kB dirty:0kB writeback:0kB shmem:53800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 439.927233] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.927253] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 439.927273] Node 0 DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:45428kB inactive_anon:22208kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2768kB bounce:0kB free_pcp:180kB local_pcp:120kB free_cma:0kB [ 439.927304] lowmem_reserve[]: 0 0 0 0 0 [ 439.927321] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.927338] lowmem_reserve[]: 0 0 0 0 0 [ 439.927358] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:53456kB active_file:12kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 439.927380] lowmem_reserve[]: 0 0 0 0 0 [ 439.927399] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 439.927467] Node 0 DMA32: 1557*4kB (ME) 782*8kB (UME) 226*16kB (ME) 31*32kB (UME) 10*64kB (UME) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 439.927532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 439.937344] 0 [ 439.946944] 0*64kB [ 439.951843] 0 [ 439.954663] 0*128kB [ 439.962549] 0 [ 439.974234] 0*256kB [ 439.978805] 0 [ 439.984749] 0*512kB [ 439.991441] 0 [ 440.001304] 0*1024kB [ 440.018150] 0*2048kB [ 440.031177] Node 0 [ 440.035846] 0*4096kB [ 440.036830] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 440.079854] = 0kB [ 440.104296] lowmem_reserve[]: [ 440.136167] Bluetooth: hci2 command 0x041b tx timeout [ 440.164164] 0 [ 440.185050] Node 1 [ 440.221799] 0 [ 440.252244] Bluetooth: hci1 command 0x041b tx timeout [ 440.303884] 0 [ 440.313442] Normal: [ 440.333469] 0 [ 440.337752] 181*4kB [ 440.364163] 0 [ 440.375918] (UM) [ 440.401445] 134*8kB (UM) 77*16kB (UME) 42*32kB (UM) 11*64kB (UM) 9*128kB (UME) 11*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 28500kB [ 440.414520] Node 1 Normal free:28436kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:53456kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 440.424096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.465039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.465219] lowmem_reserve[]: [ 440.474333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.485817] 0 0 0 0 0 [ 440.491544] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 440.492812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.519942] 19250 total pagecache pages [ 440.520347] Node 0 DMA32: [ 440.523951] 0 pages in swap cache [ 440.523959] 1558*4kB [ 440.528972] Swap cache stats: add 0, delete 0, find 0/0 [ 440.542516] Free swap = 0kB [ 440.543167] (UME) [ 440.545558] Total swap = 0kB [ 440.545567] 781*8kB [ 440.549998] 2097051 pages RAM [ 440.554999] (ME) [ 440.556201] 0 pages HighMem/MovableOnly [ 440.556209] 226*16kB [ 440.562602] 363849 pages reserved [ 440.570746] 0 pages cma reserved [ 440.574808] (ME) 30*32kB (ME) 9*64kB (UME) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17888kB [ 440.601437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 440.625095] Node 1 Normal: 181*4kB (UM) 134*8kB (UM) 77*16kB (UME) 42*32kB (UM) 11*64kB (UM) 9*128kB (UME) 11*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 28500kB [ 440.654725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.678940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.696349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.716781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.725373] 19250 total pagecache pages [ 440.736500] 0 pages in swap cache [ 440.740189] Swap cache stats: add 0, delete 0, find 0/0 [ 440.745543] Free swap = 0kB [ 440.755193] Total swap = 0kB [ 440.758276] 2097051 pages RAM [ 440.761369] 0 pages HighMem/MovableOnly [ 440.765329] 363849 pages reserved [ 440.775118] 0 pages cma reserved [ 440.778532] Out of memory (oom_kill_allocating_task): Kill process 4865 (syz-executor.4) score 0 or sacrifice child [ 440.795532] Killed process 4865 (syz-executor.4) total-vm:93120kB, anon-rss:84kB, file-rss:34596kB, shmem-rss:0kB [ 440.832359] oom_reaper: reaped process 4865 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 440.861129] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 440.886058] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 440.890973] CPU: 1 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 440.898419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.907772] Call Trace: [ 440.910362] dump_stack+0x1b2/0x281 [ 440.913985] dump_header+0x178/0x82f [ 440.917695] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 440.922790] ? ___ratelimit+0x2cd/0x530 [ 440.926760] oom_kill_process.cold+0x10/0xa40 [ 440.931257] out_of_memory+0xe3e/0x1190 [ 440.935226] ? oom_killer_disable+0x1c0/0x1c0 [ 440.939712] ? mutex_trylock+0x152/0x1a0 [ 440.943770] __alloc_pages_nodemask+0x23e1/0x2720 [ 440.948619] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 440.953469] alloc_pages_current+0x155/0x260 [ 440.957873] filemap_fault+0x11a1/0x1ad0 [ 440.961942] ext4_filemap_fault+0x84/0xb0 [ 440.966083] __do_fault+0xfa/0x380 [ 440.969618] __handle_mm_fault+0x2497/0x4620 [ 440.974020] ? vm_insert_page+0x7c0/0x7c0 [ 440.978189] ? mark_held_locks+0xa6/0xf0 [ 440.982242] handle_mm_fault+0x455/0x9c0 [ 440.986299] __do_page_fault+0x549/0xad0 [ 440.990358] ? spurious_fault+0x640/0x640 [ 440.994759] ? do_page_fault+0x60/0x500 [ 440.998725] ? page_fault+0x2f/0x50 [ 441.002342] page_fault+0x45/0x50 [ 441.005798] RIP: 0900:0x668ab0790c [ 441.009326] RSP: 03e7:000000c00003fe40 EFLAGS: 00000003 [ 441.019613] Mem-Info: [ 441.033745] active_anon:11710 inactive_anon:18916 isolated_anon:0 [ 441.033745] active_file:18 inactive_file:7 isolated_file:0 [ 441.033745] unevictable:0 dirty:0 writeback:0 unstable:0 [ 441.033745] slab_reclaimable:12757 slab_unreclaimable:114622 [ 441.033745] mapped:52694 shmem:19221 pagetables:762 bounce:0 [ 441.033745] free:14748 free_pcp:118 free_cma:0 [ 441.081696] Node 0 active_anon:45400kB inactive_anon:22208kB active_file:4kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 441.122341] Node 1 active_anon:1436kB inactive_anon:53456kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36648kB dirty:0kB writeback:0kB shmem:53800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 441.164622] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.203614] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 441.212998] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:45396kB inactive_anon:22208kB active_file:40kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2680kB bounce:0kB free_pcp:344kB local_pcp:112kB free_cma:0kB [ 441.278950] lowmem_reserve[]: 0 0 0 0 0 [ 441.282978] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.355721] lowmem_reserve[]: 0 0 0 0 0 [ 441.366082] Node 1 Normal free:30148kB min:53696kB low:67120kB high:80544kB active_anon:1436kB inactive_anon:53456kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 441.426055] lowmem_reserve[]: 0 0 0 0 0 [ 441.525765] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 441.581105] Node 0 DMA32: 1556*4kB (ME) 782*8kB (UME) 226*16kB (ME) 33*32kB (UME) 10*64kB (UME) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 441.648843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 441.676051] Node 1 Normal: 181*4kB (M) 129*8kB (UM) 97*16kB (UME) 73*32kB (UM) 16*64kB (UM) 8*128kB (ME) 10*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 30220kB [ 441.711743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.743389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 441.772975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.803023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 441.832466] 19250 total pagecache pages [ 441.836557] 0 pages in swap cache [ 441.856464] Swap cache stats: add 0, delete 0, find 0/0 [ 441.883134] Free swap = 0kB [ 441.886166] Total swap = 0kB [ 441.905791] 2097051 pages RAM [ 441.915324] 0 pages HighMem/MovableOnly [ 441.935756] 363849 pages reserved [ 441.945525] 0 pages cma reserved [ 441.965594] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 441.992982] Killed process 31949 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 442.032483] oom_reaper: reaped process 31949 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 442.090833] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 442.139574] in:imklog cpuset=/ mems_allowed=0-1 [ 442.144298] CPU: 1 PID: 4816 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 442.151656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.161006] Call Trace: [ 442.163596] dump_stack+0x1b2/0x281 [ 442.167220] dump_header+0x178/0x82f [ 442.170927] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 442.176047] ? ___ratelimit+0x2cd/0x530 [ 442.180016] oom_kill_process.cold+0x10/0xa40 [ 442.184515] out_of_memory+0xe3e/0x1190 [ 442.188660] ? oom_killer_disable+0x1c0/0x1c0 [ 442.193144] ? mutex_trylock+0x152/0x1a0 [ 442.197193] __alloc_pages_nodemask+0x23e1/0x2720 [ 442.202036] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 442.206880] alloc_pages_current+0x155/0x260 [ 442.211278] filemap_fault+0x11a1/0x1ad0 [ 442.215365] ext4_filemap_fault+0x84/0xb0 [ 442.219506] __do_fault+0xfa/0x380 [ 442.223033] __handle_mm_fault+0x2497/0x4620 [ 442.227447] ? vm_insert_page+0x7c0/0x7c0 [ 442.231605] ? mark_held_locks+0xa6/0xf0 [ 442.235656] handle_mm_fault+0x455/0x9c0 [ 442.239708] __do_page_fault+0x549/0xad0 [ 442.243760] ? spurious_fault+0x640/0x640 [ 442.247918] ? do_page_fault+0x60/0x500 [ 442.251880] ? page_fault+0x2f/0x50 [ 442.255492] page_fault+0x45/0x50 [ 442.258935] RIP: 67feede0:0x1f9f [ 442.262294] RSP: 0009:0000000000000006 EFLAGS: 7f8b67feeda0 [ 442.267481] Mem-Info: [ 442.275600] active_anon:11698 inactive_anon:18916 isolated_anon:0 [ 442.275600] active_file:14 inactive_file:15 isolated_file:0 [ 442.275600] unevictable:0 dirty:0 writeback:0 unstable:0 [ 442.275600] slab_reclaimable:12757 slab_unreclaimable:114607 [ 442.275600] mapped:52694 shmem:19221 pagetables:740 bounce:0 [ 442.275600] free:16032 free_pcp:262 free_cma:0 [ 442.316052] Node 0 active_anon:45356kB inactive_anon:22208kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174128kB dirty:0kB writeback:0kB shmem:23084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 442.347602] Bluetooth: hci1 command 0x040f tx timeout [ 442.348174] Node 1 active_anon:1436kB inactive_anon:53456kB active_file:28kB inactive_file:1128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36748kB dirty:0kB writeback:0kB shmem:53800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 442.382350] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.414738] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 442.444544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.475627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.479818] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 442.490570] Node 0 DMA32 free:49420kB min:36200kB low:45248kB high:54296kB active_anon:45356kB inactive_anon:22208kB active_file:28kB inactive_file:932kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2680kB bounce:0kB free_pcp:1148kB local_pcp:776kB free_cma:0kB [ 442.533225] lowmem_reserve[]: 0 0 0 0 0 [ 442.535034] device veth0_macvtap entered promiscuous mode [ 442.539328] Node 0 [ 442.543799] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 442.544520] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.569134] device veth1_macvtap entered promiscuous mode [ 442.595331] lowmem_reserve[]: 0 0 0 0 0 [ 442.602266] Node 1 Normal free:255048kB min:53696kB low:67120kB high:80544kB active_anon:1436kB inactive_anon:53456kB active_file:1828kB inactive_file:7728kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:428kB bounce:0kB free_pcp:1020kB local_pcp:400kB free_cma:0kB [ 442.618271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 442.645082] lowmem_reserve[]: 0 0 0 0 0 [ 442.655733] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 442.684564] Node 0 DMA32: 1449*4kB (UME) 658*8kB (UME) 227*16kB (UME) 281*32kB (UME) 266*64kB (UME) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41092kB [ 442.711148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 442.716216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 442.736538] Node 1 Normal: 8*4kB (U) 72*8kB (UM) 171*16kB (UME) 319*32kB (U) 81*64kB (U) 58*128kB (UME) 41*256kB (UE) 24*512kB (UE) 13*1024kB (UE) 11*2048kB (UM) 61*4096kB (U) = 334640kB [ 442.740035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.786739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.795873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.802162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.828790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.833616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.846586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.856556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.858049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.866082] 24430 total pagecache pages [ 442.879638] 0 pages in swap cache [ 442.883095] Swap cache stats: add 0, delete 0, find 0/0 [ 442.887018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.889685] Free swap = 0kB [ 442.901088] Total swap = 0kB [ 442.904101] 2097051 pages RAM [ 442.908175] 0 pages HighMem/MovableOnly [ 442.912165] 363849 pages reserved [ 442.915599] 0 pages cma reserved [ 442.918750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.920539] Out of memory (oom_kill_allocating_task): Kill process 4816 (in:imklog) score 0 or sacrifice child [ 442.939441] Killed process 4814 (rsyslogd) total-vm:254332kB, anon-rss:872kB, file-rss:0kB, shmem-rss:0kB [ 442.949384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.982847] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 442.990271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.010596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.022876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.030824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.047516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.057770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.067797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.078397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.088174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.099120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.108914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.119240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.130416] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 443.137867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.145248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.154333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.349313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.363422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.374392] device bridge_slave_1 left promiscuous mode [ 443.385662] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.403967] device bridge_slave_0 left promiscuous mode [ 443.410758] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.426233] device veth1_vlan left promiscuous mode [ 443.432060] device veth0_vlan left promiscuous mode [ 443.575960] device hsr_slave_1 left promiscuous mode [ 443.591849] device hsr_slave_0 left promiscuous mode [ 443.611702] team0 (unregistering): Port device team_slave_1 removed [ 443.626032] team0 (unregistering): Port device team_slave_0 removed [ 443.641886] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 443.653248] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 443.702477] bond0 (unregistering): Released all slaves [ 443.923970] syz-executor.2 (31953) used greatest stack depth: 23608 bytes left [ 444.427260] Bluetooth: hci1 command 0x0419 tx timeout [ 445.299205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.305921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.318956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.325662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.338815] device bridge_slave_1 left promiscuous mode [ 445.344325] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.357801] device bridge_slave_0 left promiscuous mode [ 445.363305] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.376421] device veth1_macvtap left promiscuous mode [ 445.383235] device veth0_macvtap left promiscuous mode [ 445.393342] device veth1_vlan left promiscuous mode [ 445.399929] device veth0_vlan left promiscuous mode [ 445.507653] device hsr_slave_1 left promiscuous mode [ 445.515745] device hsr_slave_0 left promiscuous mode [ 445.534365] team0 (unregistering): Port device team_slave_1 removed [ 445.548054] team0 (unregistering): Port device team_slave_0 removed [ 445.559298] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 445.570892] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 445.606579] bond0 (unregistering): Released all slaves [ 446.584084] IPVS: ftp: loaded support on port[0] = 21 [ 446.752599] chnl_net:caif_netlink_parms(): no params data found [ 446.845163] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.852119] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.864661] device bridge_slave_0 entered promiscuous mode [ 446.873565] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.884308] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.892359] device bridge_slave_1 entered promiscuous mode [ 446.924719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 446.934348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 446.967857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 446.975336] team0: Port device team_slave_0 added [ 446.985538] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 446.994035] team0: Port device team_slave_1 added [ 447.025502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.031796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.057876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.071595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.077910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.103186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.113971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 447.121612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 447.142484] device hsr_slave_0 entered promiscuous mode [ 447.148141] Bluetooth: hci2 command 0x0409 tx timeout [ 447.153677] device hsr_slave_1 entered promiscuous mode [ 447.159691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 447.166579] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 447.235136] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.241530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.248231] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.254573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.284468] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 447.290842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.299414] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 447.308749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.315860] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.323313] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.333442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 447.339620] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.348289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.355807] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.362185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.371142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.380569] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.386944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.401925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.410003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.421554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.433429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.443748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.454392] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 447.460952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.468752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.476366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.490917] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 447.498877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.505500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.516012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.569922] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 447.581143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.612748] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 447.620605] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 447.627963] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 447.636480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.644416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.651690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.661092] device veth0_vlan entered promiscuous mode [ 447.670294] device veth1_vlan entered promiscuous mode [ 447.676015] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 447.684645] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 447.695778] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 447.705178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.712988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 447.721111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.732021] device veth0_macvtap entered promiscuous mode [ 447.740408] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 447.748745] device veth1_macvtap entered promiscuous mode [ 447.756815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 447.765574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 447.774175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.784180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.793615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.803582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.812745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.822525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.831690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.841454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.851848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.859606] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 447.866589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.877643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.886315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.896121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.905257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.915137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.924302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.934063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.943242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.952996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.963157] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 447.970155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.977428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.985180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.226955] Bluetooth: hci2 command 0x041b tx timeout [ 451.306796] Bluetooth: hci2 command 0x040f tx timeout [ 452.220125] oom_reaper: reaped process 5589 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 452.243815] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 452.259924] systemd-journal cpuset=/ mems_allowed=0-1 [ 452.265138] CPU: 0 PID: 4491 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 452.273010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.282359] Call Trace: [ 452.284950] dump_stack+0x1b2/0x281 [ 452.288576] dump_header+0x178/0x82f [ 452.292284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 452.297383] ? ___ratelimit+0x2cd/0x530 [ 452.301354] oom_kill_process.cold+0x10/0xa40 [ 452.305873] out_of_memory+0xe3e/0x1190 [ 452.309849] ? oom_killer_disable+0x1c0/0x1c0 [ 452.314337] ? mutex_trylock+0x152/0x1a0 [ 452.318378] __alloc_pages_nodemask+0x23e1/0x2720 [ 452.323234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 452.328064] alloc_pages_current+0x155/0x260 [ 452.332491] filemap_fault+0x11a1/0x1ad0 [ 452.336533] ext4_filemap_fault+0x84/0xb0 [ 452.340695] __do_fault+0xfa/0x380 [ 452.344210] __handle_mm_fault+0x2497/0x4620 [ 452.348596] ? vm_insert_page+0x7c0/0x7c0 [ 452.352731] ? mark_held_locks+0xa6/0xf0 [ 452.356771] handle_mm_fault+0x455/0x9c0 [ 452.360821] __do_page_fault+0x549/0xad0 [ 452.364862] ? spurious_fault+0x640/0x640 [ 452.368988] ? do_page_fault+0x60/0x500 [ 452.372947] ? page_fault+0x2f/0x50 [ 452.376565] page_fault+0x45/0x50 [ 452.379993] RIP: 0001:0xffffffffffffffff [ 452.384055] RSP: 4faa11e0:00007ffec93de4a0 EFLAGS: 7ffec93de2b0 [ 452.387742] Mem-Info: [ 452.396210] active_anon:11547 inactive_anon:18914 isolated_anon:0 [ 452.396210] active_file:13 inactive_file:13 isolated_file:0 [ 452.396210] unevictable:0 dirty:0 writeback:0 unstable:0 [ 452.396210] slab_reclaimable:12690 slab_unreclaimable:112270 [ 452.396210] mapped:44045 shmem:19216 pagetables:669 bounce:0 [ 452.396210] free:13933 free_pcp:498 free_cma:0 [ 452.398495] syz-executor.4: [ 452.431792] Node 0 active_anon:44288kB inactive_anon:22220kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139312kB dirty:0kB writeback:0kB shmem:23100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 452.437388] vmalloc: allocation failure, allocated 1723953152 of 4294778880 bytes [ 452.464840] Node 1 active_anon:1900kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36868kB dirty:0kB writeback:0kB shmem:53764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 452.470112] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 452.472500] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.506927] (null) [ 452.534744] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 452.540242] Node 0 DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:44288kB inactive_anon:22220kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2368kB bounce:0kB free_pcp:496kB local_pcp:376kB free_cma:0kB [ 452.542255] syz-executor.4 cpuset= [ 452.571421] lowmem_reserve[]: 0 0 0 0 0 [ 452.576476] / mems_allowed=0-1 [ 452.578980] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.582178] CPU: 1 PID: 5589 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 452.582186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.610153] lowmem_reserve[]: [ 452.615456] Call Trace: [ 452.624918] 0 [ 452.627893] dump_stack+0x1b2/0x281 [ 452.627908] warn_alloc.cold+0x96/0x1cc [ 452.627920] ? zone_watermark_ok_safe+0x220/0x220 [ 452.627943] __vmalloc_area_node+0x48a/0x680 [ 452.627957] ? __vmalloc_node_range+0x150/0x150 [ 452.632649] 0 [ 452.635924] ? __get_vm_area_node+0x27d/0x340 [ 452.635938] __vmalloc_node_range+0xbe/0x150 [ 452.639965] 0 [ 452.644713] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 452.651137] 0 [ 452.653738] vmalloc_user+0x47/0xa0 [ 452.655513] 0 [ 452.659991] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 452.660000] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 452.660009] vb2_vmalloc_alloc+0xa6/0x2d0 [ 452.660019] __vb2_queue_alloc+0x47a/0xd90 [ 452.660039] vb2_core_create_bufs+0x279/0x5a0 [ 452.660050] ? __vb2_queue_free+0x7a0/0x7a0 [ 452.660063] ? trace_hardirqs_on+0x10/0x10 [ 452.666230] ? __lock_acquire+0x5fc/0x3f20 [ 452.674125] Node 1 [ 452.676973] vb2_create_bufs+0x2e1/0x5b0 [ 452.676987] ? ___preempt_schedule+0x16/0x18 [ 452.676997] ? vb2_thread_start+0x310/0x310 [ 452.677007] ? trace_hardirqs_on+0x10/0x10 [ 452.677020] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 452.678839] Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:308kB bounce:0kB free_pcp:1496kB local_pcp:776kB free_cma:0kB [ 452.683119] vb2_ioctl_create_bufs+0x1f7/0x330 [ 452.690546] lowmem_reserve[]: [ 452.692592] v4l_create_bufs+0xa4/0x150 [ 452.696867] 0 [ 452.701270] __video_do_ioctl+0x65b/0x6a0 [ 452.705562] 0 [ 452.709805] ? video_ioctl2+0x30/0x30 [ 452.709816] ? __might_fault+0x177/0x1b0 [ 452.709825] ? video_ioctl2+0x30/0x30 [ 452.709833] video_usercopy+0xfd/0xe70 [ 452.709845] ? v4l_g_ctrl+0x390/0x390 [ 452.709855] ? lock_acquire+0x170/0x3f0 [ 452.709863] ? lock_downgrade+0x740/0x740 [ 452.709873] ? trace_hardirqs_on+0x10/0x10 [ 452.709885] ? futex_exit_release+0x220/0x220 [ 452.709898] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 452.716061] 0 [ 452.716348] ? debug_check_no_obj_freed+0x2c0/0x680 [ 452.720723] 0 [ 452.724950] v4l2_ioctl+0x1bb/0x2f0 [ 452.729288] 0 [ 452.733454] ? v4l2_open+0x2f0/0x2f0 [ 452.766560] do_vfs_ioctl+0x75a/0xff0 [ 452.766574] ? ioctl_preallocate+0x1a0/0x1a0 [ 452.766584] ? lock_downgrade+0x740/0x740 [ 452.766596] ? __fget+0x225/0x360 [ 452.766604] ? do_vfs_ioctl+0xff0/0xff0 [ 452.766615] ? security_file_ioctl+0x83/0xb0 [ 452.766624] SyS_ioctl+0x7f/0xb0 [ 452.766630] ? do_vfs_ioctl+0xff0/0xff0 [ 452.766641] do_syscall_64+0x1d5/0x640 [ 452.766656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 452.766664] RIP: 0033:0x4665f9 [ 452.766669] RSP: 002b:00007fcffe0ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.766680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 452.766685] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 452.766691] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 452.766696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 452.766702] R13: 00007ffef4e0f88f R14: 00007fcffe0ea300 R15: 0000000000022000 [ 452.777084] Mem-Info: [ 452.781060] Node 0 [ 452.784857] active_anon:11547 inactive_anon:18914 isolated_anon:0 [ 452.784857] active_file:13 inactive_file:13 isolated_file:0 [ 452.784857] unevictable:0 dirty:0 writeback:0 unstable:0 [ 452.784857] slab_reclaimable:12690 slab_unreclaimable:112270 [ 452.784857] mapped:44045 shmem:19216 pagetables:669 bounce:0 [ 452.784857] free:13933 free_pcp:498 free_cma:0 [ 452.786627] DMA: [ 452.797639] Node 0 active_anon:44288kB inactive_anon:22220kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139312kB dirty:0kB writeback:0kB shmem:23100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 452.800936] 0*4kB [ 452.802246] Node 1 active_anon:1900kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36868kB dirty:0kB writeback:0kB shmem:53764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 452.806011] 1*8kB [ 452.817327] Node 0 [ 452.820567] (U) [ 452.823006] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.828496] 1*16kB [ 452.837645] lowmem_reserve[]: [ 452.842812] (U) [ 452.846416] 0 [ 452.850294] 0*32kB [ 452.860715] 2717 [ 452.864361] 1*64kB [ 452.866268] 2718 [ 452.870744] (U) [ 452.879282] 2718 [ 452.883967] 1*128kB [ 452.893002] 2718 [ 452.900334] (U) [ 452.913381] 0*256kB [ 452.928815] Node 0 [ 452.937385] 1*512kB [ 452.944669] DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:44288kB inactive_anon:22220kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2368kB bounce:0kB free_pcp:496kB local_pcp:120kB free_cma:0kB [ 452.974946] (U) [ 453.004099] lowmem_reserve[]: [ 453.015576] 0*1024kB [ 453.032334] 0 0 0 0 0 [ 453.032353] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.032375] lowmem_reserve[]: 0 0 0 0 0 [ 453.032396] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:308kB bounce:0kB free_pcp:1496kB local_pcp:720kB free_cma:0kB [ 453.032420] lowmem_reserve[]: [ 453.043701] 1*2048kB [ 453.064336] 0 0 0 0 0 [ 453.064356] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) [ 453.078366] (M) [ 453.080419] 0*1024kB [ 453.082383] 2*4096kB [ 453.084338] 1*2048kB [ 453.086379] (M) [ 453.088743] (M) 2*4096kB (M) = 10968kB [ 453.099029] = 10968kB [ 453.099759] Node 0 [ 453.137398] Node 0 [ 453.138170] DMA32: [ 453.174032] DMA32: [ 453.196596] 1525*4kB (UME) 790*8kB (UME) 240*16kB (UME) 38*32kB (UME) 10*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 453.196685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 453.209742] 1525*4kB [ 453.214124] 0*2048kB [ 453.216045] (UME) [ 453.218491] 0*4096kB = 0kB [ 453.218500] Node 1 Normal: 256*4kB (UM) 169*8kB (M) 112*16kB (UME) [ 453.232151] 790*8kB [ 453.234253] 54*32kB [ 453.236353] (UME) [ 453.238601] (M) 28*64kB (M) 17*128kB (ME) 12*256kB (ME) 5*512kB [ 453.244821] 240*16kB [ 453.254016] (ME) 5*1024kB (ME) [ 453.272057] (UME) [ 453.272718] 3*2048kB [ 453.281192] 38*32kB [ 453.282097] (M) [ 453.283756] (UME) [ 453.285883] 0*4096kB [ 453.296117] 10*64kB [ 453.300916] = 26760kB [ 453.304390] (UME) [ 453.304611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.306559] 0*128kB 0*256kB [ 453.308987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.315227] 0*512kB [ 453.315871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.320047] 0*1024kB [ 453.330141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.345126] 0*2048kB [ 453.353004] 19242 total pagecache pages [ 453.366774] 0*4096kB = 18116kB [ 453.370343] Node 0 Normal: 0*4kB [ 453.370364] 0 pages in swap cache [ 453.370371] Swap cache stats: add 0, delete 0, find 0/0 [ 453.373795] 0*8kB 0*16kB [ 453.377264] Free swap = 0kB [ 453.377268] Total swap = 0kB [ 453.377275] 2097051 pages RAM [ 453.377279] 0 pages HighMem/MovableOnly [ 453.377282] 363849 pages reserved [ 453.377286] 0 pages cma reserved [ 453.400415] Bluetooth: hci2 command 0x0419 tx timeout [ 453.408509] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.420734] Node 1 Normal: 256*4kB (UM) 169*8kB (M) 112*16kB (UME) 54*32kB (M) 28*64kB (M) 17*128kB (ME) 12*256kB (ME) 5*512kB (ME) 5*1024kB (ME) 3*2048kB (M) 0*4096kB = 26760kB [ 453.443197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.452243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.467997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.481016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.491751] 19242 total pagecache pages [ 453.495722] 0 pages in swap cache [ 453.503326] Swap cache stats: add 0, delete 0, find 0/0 [ 453.510868] Free swap = 0kB [ 453.513881] Total swap = 0kB [ 453.521070] 2097051 pages RAM [ 453.524192] 0 pages HighMem/MovableOnly [ 453.530297] 363849 pages reserved [ 453.533743] 0 pages cma reserved [ 453.541334] Out of memory (oom_kill_allocating_task): Kill process 4491 (systemd-journal) score 0 or sacrifice child [ 453.554712] Killed process 4491 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1904kB [ 453.568272] oom_reaper: reaped process 4491 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1904kB [ 453.584195] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 453.613587] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 453.618649] CPU: 1 PID: 2879 Comm: kworker/u4:4 Not tainted 4.14.232-syzkaller #0 [ 453.626263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.635615] Workqueue: events_unbound call_usermodehelper_exec_work [ 453.642028] Call Trace: [ 453.644625] dump_stack+0x1b2/0x281 [ 453.648248] dump_header+0x178/0x82f [ 453.651963] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 453.657086] ? ___ratelimit+0x2cd/0x530 [ 453.661055] oom_kill_process.cold+0x10/0xa40 [ 453.665549] ? lock_downgrade+0x740/0x740 [ 453.669703] out_of_memory+0x2dc/0x1190 [ 453.673699] ? oom_killer_disable+0x1c0/0x1c0 [ 453.678186] ? mutex_trylock+0x152/0x1a0 [ 453.682243] __alloc_pages_nodemask+0x23e1/0x2720 [ 453.687085] ? deref_stack_reg+0x124/0x1a0 [ 453.691320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 453.696183] ? kmem_cache_alloc_node+0x38b/0x410 [ 453.700933] copy_process.part.0+0x265/0x71c0 [ 453.705422] ? __lock_acquire+0x5fc/0x3f20 [ 453.709653] ? debug_object_activate+0x292/0x490 [ 453.714414] ? trace_hardirqs_on+0x10/0x10 [ 453.718637] ? static_obj+0x50/0x50 [ 453.722260] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 453.727701] ? __cleanup_sighand+0x40/0x40 [ 453.731951] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 453.737394] _do_fork+0x184/0xc80 [ 453.740845] ? fork_idle+0x270/0x270 [ 453.744562] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 453.749657] ? process_one_work+0x6c4/0x14a0 [ 453.754055] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 453.759499] kernel_thread+0x2f/0x40 [ 453.763204] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 453.768472] ? call_usermodehelper+0x80/0x80 [ 453.772875] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 453.778320] process_one_work+0x793/0x14a0 [ 453.782555] ? work_busy+0x320/0x320 [ 453.786255] ? worker_thread+0x158/0xff0 [ 453.790320] ? _raw_spin_unlock_irq+0x24/0x80 [ 453.794814] worker_thread+0x5cc/0xff0 [ 453.799223] ? rescuer_thread+0xc80/0xc80 [ 453.803365] kthread+0x30d/0x420 [ 453.806718] ? kthread_create_on_node+0xd0/0xd0 [ 453.811381] ret_from_fork+0x24/0x30 [ 453.817725] Mem-Info: [ 453.820150] active_anon:11447 inactive_anon:18914 isolated_anon:0 [ 453.820150] active_file:13 inactive_file:13 isolated_file:0 [ 453.820150] unevictable:0 dirty:0 writeback:0 unstable:0 [ 453.820150] slab_reclaimable:12683 slab_unreclaimable:112266 [ 453.820150] mapped:43545 shmem:19216 pagetables:669 bounce:0 [ 453.820150] free:14553 free_pcp:31 free_cma:0 [ 453.855436] Node 0 active_anon:43888kB inactive_anon:22220kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139312kB dirty:0kB writeback:0kB shmem:23100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 453.887794] Node 1 active_anon:1900kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34868kB dirty:0kB writeback:0kB shmem:53764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 453.917836] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.946038] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 453.951199] Node 0 DMA32 free:18984kB min:36200kB low:45248kB high:54296kB active_anon:43888kB inactive_anon:22220kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2368kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 453.982084] lowmem_reserve[]: 0 0 0 0 0 [ 453.986081] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.013654] lowmem_reserve[]: 0 0 0 0 0 [ 454.017680] Node 1 Normal free:28260kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:308kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 454.048192] lowmem_reserve[]: 0 0 0 0 0 [ 454.052193] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 454.065486] Node 0 DMA32: 1602*4kB (UME) 802*8kB (UME) 256*16kB (UME) 44*32kB (UME) 12*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19096kB [ 454.081995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 454.082060] Node 1 Normal: 207*4kB (UM) 136*8kB (UM) 87*16kB (UME) 38*32kB (UM) 24*64kB (UM) 16*128kB (UME) 15*256kB (ME) 6*512kB (ME) 5*1024kB (ME) 4*2048kB (M) 0*4096kB = 28332kB [ 454.111241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.120124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.130722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.139606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.150248] 19242 total pagecache pages [ 454.154222] 0 pages in swap cache [ 454.157687] Swap cache stats: add 0, delete 0, find 0/0 [ 454.163036] Free swap = 0kB [ 454.166041] Total swap = 0kB [ 454.171059] 2097051 pages RAM [ 454.174155] 0 pages HighMem/MovableOnly [ 454.178177] 363849 pages reserved [ 454.181619] 0 pages cma reserved [ 454.184975] Out of memory: Kill process 7990 (syz-fuzzer) score 4 or sacrifice child [ 454.195200] Killed process 5340 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 454.229798] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 454.250058] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 454.254846] CPU: 1 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 454.262279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.271629] Call Trace: [ 454.274241] dump_stack+0x1b2/0x281 [ 454.277885] dump_header+0x178/0x82f [ 454.281598] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 454.286703] ? ___ratelimit+0x2cd/0x530 [ 454.290694] oom_kill_process.cold+0x10/0xa40 [ 454.295199] out_of_memory+0xe3e/0x1190 [ 454.299174] ? oom_killer_disable+0x1c0/0x1c0 [ 454.303665] ? mutex_trylock+0x152/0x1a0 [ 454.307731] __alloc_pages_nodemask+0x23e1/0x2720 [ 454.312585] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 454.317438] alloc_pages_current+0x155/0x260 [ 454.321842] filemap_fault+0x11a1/0x1ad0 [ 454.325907] ext4_filemap_fault+0x84/0xb0 [ 454.330051] __do_fault+0xfa/0x380 [ 454.333588] __handle_mm_fault+0x2497/0x4620 [ 454.337990] ? vm_insert_page+0x7c0/0x7c0 [ 454.342139] ? mark_held_locks+0xa6/0xf0 [ 454.346193] handle_mm_fault+0x455/0x9c0 [ 454.350253] __do_page_fault+0x549/0xad0 [ 454.354313] ? spurious_fault+0x640/0x640 [ 454.358456] ? do_page_fault+0x60/0x500 [ 454.362425] ? page_fault+0x2f/0x50 [ 454.366042] page_fault+0x45/0x50 [ 454.369500] RIP: 0900:0x6955f1f10c [ 454.373027] RSP: 2e400:000000c00003fde0 EFLAGS: 00000003 [ 454.379360] Mem-Info: [ 454.389352] active_anon:11405 inactive_anon:18913 isolated_anon:0 [ 454.389352] active_file:13 inactive_file:13 isolated_file:0 [ 454.389352] unevictable:0 dirty:0 writeback:0 unstable:0 [ 454.389352] slab_reclaimable:12670 slab_unreclaimable:112256 [ 454.389352] mapped:34821 shmem:19216 pagetables:607 bounce:0 [ 454.389352] free:14568 free_pcp:160 free_cma:0 [ 454.429064] Node 0 active_anon:43764kB inactive_anon:22216kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104468kB dirty:0kB writeback:0kB shmem:23100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 454.462928] Node 1 active_anon:1856kB inactive_anon:53436kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:53764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 454.496063] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.528464] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 454.533525] Node 0 DMA32 free:18972kB min:36200kB low:45248kB high:54296kB active_anon:43764kB inactive_anon:22216kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2128kB bounce:0kB free_pcp:624kB local_pcp:512kB free_cma:0kB [ 454.568650] lowmem_reserve[]: 0 0 0 0 0 [ 454.572662] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.598919] lowmem_reserve[]: 0 0 0 0 0 [ 454.603461] Node 1 Normal free:78024kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:53436kB active_file:8kB inactive_file:308kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:300kB bounce:0kB free_pcp:960kB local_pcp:120kB free_cma:0kB [ 454.636547] lowmem_reserve[]: 0 0 0 0 0 [ 454.641068] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 454.668131] Node 0 DMA32: 1571*4kB (UME) 802*8kB (UME) 256*16kB (UME) 45*32kB (UME) 12*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19004kB [ 454.688793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 454.702252] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 3*16kB (UME) 4*32kB (UM) 20*64kB (UM) 21*128kB (UME) 21*256kB (UME) 9*512kB (UME) 10*1024kB (UME) 8*2048kB (UM) 44*4096kB (U) = 220996kB [ 454.723701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.733628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.746950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.759921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.770693] 21092 total pagecache pages [ 454.775271] 0 pages in swap cache [ 454.785622] Swap cache stats: add 0, delete 0, find 0/0 [ 454.792897] Free swap = 0kB [ 454.797099] Total swap = 0kB [ 454.800669] 2097051 pages RAM [ 454.804249] 0 pages HighMem/MovableOnly [ 454.812490] 363849 pages reserved [ 454.816368] 0 pages cma reserved [ 454.820312] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 454.836227] Killed process 8007 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 454.848272] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 454.857326] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 454.882196] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 454.889389] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 454.896270] systemd[1]: Stopped Journal Service. [ 454.931729] systemd[1]: Starting Journal Service... [ 454.964461] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 455.084369] systemd-journald[5601]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 455.108373] systemd[1]: Started Load/Save RF Kill Switch Status. [ 455.370189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.387025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.395199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.417379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.425571] device bridge_slave_1 left promiscuous mode [ 455.436927] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.447750] device bridge_slave_0 left promiscuous mode [ 455.453271] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.483069] systemd[1]: Started Journal Service. [ 455.504225] device veth1_macvtap left promiscuous mode [ 455.515173] device veth0_macvtap left promiscuous mode [ 455.520564] device veth1_vlan left promiscuous mode [ 455.525699] device veth0_vlan left promiscuous mode [ 455.732074] device hsr_slave_1 left promiscuous mode [ 455.749706] device hsr_slave_0 left promiscuous mode [ 455.770670] team0 (unregistering): Port device team_slave_1 removed [ 455.781631] team0 (unregistering): Port device team_slave_0 removed [ 455.795736] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 455.808720] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 455.851589] bond0 (unregistering): Released all slaves 00:48:58 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:48:58 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:48:58 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0xc7, '\x00', &(0x7f0000000100)=0x9}) 00:48:58 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:48:58 executing program 1: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 00:48:58 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 00:48:58 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 00:48:59 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 00:48:59 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 458.581300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.588576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.601025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.608270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.620137] device bridge_slave_1 left promiscuous mode [ 458.626133] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.634073] device bridge_slave_0 left promiscuous mode [ 458.642994] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.653326] device veth1_macvtap left promiscuous mode [ 458.661805] device veth0_macvtap left promiscuous mode [ 458.668435] device veth1_vlan left promiscuous mode [ 458.673680] device veth0_vlan left promiscuous mode [ 458.821732] device hsr_slave_1 left promiscuous mode [ 458.832336] device hsr_slave_0 left promiscuous mode [ 458.853800] team0 (unregistering): Port device team_slave_1 removed [ 458.870319] team0 (unregistering): Port device team_slave_0 removed [ 458.883537] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 458.899384] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 458.943415] bond0 (unregistering): Released all slaves [ 460.734869] IPVS: ftp: loaded support on port[0] = 21 [ 460.875240] IPVS: ftp: loaded support on port[0] = 21 [ 460.989901] chnl_net:caif_netlink_parms(): no params data found [ 461.034185] IPVS: ftp: loaded support on port[0] = 21 [ 461.244400] chnl_net:caif_netlink_parms(): no params data found [ 461.402174] chnl_net:caif_netlink_parms(): no params data found [ 461.413118] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.424863] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.433641] device bridge_slave_0 entered promiscuous mode [ 461.462579] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.469783] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.477665] device bridge_slave_1 entered promiscuous mode [ 461.532061] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 461.552977] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 461.605135] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.617392] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.624850] device bridge_slave_0 entered promiscuous mode [ 461.637255] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 461.644588] team0: Port device team_slave_0 added [ 461.654686] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.662536] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.670938] device bridge_slave_1 entered promiscuous mode [ 461.677725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 461.685961] team0: Port device team_slave_1 added [ 461.761952] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.769611] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.781761] device bridge_slave_0 entered promiscuous mode [ 461.791511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 461.805140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.812225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.841666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.852562] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.863673] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.871512] device bridge_slave_1 entered promiscuous mode [ 461.883307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 461.892285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.902705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.932712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.966548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 462.000188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 462.012665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 462.022316] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 462.033998] team0: Port device team_slave_0 added [ 462.052344] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 462.061598] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 462.069491] team0: Port device team_slave_1 added [ 462.112511] device hsr_slave_0 entered promiscuous mode [ 462.119180] device hsr_slave_1 entered promiscuous mode [ 462.125153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 462.133157] team0: Port device team_slave_0 added [ 462.146560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 462.154712] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 462.163195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 462.171020] team0: Port device team_slave_1 added [ 462.176911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.183153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.209581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.238129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.244412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.271109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.297134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.303400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.329106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.350740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 462.360914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.370445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.400540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.415863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 462.433167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 462.452716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 462.482898] device hsr_slave_0 entered promiscuous mode [ 462.489280] device hsr_slave_1 entered promiscuous mode [ 462.519092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 462.544920] device hsr_slave_0 entered promiscuous mode [ 462.551490] device hsr_slave_1 entered promiscuous mode [ 462.567614] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 462.593233] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 462.609131] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 462.674642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 462.746923] Bluetooth: hci2 command 0x0409 tx timeout [ 462.747023] Bluetooth: hci3 command 0x0409 tx timeout [ 462.817017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.826964] Bluetooth: hci5 command 0x0409 tx timeout [ 462.855699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 462.889268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 462.899224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.906139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.924037] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 462.931113] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.940486] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 462.954671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 462.962702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 462.971125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.983391] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.989805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.016420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 463.033185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.044068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.063246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.073440] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.079850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.100053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 463.125565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.144998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 463.164443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.179686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 463.187576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.198641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 463.209794] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 463.218156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.225900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.248111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 463.256331] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 463.263569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.271293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.279285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.288078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.294999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.305749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 463.321248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 463.330986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.341590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.350179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.359843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.380035] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 463.386113] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.395658] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 463.402830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.417422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.428345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 463.435734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.444931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.454374] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.460857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.479856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 463.493686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 463.504813] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 463.512379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.520998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.529500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.538424] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.544776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.555683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 463.565747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 463.574208] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 463.581798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.590588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.599543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.606470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.618430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.627985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 463.643146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 463.652770] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 463.664359] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.674109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.687384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.695147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.710793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 463.723999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.734034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 463.743125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.757181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.765241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.784529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.793859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.805912] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.812326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.826609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 463.841194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 463.849766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.868175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.876232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.894682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.905275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.915863] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.922271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.937561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 463.946538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.961982] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 463.968127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.977847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 463.991873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 463.999853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.011812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.025002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.038723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.053188] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 464.066538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 464.074936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.093393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.109795] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 464.119962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 464.128124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.135144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.150250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.157613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.165355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.183494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.192491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 464.201459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.221042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.235077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 464.256174] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 464.270308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.281428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.293058] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 464.303747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.319765] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 464.331631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.341443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.363337] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 464.394019] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 464.401067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.423107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.446085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.475484] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 464.493998] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 464.501028] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 464.524221] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 464.541418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.558608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.575409] device veth0_vlan entered promiscuous mode [ 464.598898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.606619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.627957] device veth1_vlan entered promiscuous mode [ 464.658926] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 464.670124] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 464.725411] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 464.745229] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 464.769243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.789130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.819401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.827128] Bluetooth: hci3 command 0x041b tx timeout [ 464.837702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.873387] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 464.896690] Bluetooth: hci2 command 0x041b tx timeout [ 464.906952] Bluetooth: hci5 command 0x041b tx timeout [ 465.184258] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 465.208739] systemd-journal cpuset=/ mems_allowed=0-1 [ 465.247523] CPU: 0 PID: 5601 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 465.255425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.264771] Call Trace: [ 465.267356] dump_stack+0x1b2/0x281 [ 465.270982] dump_header+0x178/0x82f [ 465.274697] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 465.279800] ? ___ratelimit+0x2cd/0x530 [ 465.283777] oom_kill_process.cold+0x10/0xa40 [ 465.288277] out_of_memory+0xe3e/0x1190 [ 465.292251] ? oom_killer_disable+0x1c0/0x1c0 [ 465.296758] ? mutex_trylock+0x152/0x1a0 [ 465.300820] __alloc_pages_nodemask+0x23e1/0x2720 [ 465.305672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 465.310525] alloc_pages_current+0x155/0x260 [ 465.314934] filemap_fault+0x11a1/0x1ad0 [ 465.319006] ext4_filemap_fault+0x84/0xb0 [ 465.323329] __do_fault+0xfa/0x380 [ 465.326865] __handle_mm_fault+0x2497/0x4620 [ 465.331269] ? vm_insert_page+0x7c0/0x7c0 [ 465.335411] ? __fsnotify_inode_delete+0x20/0x20 [ 465.340163] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 465.346919] ? mark_held_locks+0xa6/0xf0 [ 465.350978] handle_mm_fault+0x455/0x9c0 [ 465.355052] __do_page_fault+0x549/0xad0 [ 465.359110] ? spurious_fault+0x640/0x640 [ 465.363249] ? do_page_fault+0x60/0x500 [ 465.367214] ? page_fault+0x2f/0x50 [ 465.370834] page_fault+0x45/0x50 [ 465.374279] RIP: a7b3e38:0x5575fda80958 [ 465.378239] RSP: a7b3ee0:0000000000000000 EFLAGS: 7ffe0a7b1ce0 [ 465.427087] Mem-Info: [ 465.435479] active_anon:12815 inactive_anon:20951 isolated_anon:0 [ 465.435479] active_file:11 inactive_file:13 isolated_file:0 [ 465.435479] unevictable:0 dirty:0 writeback:0 unstable:0 [ 465.435479] slab_reclaimable:12552 slab_unreclaimable:111117 [ 465.435479] mapped:52634 shmem:21269 pagetables:796 bounce:0 [ 465.435479] free:25158 free_pcp:20 free_cma:0 [ 465.511942] Node 0 active_anon:49092kB inactive_anon:27880kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175720kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 465.644871] Node 1 active_anon:2168kB inactive_anon:55924kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 465.802838] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.974381] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 466.009275] Node 0 DMA32 free:35852kB min:36200kB low:45248kB high:54296kB active_anon:44996kB inactive_anon:27880kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2860kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB [ 466.048380] lowmem_reserve[]: 0 0 0 0 0 [ 466.052391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.078110] lowmem_reserve[]: 0 0 0 0 0 [ 466.082116] Node 1 Normal free:53664kB min:53696kB low:67120kB high:80544kB active_anon:2168kB inactive_anon:55924kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.111581] lowmem_reserve[]: 0 0 0 0 0 [ 466.115566] Node 0 DMA: 1*4kB (U) 3*8kB (U) 0*16kB 11*32kB (U) 11*64kB (U) 10*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 11068kB [ 466.130247] Node 0 DMA32: 1545*4kB (ME) 609*8kB (UME) 200*16kB (ME) 68*32kB (UME) 40*64kB (UMEH) 21*128kB (UMEH) 11*256kB (UMH) 12*512kB (UMH) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 35756kB [ 466.147581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.158524] Node 1 Normal: 276*4kB (UM) 182*8kB (UM) 126*16kB (UME) 66*32kB (M) 44*64kB (UM) 21*128kB (UME) 2*256kB (ME) 2*512kB (UE) 5*1024kB (UME) 5*2048kB (UM) 6*4096kB (U) = 53664kB [ 466.175988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.184966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.195563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.204567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.213234] 21303 total pagecache pages [ 466.217366] 0 pages in swap cache [ 466.220820] Swap cache stats: add 0, delete 0, find 0/0 [ 466.226191] Free swap = 0kB [ 466.229279] Total swap = 0kB [ 466.232311] 2097051 pages RAM [ 466.235404] 0 pages HighMem/MovableOnly [ 466.239633] 363849 pages reserved [ 466.243079] 0 pages cma reserved [ 466.246436] Out of memory (oom_kill_allocating_task): Kill process 5601 (systemd-journal) score 0 or sacrifice child [ 466.325539] Killed process 5601 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1548kB [ 466.350040] oom_reaper: reaped process 5601 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1548kB [ 466.534273] kworker/u4:7 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 466.546324] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 466.553582] CPU: 0 PID: 6275 Comm: kworker/u4:7 Not tainted 4.14.232-syzkaller #0 [ 466.561208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.570560] Call Trace: [ 466.573150] dump_stack+0x1b2/0x281 [ 466.576812] dump_header+0x178/0x82f [ 466.580524] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 466.585627] ? ___ratelimit+0x2cd/0x530 [ 466.589597] oom_kill_process.cold+0x10/0xa40 [ 466.594090] ? lock_downgrade+0x740/0x740 [ 466.598234] out_of_memory+0x2dc/0x1190 [ 466.602205] ? oom_killer_disable+0x1c0/0x1c0 [ 466.606694] ? mutex_trylock+0x152/0x1a0 [ 466.610748] __alloc_pages_nodemask+0x23e1/0x2720 [ 466.615586] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 466.620416] ? cache_grow_begin+0x3f/0x700 [ 466.624632] cache_grow_begin+0x91/0x700 [ 466.628672] fallback_alloc+0x207/0x2c0 [ 466.632623] kmem_cache_alloc+0x1e5/0x3c0 [ 466.636762] getname_kernel+0x4e/0x340 [ 466.640630] call_usermodehelper_exec_async+0x2df/0x510 [ 466.645970] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 466.651408] ret_from_fork+0x24/0x30 [ 466.677486] Mem-Info: [ 466.679911] active_anon:12716 inactive_anon:20950 isolated_anon:0 [ 466.679911] active_file:11 inactive_file:14 isolated_file:0 [ 466.679911] unevictable:0 dirty:0 writeback:0 unstable:0 [ 466.679911] slab_reclaimable:12551 slab_unreclaimable:110928 [ 466.679911] mapped:52232 shmem:21269 pagetables:772 bounce:0 [ 466.679911] free:24992 free_pcp:0 free_cma:0 [ 466.713086] Node 0 active_anon:48696kB inactive_anon:27876kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174112kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 466.740751] Node 1 active_anon:2168kB inactive_anon:55924kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 466.768275] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.794766] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 466.799849] Node 0 DMA32 free:35676kB min:36200kB low:45248kB high:54296kB active_anon:45000kB inactive_anon:27876kB active_file:16kB inactive_file:348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2772kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 466.828943] lowmem_reserve[]: 0 0 0 0 0 [ 466.832990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.858611] lowmem_reserve[]: 0 0 0 0 0 [ 466.862615] Node 1 Normal free:53212kB min:53696kB low:67120kB high:80544kB active_anon:2168kB inactive_anon:55924kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.891280] lowmem_reserve[]: 0 0 0 0 0 [ 466.895249] Node 0 DMA: 1*4kB (U) 3*8kB (U) 0*16kB 11*32kB (U) 11*64kB (U) 10*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 11068kB [ 466.909909] Bluetooth: hci3 command 0x040f tx timeout [ 466.915220] Node 0 DMA32: 1567*4kB (ME) 653*8kB (ME) 201*16kB (ME) 70*32kB (MEH) 38*64kB (ME) 20*128kB (UME) 10*256kB (MH) 12*512kB (UMH) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 35764kB [ 466.917146] Bluetooth: hci2 command 0x040f tx timeout [ 466.942238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.953009] Node 1 Normal: 274*4kB (M) 181*8kB (UM) 126*16kB (UME) 67*32kB (UM) 43*64kB (M) 20*128kB (ME) 3*256kB (UME) 1*512kB (E) 5*1024kB (UME) 5*2048kB (UM) 6*4096kB (U) = 53232kB [ 466.976232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.985140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.994951] Bluetooth: hci5 command 0x040f tx timeout [ 467.007480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.016317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 467.029526] 21303 total pagecache pages [ 467.033505] 0 pages in swap cache [ 467.037109] Swap cache stats: add 0, delete 0, find 0/0 [ 467.042465] Free swap = 0kB [ 467.045599] Total swap = 0kB [ 467.053249] 2097051 pages RAM [ 467.056372] 0 pages HighMem/MovableOnly [ 467.060367] 363849 pages reserved [ 467.063808] 0 pages cma reserved [ 467.071765] Out of memory: Kill process 5619 (syz-executor.3) score 1005 or sacrifice child [ 467.080430] Killed process 5621 (syz-executor.3) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 467.121115] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 467.146703] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 467.151956] CPU: 1 PID: 5602 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 467.159739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.169089] Call Trace: [ 467.171679] dump_stack+0x1b2/0x281 [ 467.175309] dump_header+0x178/0x82f [ 467.179021] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 467.184119] ? ___ratelimit+0x2cd/0x530 [ 467.188091] oom_kill_process.cold+0x10/0xa40 [ 467.192592] out_of_memory+0xe3e/0x1190 [ 467.196563] ? oom_killer_disable+0x1c0/0x1c0 [ 467.201050] ? mutex_trylock+0x152/0x1a0 [ 467.205105] __alloc_pages_nodemask+0x23e1/0x2720 [ 467.209958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 467.214817] alloc_pages_current+0x155/0x260 [ 467.219221] filemap_fault+0x11a1/0x1ad0 [ 467.223305] ext4_filemap_fault+0x84/0xb0 [ 467.227450] __do_fault+0xfa/0x380 [ 467.230984] __handle_mm_fault+0x2497/0x4620 [ 467.235385] ? vm_insert_page+0x7c0/0x7c0 [ 467.239526] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 467.245338] ? ktime_get_ts64+0x261/0x3a0 [ 467.249490] ? mark_held_locks+0xa6/0xf0 [ 467.253602] handle_mm_fault+0x455/0x9c0 [ 467.257663] __do_page_fault+0x549/0xad0 [ 467.261719] ? spurious_fault+0x640/0x640 [ 467.265865] ? do_page_fault+0x60/0x500 [ 467.269829] ? page_fault+0x2f/0x50 [ 467.273456] page_fault+0x45/0x50 [ 467.276903] RIP: ca3d4490: (null) [ 467.281124] RSP: 1178c040:00007ffcca3d4498 EFLAGS: 0000000b [ 467.290430] Mem-Info: [ 467.302187] active_anon:12698 inactive_anon:20950 isolated_anon:0 [ 467.302187] active_file:17 inactive_file:17 isolated_file:0 [ 467.302187] unevictable:0 dirty:0 writeback:0 unstable:0 [ 467.302187] slab_reclaimable:12546 slab_unreclaimable:110943 [ 467.302187] mapped:52225 shmem:21269 pagetables:772 bounce:0 [ 467.302187] free:13957 free_pcp:116 free_cma:0 [ 467.353600] Node 0 active_anon:48648kB inactive_anon:27876kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 467.394863] Node 1 active_anon:2144kB inactive_anon:55924kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 467.422977] syz-executor.3: vmalloc: allocation failure, allocated 1681915904 of 4294778880 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 467.434263] Node 0 [ 467.447890] syz-executor.3 cpuset= [ 467.449657] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.450135] / [ 467.453661] lowmem_reserve[]: [ 467.491543] mems_allowed=0-1 [ 467.495105] 0 2717 2718 2718 2718 [ 467.501378] Node 0 DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:44552kB inactive_anon:27876kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2772kB bounce:0kB free_pcp:256kB local_pcp:128kB free_cma:0kB [ 467.504045] CPU: 0 PID: 5621 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 467.533694] lowmem_reserve[]: [ 467.538075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.538080] Call Trace: [ 467.538101] dump_stack+0x1b2/0x281 [ 467.538115] warn_alloc.cold+0x96/0x1cc [ 467.541199] 0 [ 467.550550] ? zone_watermark_ok_safe+0x220/0x220 [ 467.550573] __vmalloc_area_node+0x48a/0x680 [ 467.550586] ? __vmalloc_node_range+0x150/0x150 [ 467.553146] 0 [ 467.556777] ? __get_vm_area_node+0x27d/0x340 [ 467.556791] __vmalloc_node_range+0xbe/0x150 [ 467.556806] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 467.556815] vmalloc_user+0x47/0xa0 [ 467.560768] 0 [ 467.562555] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 467.567391] 0 [ 467.571759] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 467.576395] 0 [ 467.578181] vb2_vmalloc_alloc+0xa6/0x2d0 [ 467.578192] __vb2_queue_alloc+0x47a/0xd90 [ 467.578212] vb2_core_create_bufs+0x279/0x5a0 [ 467.587077] ? __vb2_queue_free+0x7a0/0x7a0 [ 467.587092] ? trace_hardirqs_on+0x10/0x10 [ 467.587103] ? __lock_acquire+0x5fc/0x3f20 [ 467.592441] Node 0 [ 467.596059] vb2_create_bufs+0x2e1/0x5b0 [ 467.597874] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.602138] ? ___preempt_schedule+0x16/0x18 [ 467.603906] lowmem_reserve[]: [ 467.609255] ? vb2_thread_start+0x310/0x310 [ 467.609266] ? trace_hardirqs_on+0x10/0x10 [ 467.609277] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 467.609290] vb2_ioctl_create_bufs+0x1f7/0x330 [ 467.611065] 0 [ 467.615214] v4l_create_bufs+0xa4/0x150 [ 467.619470] 0 [ 467.623922] __video_do_ioctl+0x65b/0x6a0 [ 467.628234] 0 [ 467.632435] ? video_ioctl2+0x30/0x30 [ 467.636651] 0 [ 467.638853] ? __might_fault+0x177/0x1b0 [ 467.642916] 0 [ 467.667806] ? video_ioctl2+0x30/0x30 [ 467.667816] video_usercopy+0xfd/0xe70 [ 467.667830] ? v4l_g_ctrl+0x390/0x390 [ 467.667839] ? lock_acquire+0x170/0x3f0 [ 467.667850] ? lock_downgrade+0x740/0x740 [ 467.675341] ? trace_hardirqs_on+0x10/0x10 [ 467.679677] Node 1 [ 467.683865] ? futex_exit_release+0x220/0x220 [ 467.688986] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:2144kB inactive_anon:55924kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:316kB bounce:0kB free_pcp:204kB local_pcp:84kB free_cma:0kB [ 467.693513] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 467.695398] lowmem_reserve[]: [ 467.699362] ? debug_check_no_obj_freed+0x2c0/0x680 [ 467.699373] v4l2_ioctl+0x1bb/0x2f0 [ 467.699381] ? v4l2_open+0x2f0/0x2f0 [ 467.699392] do_vfs_ioctl+0x75a/0xff0 [ 467.699403] ? ioctl_preallocate+0x1a0/0x1a0 [ 467.701183] 0 [ 467.705322] ? lock_downgrade+0x740/0x740 [ 467.705337] ? __fget+0x225/0x360 [ 467.707170] 0 [ 467.710931] ? do_vfs_ioctl+0xff0/0xff0 [ 467.712706] 0 [ 467.716756] ? security_file_ioctl+0x83/0xb0 [ 467.716767] SyS_ioctl+0x7f/0xb0 [ 467.716775] ? do_vfs_ioctl+0xff0/0xff0 [ 467.716787] do_syscall_64+0x1d5/0x640 [ 467.716801] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 467.718602] 0 [ 467.722392] RIP: 0033:0x4665f9 [ 467.726250] 0 [ 467.730032] RSP: 002b:00007f06b7616188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.730042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 467.730046] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 467.730051] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 467.730055] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 467.730060] R13: 00007ffd10d9ec1f R14: 00007f06b7616300 R15: 0000000000022000 [ 467.740212] Mem-Info: [ 467.786524] active_anon:12698 inactive_anon:20950 isolated_anon:0 [ 467.786524] active_file:0 inactive_file:17 isolated_file:0 [ 467.786524] unevictable:0 dirty:0 writeback:0 unstable:0 [ 467.786524] slab_reclaimable:12546 slab_unreclaimable:110945 [ 467.786524] mapped:52225 shmem:21269 pagetables:772 bounce:0 [ 467.786524] free:13955 free_pcp:113 free_cma:0 [ 467.805991] Node 0 [ 467.813336] Node 0 active_anon:48648kB inactive_anon:27876kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 467.822893] DMA: [ 467.824191] Node 1 active_anon:2144kB inactive_anon:55924kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 467.838737] 0*4kB [ 467.846121] Node 0 [ 467.863040] 1*8kB [ 467.873642] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.886431] (U) [ 467.896151] lowmem_reserve[]: [ 467.913943] 1*16kB [ 467.939901] 0 [ 467.980422] (U) [ 467.999860] 2717 2718 2718 2718 [ 468.045019] 8*32kB [ 468.046983] Node 0 DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:44552kB inactive_anon:27876kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2772kB bounce:0kB free_pcp:248kB local_pcp:124kB free_cma:0kB [ 468.047006] lowmem_reserve[]: 0 0 0 0 0 [ 468.047025] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.047045] lowmem_reserve[]: 0 0 0 0 0 [ 468.047062] Node 1 [ 468.057682] (U) [ 468.084893] Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:2144kB inactive_anon:55924kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:316kB bounce:0kB free_pcp:204kB local_pcp:120kB free_cma:0kB [ 468.124839] 11*64kB [ 468.152108] lowmem_reserve[]: 0 0 0 0 0 [ 468.158488] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 8*32kB (U) 11*64kB (U) 10*128kB (U) 4*256kB (U) 3*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 10968kB [ 468.161509] (U) [ 468.179481] Node 0 DMA32: 1524*4kB (UME) 612*8kB (MEH) 160*16kB (UME) 35*32kB (UMEH) 16*64kB (UMEH) 8*128kB (MEH) 1*256kB (M) 2*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 18000kB [ 468.189770] 10*128kB [ 468.204346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.215191] (U) [ 468.224304] Node 1 [ 468.226106] 4*256kB [ 468.226299] Normal: 275*4kB (UM) 180*8kB (M) 125*16kB (ME) 66*32kB (M) 43*64kB (M) 20*128kB (ME) 2*256kB (ME) 2*512kB (UE) 5*1024kB (UME) 4*2048kB (M) 0*4096kB = 26812kB [ 468.237452] (U) 3*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 10968kB [ 468.252897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.262128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.269628] Node 0 DMA32: 1524*4kB (UME) 612*8kB (MEH) 160*16kB (UME) 35*32kB (UMEH) 16*64kB (UMEH) 8*128kB (MEH) 1*256kB (M) 2*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 18000kB [ 468.277682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.302236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.310941] 21303 total pagecache pages [ 468.311414] Node 0 Normal: [ 468.314938] 0 pages in swap cache [ 468.314947] Swap cache stats: add 0, delete 0, find 0/0 [ 468.332062] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.333426] Free swap = 0kB [ 468.344674] Total swap = 0kB [ 468.353758] Node 1 Normal: 275*4kB (UM) 180*8kB (M) 125*16kB (ME) 66*32kB (M) 43*64kB (M) 20*128kB (ME) 2*256kB (ME) 2*512kB (UE) 5*1024kB (UME) 4*2048kB (M) 0*4096kB = 26812kB [ 468.354772] 2097051 pages RAM [ 468.379955] 0 pages HighMem/MovableOnly [ 468.383949] 363849 pages reserved [ 468.389765] 0 pages cma reserved [ 468.393477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.412405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.441891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.472071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.501549] 21303 total pagecache pages [ 468.505552] 0 pages in swap cache [ 468.529258] Swap cache stats: add 0, delete 0, find 0/0 [ 468.534648] Free swap = 0kB [ 468.550503] Total swap = 0kB [ 468.553651] 2097051 pages RAM [ 468.564410] 0 pages HighMem/MovableOnly [ 468.573509] 363849 pages reserved [ 468.584607] 0 pages cma reserved [ 468.593175] Out of memory (oom_kill_allocating_task): Kill process 5602 (systemd-rfkill) score 0 or sacrifice child [ 468.619008] Killed process 5602 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 468.654148] oom_reaper: reaped process 5621 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 468.771565] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 468.782599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.790892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.806948] device veth0_macvtap entered promiscuous mode [ 468.813254] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 468.822997] device veth1_macvtap entered promiscuous mode [ 468.833293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 468.852541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 468.866787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 468.881675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.891581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 468.911572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.922582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 468.935068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.949959] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 468.958365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.965195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.988809] Bluetooth: hci3 command 0x0419 tx timeout [ 469.001575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.021139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.034077] Bluetooth: hci2 command 0x0419 tx timeout [ 469.069020] Bluetooth: hci5 command 0x0419 tx timeout [ 469.435951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 469.460913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.474075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 469.488808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.502545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 469.515838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.553453] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 469.565744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.572999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.582948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.586081] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 469.615156] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 469.648945] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 469.656144] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 469.660522] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 469.671006] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 469.682865] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 469.686044] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 469.705854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.707070] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 469.723867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.743199] device veth0_vlan entered promiscuous mode [ 469.753104] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 469.757709] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 469.765444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.772782] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 469.773924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.791071] systemd[1]: Stopped Journal Service. [ 469.805283] systemd[1]: Starting Journal Service... [ 469.818968] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 469.832047] device veth1_vlan entered promiscuous mode [ 469.843883] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 469.860055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 469.867870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.876001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.894459] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 469.935754] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 469.952200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.972536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.983023] device veth0_macvtap entered promiscuous mode [ 469.994063] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 470.019897] device veth1_macvtap entered promiscuous mode [ 470.043714] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 470.059923] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 470.067986] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 470.074854] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 470.085188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 470.099971] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 470.109503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.122078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.130223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.141989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.157399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 470.174236] device veth0_vlan entered promiscuous mode [ 470.182404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.200726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.227557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.242048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.251873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.271537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.287121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.305032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.316098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.330076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.345968] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 470.357768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.365491] systemd-journald[6298]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 470.392463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.413386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.440754] device veth1_vlan entered promiscuous mode [ 470.460726] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 470.482442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.513645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.531958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.560303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.586216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.602629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.620306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.639980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.661648] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 470.678035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.696157] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 470.711443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.723512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.738646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.755318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.784038] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 470.814894] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 470.848348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.860670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.887695] device veth0_macvtap entered promiscuous mode [ 470.893972] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 00:49:11 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) [ 470.923453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.935900] device veth1_macvtap entered promiscuous mode [ 470.958721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 470.984973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 471.011387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.038304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.063330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.084729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.104158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.125278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.144738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.164832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.165059] systemd[1]: Started Journal Service. [ 471.183886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.205362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.224465] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 471.234457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.264095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.277191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.297447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.331755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.341900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.363321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.375888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.387022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.396141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.407176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.416292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.427023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.438314] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 471.445229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.455284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.465849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:49:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:14 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x260, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:14 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:49:14 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:14 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:14 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x24004044) 00:49:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x24004044) 00:49:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x24004044) 00:49:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 478.024220] oom_reaper: reaped process 6393 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 478.043103] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 478.059367] systemd-journal cpuset=/ mems_allowed=0-1 [ 478.064590] CPU: 1 PID: 6298 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 478.072482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.081859] Call Trace: [ 478.084483] dump_stack+0x1b2/0x281 [ 478.088123] dump_header+0x178/0x82f [ 478.091917] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 478.097037] ? ___ratelimit+0x2cd/0x530 [ 478.101042] oom_kill_process.cold+0x10/0xa40 [ 478.105551] out_of_memory+0xe3e/0x1190 [ 478.109555] ? oom_killer_disable+0x1c0/0x1c0 [ 478.114053] ? mutex_trylock+0x152/0x1a0 [ 478.118122] __alloc_pages_nodemask+0x23e1/0x2720 [ 478.122979] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 478.127836] alloc_pages_current+0x155/0x260 [ 478.132420] filemap_fault+0x11a1/0x1ad0 [ 478.136526] ext4_filemap_fault+0x84/0xb0 [ 478.140669] __do_fault+0xfa/0x380 [ 478.144195] __handle_mm_fault+0x2497/0x4620 [ 478.148600] ? vm_insert_page+0x7c0/0x7c0 [ 478.150601] syz-executor.3: vmalloc: allocation failure, allocated 1659846656 of 4294778880 bytes [ 478.152750] ? mark_held_locks+0xa6/0xf0 [ 478.152760] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 478.161983] handle_mm_fault+0x455/0x9c0 [ 478.161999] __do_page_fault+0x549/0xad0 [ 478.162010] ? spurious_fault+0x640/0x640 [ 478.162018] ? do_page_fault+0x60/0x500 [ 478.162026] ? page_fault+0x2f/0x50 [ 478.162032] page_fault+0x45/0x50 [ 478.162040] RIP: 0001:0xffffffffffffffff [ 478.162044] RSP: 7a6ea1e0:00007fff3162a2b0 EFLAGS: 7fff3162a0c0 [ 478.164532] Mem-Info: [ 478.166140] (null) [ 478.172167] active_anon:12281 inactive_anon:22982 isolated_anon:0 [ 478.172167] active_file:12 inactive_file:11 isolated_file:0 [ 478.172167] unevictable:0 dirty:0 writeback:0 unstable:0 [ 478.172167] slab_reclaimable:12563 slab_unreclaimable:114311 [ 478.172167] mapped:52595 shmem:23316 pagetables:819 bounce:0 [ 478.172167] free:13885 free_pcp:423 free_cma:0 [ 478.172185] Node 0 active_anon:46844kB inactive_anon:27816kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 478.172199] Node 1 active_anon:2280kB inactive_anon:64112kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36292kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 478.172207] Node 0 [ 478.180247] syz-executor.3 cpuset= [ 478.182499] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.184446] / [ 478.189412] lowmem_reserve[]: [ 478.201143] mems_allowed=0-1 [ 478.208780] 0 [ 478.209632] CPU: 0 PID: 6393 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 478.211206] 2717 [ 478.244509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.244515] Call Trace: [ 478.244536] dump_stack+0x1b2/0x281 [ 478.244551] warn_alloc.cold+0x96/0x1cc [ 478.244569] ? zone_watermark_ok_safe+0x220/0x220 [ 478.272294] 2718 [ 478.299614] __vmalloc_area_node+0x48a/0x680 [ 478.299631] ? __vmalloc_node_range+0x150/0x150 [ 478.299643] ? __get_vm_area_node+0x27d/0x340 [ 478.301866] 2718 [ 478.305405] __vmalloc_node_range+0xbe/0x150 [ 478.331199] 2718 [ 478.332876] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 478.339036] vmalloc_user+0x47/0xa0 [ 478.339049] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 478.339057] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 478.339066] vb2_vmalloc_alloc+0xa6/0x2d0 [ 478.339077] __vb2_queue_alloc+0x47a/0xd90 [ 478.340856] Node 0 [ 478.348661] vb2_core_create_bufs+0x279/0x5a0 [ 478.348673] ? __vb2_queue_free+0x7a0/0x7a0 [ 478.348689] ? trace_hardirqs_on+0x10/0x10 [ 478.350763] DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:44760kB inactive_anon:27816kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 478.360137] ? __lock_acquire+0x5fc/0x3f20 [ 478.360154] vb2_create_bufs+0x2e1/0x5b0 [ 478.360168] ? ___preempt_schedule+0x16/0x18 [ 478.360181] ? vb2_thread_start+0x310/0x310 [ 478.362754] lowmem_reserve[]: [ 478.366386] ? trace_hardirqs_on+0x10/0x10 [ 478.370375] 0 [ 478.375790] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 478.377902] 0 [ 478.382363] vb2_ioctl_create_bufs+0x1f7/0x330 [ 478.387070] 0 [ 478.391542] v4l_create_bufs+0xa4/0x150 [ 478.393575] 0 [ 478.398098] __video_do_ioctl+0x65b/0x6a0 [ 478.398113] ? video_ioctl2+0x30/0x30 [ 478.398123] ? __might_fault+0x177/0x1b0 [ 478.398134] ? video_ioctl2+0x30/0x30 [ 478.400186] 0 [ 478.405553] video_usercopy+0xfd/0xe70 [ 478.413485] ? v4l_g_ctrl+0x390/0x390 [ 478.418863] Node 0 [ 478.422986] ? lock_acquire+0x170/0x3f0 [ 478.422998] ? lock_downgrade+0x740/0x740 [ 478.427282] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.429493] ? trace_hardirqs_on+0x10/0x10 [ 478.433979] lowmem_reserve[]: [ 478.438329] ? futex_exit_release+0x220/0x220 [ 478.438343] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 478.438354] ? debug_check_no_obj_freed+0x2c0/0x680 [ 478.438366] v4l2_ioctl+0x1bb/0x2f0 [ 478.438377] ? v4l2_open+0x2f0/0x2f0 [ 478.442639] 0 [ 478.471484] do_vfs_ioctl+0x75a/0xff0 [ 478.471499] ? ioctl_preallocate+0x1a0/0x1a0 [ 478.471509] ? lock_downgrade+0x740/0x740 [ 478.471522] ? __fget+0x225/0x360 [ 478.471535] ? do_vfs_ioctl+0xff0/0xff0 [ 478.475904] 0 [ 478.479990] ? security_file_ioctl+0x83/0xb0 [ 478.480003] SyS_ioctl+0x7f/0xb0 [ 478.480012] ? do_vfs_ioctl+0xff0/0xff0 [ 478.480023] do_syscall_64+0x1d5/0x640 [ 478.480038] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 478.480050] RIP: 0033:0x4665f9 [ 478.484547] 0 [ 478.488894] RSP: 002b:00007f06b7616188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.488906] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 478.488910] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 478.488915] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 478.488919] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 478.488924] R13: 00007ffd10d9ec1f R14: 00007f06b7616300 R15: 0000000000022000 [ 478.495998] Mem-Info: [ 478.496288] 0 [ 478.498167] active_anon:12281 inactive_anon:22982 isolated_anon:0 [ 478.498167] active_file:12 inactive_file:11 isolated_file:0 [ 478.498167] unevictable:0 dirty:0 writeback:0 unstable:0 [ 478.498167] slab_reclaimable:12563 slab_unreclaimable:114311 [ 478.498167] mapped:52595 shmem:23316 pagetables:819 bounce:0 [ 478.498167] free:13885 free_pcp:423 free_cma:0 [ 478.498187] Node 0 active_anon:46844kB inactive_anon:27816kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 478.498203] Node 1 active_anon:2280kB inactive_anon:64112kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36292kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 478.498206] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.498227] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 478.498246] Node 0 DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:44760kB inactive_anon:27816kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:220kB local_pcp:120kB free_cma:0kB [ 478.498265] lowmem_reserve[]: 0 0 0 0 0 [ 478.498283] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.498303] lowmem_reserve[]: 0 0 0 0 0 [ 478.498320] Node 1 Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:2280kB inactive_anon:64112kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:388kB bounce:0kB free_pcp:1472kB local_pcp:808kB free_cma:0kB [ 478.498341] lowmem_reserve[]: 0 0 0 0 0 [ 478.498357] Node 0 DMA: 7*4kB (M) 9*8kB (UM) 10*16kB (UM) 7*32kB (UM) 8*64kB (UM) 6*128kB (UM) 6*256kB (UM) 3*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 10980kB [ 478.498434] Node 0 DMA32: 957*4kB (UME) 369*8kB (UME) 118*16kB (UME) 43*32kB (U) [ 478.505860] 0 [ 478.515803] 35*64kB [ 478.525421] (U) [ 478.529300] Node 1 Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:2280kB inactive_anon:64112kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:388kB bounce:0kB free_pcp:1472kB local_pcp:664kB free_cma:0kB [ 478.529324] lowmem_reserve[]: 0 0 0 0 0 [ 478.529343] Node 0 DMA: 7*4kB (M) 9*8kB (UM) 10*16kB (UM) [ 478.545659] 11*128kB [ 478.549068] 7*32kB [ 478.551774] (U) [ 478.553216] (UM) [ 478.563156] 8*256kB [ 478.585026] 8*64kB [ 478.595130] (U) [ 478.602108] (UM) [ 478.604989] 3*512kB [ 478.608658] 6*128kB (UM) 6*256kB (UM) 3*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 10980kB [ 478.608697] Node 0 DMA32: 957*4kB (UME) 369*8kB (UME) 118*16kB (UME) [ 478.621146] (U) [ 478.625330] 43*32kB [ 478.630805] 1*1024kB [ 478.632701] (U) [ 478.642017] (U) [ 478.643442] 35*64kB [ 478.646300] 0*2048kB [ 478.650435] (U) 11*128kB (U) 8*256kB (U) 3*512kB (U) 1*1024kB [ 478.662546] 0*4096kB [ 478.664897] (U) [ 478.672977] = 18300kB [ 478.681829] 0*2048kB [ 478.694896] Node 0 [ 478.703896] 0*4096kB [ 478.717372] Normal: [ 478.748779] = 18300kB [ 478.775207] 0*4kB [ 478.813311] Node 0 [ 478.828506] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 478.828549] Node 1 Normal: [ 478.843868] Normal: [ 478.862558] 369*4kB (M) 227*8kB (M) 186*16kB (ME) 77*32kB (M) 41*64kB (M) 6*128kB (UME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (U) [ 478.875546] 0*4kB [ 478.892223] 2*4096kB (U) = 26716kB [ 478.892242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.892249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.892255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.892262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.892266] 23339 total pagecache pages [ 478.892276] 0 pages in swap cache [ 478.892281] Swap cache stats: add 0, delete 0, find 0/0 [ 478.892285] Free swap = 0kB [ 478.892288] Total swap = 0kB [ 478.892299] 2097051 pages RAM [ 478.906360] 0*8kB [ 478.925806] 0 pages HighMem/MovableOnly [ 478.940940] 0*16kB [ 478.944288] 363849 pages reserved [ 478.961805] 0*32kB [ 478.986847] 0 pages cma reserved [ 479.185030] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 479.192245] Node 1 Normal: 369*4kB (M) 227*8kB (M) 186*16kB (ME) 77*32kB (M) 41*64kB (M) 6*128kB (UME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 2*4096kB (U) = 26716kB [ 479.208586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.217689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.226274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.235226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.243887] 23339 total pagecache pages [ 479.247965] 0 pages in swap cache [ 479.251429] Swap cache stats: add 0, delete 0, find 0/0 [ 479.256858] Free swap = 0kB [ 479.259878] Total swap = 0kB [ 479.262900] 2097051 pages RAM [ 479.266010] 0 pages HighMem/MovableOnly [ 479.270033] 363849 pages reserved [ 479.273491] 0 pages cma reserved [ 479.276899] Out of memory (oom_kill_allocating_task): Kill process 6298 (systemd-journal) score 0 or sacrifice child [ 479.287665] Killed process 6298 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1288kB [ 479.299570] oom_reaper: reaped process 6298 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1288kB [ 479.321601] kworker/u4:7 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 479.334329] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 479.345587] CPU: 1 PID: 32565 Comm: kworker/u4:7 Not tainted 4.14.232-syzkaller #0 [ 479.353334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.362715] Workqueue: events_unbound call_usermodehelper_exec_work [ 479.369130] Call Trace: [ 479.371766] dump_stack+0x1b2/0x281 [ 479.375417] dump_header+0x178/0x82f [ 479.379149] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 479.384270] ? ___ratelimit+0x2cd/0x530 [ 479.388262] oom_kill_process.cold+0x10/0xa40 [ 479.392775] ? lock_downgrade+0x740/0x740 [ 479.396949] out_of_memory+0x2dc/0x1190 [ 479.400945] ? oom_killer_disable+0x1c0/0x1c0 [ 479.405452] ? mutex_trylock+0x152/0x1a0 [ 479.409530] __alloc_pages_nodemask+0x23e1/0x2720 [ 479.414395] ? deref_stack_reg+0x124/0x1a0 [ 479.418650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 479.423536] ? kmem_cache_alloc_node+0x38b/0x410 [ 479.428308] copy_process.part.0+0x265/0x71c0 [ 479.432823] ? __lock_acquire+0x5fc/0x3f20 [ 479.437073] ? debug_object_activate+0x292/0x490 [ 479.441834] ? trace_hardirqs_on+0x10/0x10 [ 479.446075] ? static_obj+0x50/0x50 [ 479.449712] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 479.455167] ? __cleanup_sighand+0x40/0x40 [ 479.459409] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 479.464868] _do_fork+0x184/0xc80 [ 479.468356] ? fork_idle+0x270/0x270 [ 479.472084] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 479.477194] ? process_one_work+0x6c4/0x14a0 [ 479.481612] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 479.487068] kernel_thread+0x2f/0x40 [ 479.490796] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 479.496079] ? call_usermodehelper+0x80/0x80 [ 479.500489] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 479.505946] process_one_work+0x793/0x14a0 [ 479.510191] ? work_busy+0x320/0x320 [ 479.513899] ? worker_thread+0x158/0xff0 [ 479.517958] ? _raw_spin_unlock_irq+0x24/0x80 [ 479.522456] worker_thread+0x5cc/0xff0 [ 479.526349] ? rescuer_thread+0xc80/0xc80 [ 479.530536] kthread+0x30d/0x420 [ 479.533896] ? kthread_create_on_node+0xd0/0xd0 [ 479.538568] ret_from_fork+0x24/0x30 [ 479.549147] Mem-Info: [ 479.551591] active_anon:12181 inactive_anon:22982 isolated_anon:0 [ 479.551591] active_file:12 inactive_file:11 isolated_file:0 [ 479.551591] unevictable:0 dirty:0 writeback:0 unstable:0 [ 479.551591] slab_reclaimable:12563 slab_unreclaimable:114038 [ 479.551591] mapped:52245 shmem:23316 pagetables:819 bounce:0 [ 479.551591] free:14790 free_pcp:28 free_cma:0 [ 479.591164] Node 0 active_anon:46844kB inactive_anon:27816kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:28792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 479.625252] Node 1 active_anon:1880kB inactive_anon:64112kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34892kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 479.658703] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:2064kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.691519] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 479.696626] Node 0 DMA32 free:19540kB min:36200kB low:45248kB high:54296kB active_anon:44760kB inactive_anon:27816kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 479.731535] lowmem_reserve[]: 0 0 0 0 0 [ 479.735551] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.767416] lowmem_reserve[]: 0 0 0 0 0 [ 479.771432] Node 1 Normal free:28620kB min:53696kB low:67120kB high:80544kB active_anon:1880kB inactive_anon:64112kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:388kB bounce:0kB free_pcp:108kB local_pcp:108kB free_cma:0kB [ 479.807065] lowmem_reserve[]: 0 0 0 0 0 [ 479.811089] Node 0 DMA: 2*4kB (U) 2*8kB (UM) 3*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11016kB [ 479.830767] Node 0 DMA32: 980*4kB (UME) 523*8kB (UME) 121*16kB (UME) 43*32kB (U) 35*64kB (U) 11*128kB (U) 8*256kB (U) 3*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 19672kB [ 479.848678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 479.863642] Node 1 Normal: 305*4kB (M) 210*8kB (UM) 152*16kB (UME) 87*32kB (UM) 47*64kB (UM) 19*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 28660kB [ 479.886913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.895785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.911311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.920262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.934846] 23339 total pagecache pages [ 479.938909] 0 pages in swap cache [ 479.942355] Swap cache stats: add 0, delete 0, find 0/0 [ 479.953862] Free swap = 0kB [ 479.956954] Total swap = 0kB [ 479.959965] 2097051 pages RAM [ 479.963055] 0 pages HighMem/MovableOnly [ 479.974066] 363849 pages reserved [ 479.977559] 0 pages cma reserved [ 479.980946] Out of memory: Kill process 6391 (syz-executor.4) score 1005 or sacrifice child [ 479.995471] Killed process 6396 (syz-executor.4) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 480.030773] oom_reaper: reaped process 6396 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 480.400256] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 480.412430] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 480.424808] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 480.434701] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 480.443071] systemd[1]: Stopped Journal Service. [ 480.463106] systemd[1]: Starting Journal Service... [ 480.830861] systemd-journald[6429]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 481.226008] systemd[1]: Started Journal Service. 00:49:23 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:49:23 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:23 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:23 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:23 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:24 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:49:24 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:24 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:49:24 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:24 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:49:24 executing program 3: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 488.112757] oom_reaper: reaped process 6445 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 488.133798] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 488.155442] in:imklog cpuset=/ mems_allowed=0-1 [ 488.160860] CPU: 1 PID: 5324 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 488.168597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.178160] Call Trace: [ 488.180784] dump_stack+0x1b2/0x281 [ 488.184636] dump_header+0x178/0x82f [ 488.188481] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 488.193881] ? ___ratelimit+0x2cd/0x530 [ 488.198693] oom_kill_process.cold+0x10/0xa40 [ 488.204975] out_of_memory+0xe3e/0x1190 [ 488.209628] ? oom_killer_disable+0x1c0/0x1c0 [ 488.214682] ? mutex_trylock+0x152/0x1a0 [ 488.219436] __alloc_pages_nodemask+0x23e1/0x2720 [ 488.224969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 488.230530] alloc_pages_current+0x155/0x260 [ 488.235902] filemap_fault+0x11a1/0x1ad0 [ 488.240039] ext4_filemap_fault+0x84/0xb0 [ 488.244713] __do_fault+0xfa/0x380 [ 488.249524] __handle_mm_fault+0x2497/0x4620 [ 488.255752] ? vm_insert_page+0x7c0/0x7c0 [ 488.260626] ? lock_downgrade+0x740/0x740 [ 488.265595] ? mark_held_locks+0xa6/0xf0 [ 488.269893] handle_mm_fault+0x455/0x9c0 [ 488.275026] __do_page_fault+0x549/0xad0 [ 488.279757] ? spurious_fault+0x640/0x640 [ 488.284213] ? do_page_fault+0x60/0x500 [ 488.289243] ? page_fault+0x2f/0x50 [ 488.293608] page_fault+0x45/0x50 [ 488.298020] RIP: 1fa0:0x1f9f [ 488.301456] RSP: 0000:000055959798c9d0 EFLAGS: 7fad291beda0 [ 488.304124] Mem-Info: [ 488.311296] syz-executor.1: vmalloc: allocation failure, allocated 1647964160 of 4294778880 bytes [ 488.312975] active_anon:11824 inactive_anon:25014 isolated_anon:0 [ 488.312975] active_file:15 inactive_file:7 isolated_file:0 [ 488.312975] unevictable:0 dirty:0 writeback:0 unstable:0 [ 488.312975] slab_reclaimable:12583 slab_unreclaimable:115670 [ 488.312975] mapped:52568 shmem:25364 pagetables:820 bounce:0 [ 488.312975] free:13837 free_pcp:569 free_cma:0 [ 488.312991] Node 0 active_anon:44788kB inactive_anon:36008kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175456kB dirty:0kB writeback:0kB shmem:36984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 488.327397] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 488.362638] Node 1 active_anon:2508kB inactive_anon:64048kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 488.402792] (null) [ 488.428897] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.437671] syz-executor.1 cpuset= [ 488.458540] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 488.465400] / [ 488.468697] Node 0 [ 488.468711] mems_allowed=0-1 [ 488.470811] DMA32 free:17552kB min:36200kB low:45248kB high:54296kB active_anon:44744kB inactive_anon:36008kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2888kB bounce:0kB free_pcp:1372kB local_pcp:568kB free_cma:0kB [ 488.473262] CPU: 0 PID: 6445 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 488.479580] lowmem_reserve[]: [ 488.509564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.509570] Call Trace: [ 488.509595] dump_stack+0x1b2/0x281 [ 488.509609] warn_alloc.cold+0x96/0x1cc [ 488.509621] ? zone_watermark_ok_safe+0x220/0x220 [ 488.509642] __vmalloc_area_node+0x48a/0x680 [ 488.509655] ? __vmalloc_node_range+0x150/0x150 [ 488.509662] ? __get_vm_area_node+0x27d/0x340 [ 488.509673] __vmalloc_node_range+0xbe/0x150 [ 488.509688] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 488.509695] vmalloc_user+0x47/0xa0 [ 488.509706] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 488.509715] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 488.509918] vb2_vmalloc_alloc+0xa6/0x2d0 [ 488.509939] __vb2_queue_alloc+0x47a/0xd90 [ 488.509961] vb2_core_create_bufs+0x279/0x5a0 [ 488.509970] ? __vb2_queue_free+0x7a0/0x7a0 [ 488.509983] ? trace_hardirqs_on+0x10/0x10 [ 488.509993] ? __lock_acquire+0x5fc/0x3f20 [ 488.510005] vb2_create_bufs+0x2e1/0x5b0 [ 488.510017] ? ___preempt_schedule+0x16/0x18 [ 488.510030] ? vb2_thread_start+0x310/0x310 [ 488.510040] ? trace_hardirqs_on+0x10/0x10 [ 488.510052] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 488.510064] vb2_ioctl_create_bufs+0x1f7/0x330 [ 488.510078] v4l_create_bufs+0xa4/0x150 [ 488.521828] 0 [ 488.522835] __video_do_ioctl+0x65b/0x6a0 [ 488.533279] 0 [ 488.536308] ? video_ioctl2+0x30/0x30 [ 488.542487] 0 [ 488.544425] ? __might_fault+0x177/0x1b0 [ 488.549660] 0 [ 488.554639] ? video_ioctl2+0x30/0x30 [ 488.563214] 0 [ 488.566181] video_usercopy+0xfd/0xe70 [ 488.577520] ? v4l_g_ctrl+0x390/0x390 [ 488.577533] ? lock_acquire+0x170/0x3f0 [ 488.577541] ? lock_downgrade+0x740/0x740 [ 488.577551] ? trace_hardirqs_on+0x10/0x10 [ 488.577564] ? futex_exit_release+0x220/0x220 [ 488.577578] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 488.577592] ? debug_check_no_obj_freed+0x2c0/0x680 [ 488.583871] Node 0 [ 488.587080] v4l2_ioctl+0x1bb/0x2f0 [ 488.587092] ? v4l2_open+0x2f0/0x2f0 [ 488.587103] do_vfs_ioctl+0x75a/0xff0 [ 488.587114] ? ioctl_preallocate+0x1a0/0x1a0 [ 488.587124] ? lock_downgrade+0x740/0x740 [ 488.587136] ? __fget+0x225/0x360 [ 488.587145] ? do_vfs_ioctl+0xff0/0xff0 [ 488.587157] ? security_file_ioctl+0x83/0xb0 [ 488.587167] SyS_ioctl+0x7f/0xb0 [ 488.587174] ? do_vfs_ioctl+0xff0/0xff0 [ 488.587188] do_syscall_64+0x1d5/0x640 [ 488.593704] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.598129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 488.598141] RIP: 0033:0x4665f9 [ 488.598145] RSP: 002b:00007f2c9bf42188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.598154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 488.598159] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 488.598163] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 488.598168] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 488.598172] R13: 00007ffc8e413f0f R14: 00007f2c9bf42300 R15: 0000000000022000 [ 488.614062] Mem-Info: [ 488.617227] lowmem_reserve[]: 0 0 0 0 0 [ 488.617254] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:2508kB inactive_anon:64048kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:392kB bounce:0kB free_pcp:904kB local_pcp:676kB free_cma:0kB [ 488.617275] lowmem_reserve[]: 0 0 0 0 0 [ 488.617292] Node 0 DMA: 11*4kB [ 488.625859] active_anon:11824 inactive_anon:25014 isolated_anon:0 [ 488.625859] active_file:15 inactive_file:7 isolated_file:0 [ 488.625859] unevictable:0 dirty:0 writeback:0 unstable:0 [ 488.625859] slab_reclaimable:12583 slab_unreclaimable:115670 [ 488.625859] mapped:52568 shmem:25364 pagetables:820 bounce:0 [ 488.625859] free:13837 free_pcp:569 free_cma:0 [ 488.626442] (UME) [ 488.638246] Node 0 active_anon:44788kB inactive_anon:36008kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175456kB dirty:0kB writeback:0kB shmem:36984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 488.641465] 8*8kB [ 488.658286] Node 1 active_anon:2508kB inactive_anon:64048kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 488.658531] (M) [ 488.660603] Node 0 [ 488.666179] 9*16kB [ 488.679928] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.681977] (M) [ 488.686419] lowmem_reserve[]: [ 488.688313] 9*32kB (UME) 9*64kB (ME) 5*128kB (ME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10972kB [ 488.688364] Node 0 DMA32: 799*4kB (ME) 347*8kB (UME) 132*16kB [ 488.700859] 0 [ 488.702668] (ME) [ 488.713617] 2717 [ 488.718422] 54*32kB (UME) 21*64kB (UME) 11*128kB (ME) 1*256kB (U) 1*512kB (M) 4*1024kB (U) 0*2048kB 0*4096kB [ 488.727180] 2718 [ 488.731144] = 17428kB [ 488.733766] 2718 [ 488.737776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 488.737833] Node 1 Normal: 294*4kB (M) 225*8kB (ME) 152*16kB (ME) 76*32kB (UME) 29*64kB (M) 18*128kB (UM) [ 488.752711] 2718 [ 488.752876] 2*256kB [ 488.765326] (ME) [ 488.777266] Node 0 [ 488.780431] 2*512kB [ 488.785036] DMA32 free:17552kB min:36200kB low:45248kB high:54296kB active_anon:44744kB inactive_anon:36008kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2888kB bounce:0kB free_pcp:1372kB local_pcp:804kB free_cma:0kB [ 488.813329] (UE) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 26848kB [ 488.813366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.813372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.813377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.813383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.813387] 25386 total pagecache pages [ 488.813398] 0 pages in swap cache [ 488.813403] Swap cache stats: add 0, delete 0, find 0/0 [ 488.813406] Free swap = 0kB [ 488.813409] Total swap = 0kB [ 488.813416] 2097051 pages RAM [ 488.813419] 0 pages HighMem/MovableOnly [ 488.813421] 363849 pages reserved [ 488.813425] 0 pages cma reserved [ 488.813437] Out of memory (oom_kill_allocating_task): Kill process 5324 (in:imklog) score 0 or sacrifice child [ 488.832605] lowmem_reserve[]: [ 488.834387] Killed process 5313 (rsyslogd) total-vm:254332kB, anon-rss:768kB, file-rss:0kB, shmem-rss:0kB [ 489.352524] oom_reaper: reaped process 5313 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 489.358264] 0 0 0 0 0 [ 489.365273] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.371096] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 489.399449] lowmem_reserve[]: 0 0 0 0 0 [ 489.416161] Node 1 Normal free:28680kB min:53696kB low:67120kB high:80544kB active_anon:1604kB inactive_anon:64048kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.417526] (null), order=0, oom_score_adj=0 [ 489.454429] lowmem_reserve[]: 0 0 0 0 0 [ 489.460618] syz-fuzzer cpuset= [ 489.464326] Node 0 [ 489.464329] / mems_allowed=0-1 [ 489.474403] DMA: 11*4kB (UME) 8*8kB (M) 9*16kB (M) 9*32kB (UME) 9*64kB (ME) 5*128kB (ME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10972kB [ 489.480697] CPU: 1 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 489.492238] Node 0 [ 489.499757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.499762] Call Trace: [ 489.499785] dump_stack+0x1b2/0x281 [ 489.499803] dump_header+0x178/0x82f [ 489.499813] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 489.499821] ? ___ratelimit+0x2cd/0x530 [ 489.499830] oom_kill_process.cold+0x10/0xa40 [ 489.499850] out_of_memory+0xe3e/0x1190 [ 489.502581] DMA32: [ 489.513337] ? oom_killer_disable+0x1c0/0x1c0 [ 489.513349] ? mutex_trylock+0x152/0x1a0 [ 489.513359] __alloc_pages_nodemask+0x23e1/0x2720 [ 489.513378] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 489.516994] 801*4kB [ 489.520816] alloc_pages_current+0x155/0x260 [ 489.524979] (UME) [ 489.530218] filemap_fault+0x11a1/0x1ad0 [ 489.530237] ext4_filemap_fault+0x84/0xb0 [ 489.530247] __do_fault+0xfa/0x380 [ 489.530260] __handle_mm_fault+0x2497/0x4620 [ 489.534885] 335*8kB [ 489.540720] ? vm_insert_page+0x7c0/0x7c0 [ 489.540731] ? lock_downgrade+0x740/0x740 [ 489.540744] ? mark_held_locks+0xa6/0xf0 [ 489.540758] handle_mm_fault+0x455/0x9c0 [ 489.545804] (UME) [ 489.548527] __do_page_fault+0x549/0xad0 [ 489.548540] ? spurious_fault+0x640/0x640 [ 489.548547] ? do_page_fault+0x60/0x500 [ 489.548557] ? page_fault+0x2f/0x50 [ 489.548564] page_fault+0x45/0x50 [ 489.548577] RIP: 0000:0x947a7c [ 489.553783] 121*16kB [ 489.557859] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 489.564796] Mem-Info: [ 489.575490] (UME) [ 489.575843] active_anon:11574 inactive_anon:25014 isolated_anon:0 [ 489.575843] active_file:10 inactive_file:12 isolated_file:0 [ 489.575843] unevictable:0 dirty:0 writeback:0 unstable:0 [ 489.575843] slab_reclaimable:12583 slab_unreclaimable:115626 [ 489.575843] mapped:52568 shmem:25364 pagetables:783 bounce:0 [ 489.575843] free:14635 free_pcp:35 free_cma:0 [ 489.578073] 39*32kB (UME) 20*64kB (UME) 12*128kB (UME) 2*256kB (UM) 1*512kB (M) 6*1024kB (UM) 0*2048kB 0*4096kB = 19052kB [ 489.578124] Node 0 Normal: 0*4kB [ 489.588342] Node 0 active_anon:44692kB inactive_anon:36008kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175456kB dirty:0kB writeback:0kB shmem:36984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 489.597891] 0*8kB [ 489.601396] Node 1 active_anon:1604kB inactive_anon:64048kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 489.602832] 0*16kB [ 489.609911] Node 0 [ 489.619598] 0*32kB [ 489.633685] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.641477] 0*64kB [ 489.642015] lowmem_reserve[]: [ 489.645213] 0*128kB 0*256kB [ 489.648748] 0 [ 489.659017] 0*512kB [ 489.699951] 2717 [ 489.708442] 0*1024kB [ 489.736264] 2718 2718 [ 489.751345] 0*2048kB [ 489.766154] 2718 [ 489.766184] Node 0 DMA32 free:18888kB min:36200kB low:45248kB high:54296kB active_anon:44648kB inactive_anon:36008kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.766221] lowmem_reserve[]: 0 0 [ 489.782791] 0*4096kB [ 489.799573] 0 0 0 [ 489.799588] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.799608] lowmem_reserve[]: 0 0 0 0 0 [ 489.799630] Node 1 Normal free:28680kB min:53696kB low:67120kB high:80544kB active_anon:1604kB inactive_anon:64048kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 489.799648] lowmem_reserve[]: 0 0 0 0 0 [ 489.799668] Node 0 DMA: 11*4kB (UME) 8*8kB (M) 9*16kB (M) 9*32kB (UME) 9*64kB (ME) 5*128kB (ME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10972kB [ 489.799744] Node 0 DMA32: 801*4kB (UME) 335*8kB (UME) 121*16kB (UME) 39*32kB (UME) 20*64kB (UME) 12*128kB (UME) 2*256kB (UM) 1*512kB (M) 6*1024kB (UM) 0*2048kB 0*4096kB = 19052kB [ 489.799815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 489.799860] Node 1 Normal: 294*4kB (UM) [ 489.815430] = 0kB [ 489.817720] 212*8kB (UME) 142*16kB (UME) 62*32kB (UME) 45*64kB (M) 25*128kB (M) 5*256kB (UME) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 28824kB [ 489.817787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.817793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 489.817798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.817804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 489.817811] 25386 total pagecache pages [ 489.824560] Node 1 [ 489.825504] 0 pages in swap cache [ 489.865606] Normal: [ 489.891832] Swap cache stats: add 0, delete 0, find 0/0 [ 489.903054] 294*4kB [ 489.929830] Free swap = 0kB [ 489.948869] (UM) [ 489.965740] Total swap = 0kB [ 489.976210] 212*8kB [ 489.976381] 2097051 pages RAM [ 489.992899] (UME) [ 490.010411] 0 pages HighMem/MovableOnly [ 490.019732] 142*16kB [ 490.036054] 363849 pages reserved [ 490.036435] (UME) [ 490.038860] 0 pages cma reserved [ 490.045820] 62*32kB [ 490.056764] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 490.058482] (UME) [ 490.060711] Killed process 5641 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 490.062770] 45*64kB [ 490.082547] oom_reaper: reaped process 5641 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 490.094623] (M) [ 490.119144] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 490.134626] 25*128kB (M) 5*256kB (UME) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 28824kB [ 490.144262] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 490.149326] CPU: 0 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 490.156986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.166527] Call Trace: [ 490.169140] dump_stack+0x1b2/0x281 [ 490.172792] dump_header+0x178/0x82f [ 490.176530] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 490.181662] ? ___ratelimit+0x2cd/0x530 [ 490.185802] oom_kill_process.cold+0x10/0xa40 [ 490.190330] out_of_memory+0xe3e/0x1190 [ 490.194332] ? oom_killer_disable+0x1c0/0x1c0 [ 490.198941] ? mutex_trylock+0x152/0x1a0 [ 490.203232] __alloc_pages_nodemask+0x23e1/0x2720 [ 490.208118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 490.213083] alloc_pages_current+0x155/0x260 [ 490.217581] filemap_fault+0x11a1/0x1ad0 [ 490.221672] ext4_filemap_fault+0x84/0xb0 [ 490.225849] __do_fault+0xfa/0x380 [ 490.229410] __handle_mm_fault+0x2497/0x4620 [ 490.234114] ? vm_insert_page+0x7c0/0x7c0 [ 490.238355] ? mark_held_locks+0xa6/0xf0 [ 490.242435] handle_mm_fault+0x455/0x9c0 [ 490.246525] __do_page_fault+0x549/0xad0 [ 490.250621] ? spurious_fault+0x640/0x640 [ 490.254861] ? do_page_fault+0x60/0x500 [ 490.258850] ? page_fault+0x2f/0x50 [ 490.262493] page_fault+0x45/0x50 [ 490.265961] RIP: 1e00:0x71b7b6590c [ 490.269602] RSP: 0346:000000c00038fe40 EFLAGS: 00000003 [ 490.277860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.285049] Mem-Info: [ 490.301670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.301786] active_anon:11549 inactive_anon:25014 isolated_anon:0 [ 490.301786] active_file:10 inactive_file:12 isolated_file:0 [ 490.301786] unevictable:0 dirty:0 writeback:0 unstable:0 [ 490.301786] slab_reclaimable:12583 slab_unreclaimable:115626 [ 490.301786] mapped:43868 shmem:25364 pagetables:746 bounce:0 [ 490.301786] free:17665 free_pcp:196 free_cma:0 [ 490.312813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.353609] Node 0 active_anon:44592kB inactive_anon:36008kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140656kB dirty:0kB writeback:0kB shmem:36984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 490.395309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.398668] Node 1 active_anon:1604kB inactive_anon:64048kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 490.415439] 25386 total pagecache pages [ 490.440760] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.462856] 0 pages in swap cache [ 490.473946] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 490.479678] Node 0 DMA32 free:31940kB min:36200kB low:45248kB high:54296kB active_anon:44548kB inactive_anon:36008kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:632kB local_pcp:632kB free_cma:0kB [ 490.506815] Swap cache stats: add 0, delete 0, find 0/0 [ 490.515541] Free swap = 0kB [ 490.515804] lowmem_reserve[]: 0 0 0 0 0 [ 490.530390] Total swap = 0kB [ 490.531926] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.547114] 2097051 pages RAM [ 490.581948] 0 pages HighMem/MovableOnly [ 490.585028] lowmem_reserve[]: 0 0 0 0 0 [ 490.586046] 363849 pages reserved [ 490.590845] Node 1 Normal free:28680kB min:53696kB low:67120kB high:80544kB active_anon:1604kB inactive_anon:64048kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 490.596187] 0 pages cma reserved [ 490.624410] lowmem_reserve[]: 0 0 0 0 0 [ 490.633931] Node 0 DMA: 11*4kB (UME) 8*8kB (M) 9*16kB (M) 9*32kB (UME) 9*64kB (ME) 5*128kB (ME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10972kB [ 490.650170] Node 0 DMA32: 803*4kB (UE) 493*8kB (UE) 221*16kB (UE) 137*32kB (UME) 163*64kB (UE) 136*128kB (UE) 2*256kB (UM) 1*512kB (M) 5*1024kB (UM) 0*2048kB 0*4096kB = 49060kB [ 490.668696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 490.681174] Node 1 Normal: 294*4kB (UM) 212*8kB (UME) 142*16kB (UME) 62*32kB (UME) 45*64kB (M) 25*128kB (M) 5*256kB (UME) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 28824kB [ 490.699154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.710427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.721664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.732754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.761082] 27458 total pagecache pages [ 490.765479] 0 pages in swap cache [ 490.777310] Swap cache stats: add 0, delete 0, find 0/0 [ 490.790300] Free swap = 0kB [ 490.793432] Total swap = 0kB [ 490.796509] 2097051 pages RAM [ 490.816699] 0 pages HighMem/MovableOnly [ 490.821083] 363849 pages reserved [ 490.824718] 0 pages cma reserved [ 490.847309] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 490.867474] Killed process 5640 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 490.894886] oom_reaper: reaped process 5640 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 491.070050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.086943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.107239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.114384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.138735] device bridge_slave_1 left promiscuous mode [ 491.144757] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.181542] device bridge_slave_0 left promiscuous mode [ 491.187209] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.209948] device veth1_macvtap left promiscuous mode [ 491.240658] device veth0_macvtap left promiscuous mode [ 491.246051] device veth1_vlan left promiscuous mode [ 491.271034] device veth0_vlan left promiscuous mode [ 491.552176] device hsr_slave_1 left promiscuous mode [ 491.577542] device hsr_slave_0 left promiscuous mode [ 491.615576] team0 (unregistering): Port device team_slave_1 removed [ 491.673549] team0 (unregistering): Port device team_slave_0 removed [ 491.699473] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.737274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 491.831838] bond0 (unregistering): Released all slaves 00:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:33 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 493.730470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.741480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.750092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.760737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.769782] device bridge_slave_1 left promiscuous mode [ 493.775576] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.789919] device bridge_slave_0 left promiscuous mode [ 493.795822] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.810136] device veth1_macvtap left promiscuous mode [ 493.815782] device veth0_macvtap left promiscuous mode [ 493.825316] device veth1_vlan left promiscuous mode [ 493.830922] device veth0_vlan left promiscuous mode [ 493.966340] device hsr_slave_1 left promiscuous mode [ 493.981210] device hsr_slave_0 left promiscuous mode [ 494.004197] team0 (unregistering): Port device team_slave_1 removed [ 494.015991] team0 (unregistering): Port device team_slave_0 removed [ 494.031377] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 494.046123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 494.092700] bond0 (unregistering): Released all slaves [ 495.734333] IPVS: ftp: loaded support on port[0] = 21 [ 495.955041] chnl_net:caif_netlink_parms(): no params data found [ 496.163459] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.174701] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.183260] device bridge_slave_0 entered promiscuous mode [ 496.194915] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.202277] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.213711] device bridge_slave_1 entered promiscuous mode [ 496.245045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 496.260080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 496.294590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 496.303604] team0: Port device team_slave_0 added [ 496.314161] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 496.322056] team0: Port device team_slave_1 added 00:49:36 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:36 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 496.354542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.361218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.394284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 00:49:36 executing program 3: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 496.407369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.414657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:49:37 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:37 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:49:37 executing program 3: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 496.455825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.494393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 00:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x260, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 496.512527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 00:49:37 executing program 1: ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000200)={0x9, {0x1, 0x1, 0x7fffffff, 0x9}}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)={0x22a0, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "0455ff4389107cdbff2e912015efc9ce8e4787709c04d02ad9d7fe8e348d47e8373123c7aeba56956c51ace9366777d3881380aa9cb700c135e93750166125d75b20f0c14e3f0bef9bef35282ab6c28e16e39de4712429b4dc00d864296dfc4837c2565ce90f329277ea11ace8134c7230f711a44c201ad2c96aa80d41c47d79202e6a0ab2ffb54301bc3aba7dbd07b0c899eb9910afae44ff1e8502bfc22c8eb73e63868b22a02f47e8998327776a10cc92021a21"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "a0cb98e8204f53c6130bad23fc4f98927955fcb3567a9c2f6c4d166a5b6559cee4be120d30d8297a19a4fdb73cc385ba7fbb6849a255cabbf020e8c105105a49370cbb0f94d6d400d88d37ce177c7ab9d5bf01feb5d93d4acd3478aa2b55d659e485ebb15992a3a14611c508ac5f1d38b48559b9cf0e3531b3edba7ad8009b038a161aabb812d9d28004a6201a54f1680ae1053d47d3e668a36c76832f716df4cda1dce2cf8bd1ad9f2d8ee3c0bde5b5728fc6c393d9ee28418bc936ac709bfe0ab1fcda57458911c5e601e754ec7ab7c9197e2116d21ef5c6843e5a0554d3ebb52a6bce1261d926fe0cf3300296a06d8a8ca2fff7afb54ba9bba7b8f1fe547076c5c99bead906710bd2edf67b681b552df55b2f9a041299687defcaf819942fa7ddc4342988c315f7c46debc4c32232ab6750143b57403368ad93b4a1c0c2192f381bb7fa8a44b0c64ab2f5ee6e857da7057167057b29cfe6c13625d4fb7ddc244f5fb52d53d574a18689fe2c753a58631f5ceba65285f0240369b0a37365031a55eb7683b03b97b5393f0cc161cd1abcc33bf2eaec9ccd08402ce62afa6677b5c1f1ba419dd22af1b3e851825d028e0abc6aab701713414aa4feb8bd97bc73e900d6affac5fcb5d7fce25ea2fd1d84357228cf636ac533ae7ce7c21c3d24cbce2b3f557d36c2df43068f2ef6f589fc156bedf9e4f6febe982235a80d036f0496f888eb37b9061234b9ee392fdc0f015889123ccbe2eaaabd2becbfbfe6102996f272d550c96e1d4b673232ccb5534ead64e575fcc2735c26a772b2eae24824f16e93dfcb7abbc6bf8b4dc3fc8a5a4641a6a32b838c8d5fd23ec453fcb4eb264940ee91b659423dda94e533756c8ef6322102b52fca8242c2b7f1e56485431f16762d8dc3d0cd9e9521baa573292ee5bf829f8ecc4e6c2cb79efa441d1cab042777d3d0c8bfed745b400e4363a4b43b37b6bfa7947fe79f5e6a5e14a759b6e713f66ec43d14b8595310adaa17dad070f943baa6be30f6b0a39276ba5f3e00a89a501de0e13d3d4637549d01160ea62eacd3688628639f664cba89bf9f63e9579df24dbd85b6a49eeb2606f565f2b8e2945dbb1cc425e2479efeef9aaacadb1ab255636a8155f4b091be1340ac3a9dd942151489a76ebf35a18ac238869fa009791832f8d6d6e8716819d774498b50d3b1946e8b8e81c5658267443fc151fbd10b0a428d058afe9831c03440bb1709181ba46f8896c9f2aabaca5ede4d0a9b35d4f7552b3ef2df7a062fa2b6a886b8ee86678a68e50404364b29d65c6636435d1eda399a1810fe33766a93e8b3a29a530a98ded84bf18fd4369266e23fe081d88b976bedfa6af38826e8688a89e1b21a0670e11417c205dd5cbcc0511d7ddeeac6e5ba3e56fac7abe9e29e381b2d59bd6cd64208cc7d0b4686643bc7fb7c865bf09e8ea924fb8d911a350c0c1ca1f1f414089dbed498f8ee42e9dfc48d2265a1e36a0db6e1c1dbba43805d9297c84e108cda24c6d54788a32c79802f7ed1056c04816a91c06a4e033b31b8b82d109cb674661117eed59481949dc2e478b98fe7cb3a80a5459494fa1e70a0731bd052545a1e470e70ef35bbc41e80f426cc41a00b8e7abf5205e73e12edfc2b93a158489ab96c52eeb14f052178e28d99f1abaa5d1a4656e2a0cac4c199ecd3e6c17c8404c106bc27a56fd1713bbe8f9d9ec8e393f82995328d2f69681cc5db4fcdd6b3f98d4c9bb77cacb64018cdcc10cc00c89133fea5e5e4619aff1762347a4c639d6c6573868cc3267f4ae327bc54c63280353fa60ac8baf2668695a89e6cafb8be12b04523290b9becfb7849b366d38805eb82ccdad28df24bfef093f79e5d925fe59d10cbe6d8717e4cba3abdd09870e960aabb0604128dc0f8ca7b973e2500b2406d0893f45fd09abdc4f0581c176739a9c22497cd92737fa79b9328d6309b2344875644cb27dc32f90e0a4b3ef6eb04a9be88c863649fc77ad85f2c2fc4a683b51f18222e123a88c9d52583cb34aad260ccb14328d723b71ff8ed2b18e9c45c3fcba5d5d8a8064d2b06d8ad24e192888f474f0b47253ea191a67b7aa7a7b7e4880281bf5f2438e933c6fa13e5ea03aaab4fb98a8e97f7b2e5e2ce7553c9bb872f1b9ce4a9e91aacc3d673c96abea98178a5008c978bf69ce9ddccda5eee1a3c181418f2fc578e28f8ec78e77eed8843557e9d3f8d1c94c1d46403d39518ee8f76cd97e39dd76a4f07bf41b1757c4758459fdb67c5ae835a61ebf256ea2a56dcbfa3b287830f59142533917614c481f050cf172c8f82f1ead0cad10dfa0d0c7c424680f82fc581b669875f214a3cd27e8e513d3805a6e220b357a0a2148d0778dece855d0fec07cc40fb07defd3530aa0520b0d88c7c1576ba828d539367eb1e3972e4a018bc58b855e1dd65e4a8d09097bf70ea6a6ca324bdcc79f47e7636eca7d655bffb7de103c0119ba146e848c27302c2d3c446634bd630f28db43e329d6418a1a83cdd9c182bc8706766fe7418a176727e8574aedc46afa9598ae742ae437e622732075c68d8a76d6a7927d2ad3442aa4a7f2bc1f644bec8c7b555a182d1a11955bc39d2d4d9a231149f95e07fc375727cc8fe726a6669f3bcfdd81ab4beb925672aeb2dcd3e88a7461d1caa8b1b65ad7b427575e0a9cdd2fd26cc8293a095f240382a6fec63197d37e08213f7fe0e215385221080a6fc7efd7edd9cb71b9f1d231077242edaee14713b8476682299d489709cacff96bb924603fee771170eb4a4385d17d23baadaa96afba094e15d09b1328b3c0053e809b49680cc1418ee033b12469f9d32c817b8eb697adfab2f9eb8239b445bdb1f3eca66ec6cfde18b24f0e5ffcf2c20fcb3bdc25e10936a165bca7f5f94bb1119f388502b5ab3e4464b4a278bc1d9e21f5ccd3b1c70d2f5928aaa4d70a9ee0f53211511300b5aafb502096eb814f5bd3ed1adb1b9004cd28b2ca7ecb3ecb8b7a71784de5b1d109b5f591c66e3ab3540d9335d7aa75a9259bf45bdf3218817ab0a6305353758c3a03357a9d2d09e6dcd22b550ebaf10d7113ed5805ccdec445166ec134fcf1289c595f2bf2bf071183fe8adf47ac635e256f706e2d294d18619cd45fe9b9161360bd5215798c9b0d2332832a70a84ee38402e3b43272a47e89c0cb7d4b77777e3db62553977b342a587b30953f068fe5a66552609e1f46752f4d36a2b45f3e159ad308daea42b678557e3fe3c009697721e9164b16dfb7589aeae4f4624ad7d4a054eb67387d818ea9cee7fd83121bcf2725431b5b7cbb07ea55c13da43710917a94b5185272e7469ffaaf568fe59f37f5c7289c750d204eb25afcc85ece45665647433688589cb1881280f7e825274be860ddede9014c0f1e5e933bd45bd569d11bce677c5508960be1974dc2d07e48d064a7ed7d493c6e22b95e96ba68c31e1792a9491b92fa2c5e6837b8ca9304fd5ff3712babd9d5ad88232a4abcd947bf49b7c5f31ceff620f0ec014621b461d7d9bb95063cd0da95a9f052659748c188fcd336f736d9716aa011a439857ca6e76f1fdb6db5b8834e8a206b188308d201afa83793780062342410944a5b0bc5b04f382b9fd4b512bfe41ea29023ae708af80d2369d0e84ceb0348958ba42c5425ea70e00e9ffc3d86cd2a6a21558fd36d4e0769044fc5668e346bd15ff44be51b447480375206b8a50893e755b546a57d40a81626fc61fff24e8d86d8fe4fd77c17bc03eb3c81a44dd3175b05fa9dd055804d157056a52eea21042b66fdab5904b2f9b6634e86e3e98b4e02e860c396294430854ec90e9888421fc439b24a7d9046ca5d28144a6e85a6dfe0759e8c640ea345854799d68d39ab2b5901f522726d5b3e139525256160d1a71c6499a7409beb1f36222346b7a767c55561208846429cea2b3cc4159db6811ee2d92686954330ce4bce1cbcda073d04ffa2b4f666f771200664bcb528c3c0f8607e03711f267d915da51c6fc235e2774913487281f49debb165ec7566c6bbdec5d0f31baa91ec1fd47789d4169601fdcf9937e57589c2a0680723863a95cb7b1e95af22617ffe5d4f6a8a088f1e134877a75f2ecdd75666f33cf6b3ca9aed3381f923c62477c103234c58be104e1ccb04de28066cf78ad36870ed01ad193ff241dfae1e3cd399681218d625dd73e43a9492ce0ffb8bf06cdd0a4bf94d4ae33ee822f7f7b0c3e789f0e580a10be6a827c7c8aab5d84c7f71237e58e5d5ab983e572d5dda8c538919a59fea3dcb7d5278f4ef3517f010f082fcb37b6fb4ea50b66c0fc9e3a65dd5462336dfbe31fc1eb8c7bd6c3b73e546b1e9e7a7f25a523a675fbc7bfca5b0af37132344b2e629bfd24e82326558f8e202a79a75f7056c3644dcd05c19fb8ed7c4d2f83f5de016e850084b4daa0309a1b77d9a201d12a0b66d1652a209f725220a43e01785ba6ea65fb5799174e2a0b819ed141facc8732cb5e8ab45dfb9b5d489c0c415439eddd372bf262587fc0ef8a101b3489644dd7876fc6a6dfb63aafef3d7a836538fe1851142361b8339814819af642f9edad617cb8059e9738d4c240693d97c3beb9bd86a17d662df73c87feb653d7724fedf0df33dc2668b1b589994f18a1377c006afb39554c8b6df4f5d3f8ce426de2746bb655165a2db31444185d1c5c203f7f6fa24f01e4a4783ed28326e47814e43e8dbff3e5649d03a173acc0983ce353bf57d836944defe69f0feb2dc4858b623c7d0dc46d83972f134082834dad13d9e6d318ba60d68a25c88690301970ddd146135db393ec1e2fd43d7fd858a470a244fb5b61fcb5918f16845386f00a530598b5706ddc8eab09b604205bf0973d1d2aaea65d9211dd7d447a195efbd398c1a4aac9943b241c019d82edd289b875f2c46db3810244fe385365b66fafb3e70f95b5c93a6f1687d0327de8774397cbeacfe1e9f72ef78a74ad3a327438a8d36d6c8cf5a633b9c975744cba337cdfb97630b9a12c155d8c372963bf205ee8bc0910008e1833363058a68b77f586319f4520b815ff82f75ae5721b12e801dbf1f5edb25d247f815fb0b6b672927fee88d34ec00a3c7d91c121ca9985e4a526993d0c433d4b0c72f6b51e31aa452c67614237630c5bb7bf02983f1c6f4dbb03a8617ff239d8b7fe10ef031ce9c49e1554fd93319fd98a56a35d833f5b1d52d8ca15c5ea705628bc7fec9a09f685ba3b38b6a095d9599102e33a97d72e9a03500894e18ffc746353b0966ac1c749e2f1b299302aaa4e4915c44d9cb8f9c6758a89a0fd2b3e19ac23e4718a7309f570280f8df9fbb120d48664b1dbb41cb9b93d63521d9a3f73ab8cf226d2f5d73eb68de1c04aa4b8e7088b388964ff5dd5670543064eb82867d3f514c7e719a039a4c421ba216114b279ec69c96d28256d387f1f4da69d711a9d192f2fa8b3844f7fc59aaab27454db8bac799c38b56dc56af13d76c32df3e762e54276aa64e89d85dda29aa8077d929897dfeaaaf22978879949d6aeeeb823b6e47316dd58798baadb4328d122413bbd5b774fc18743cd3cb2fa938a5325853d275a45d03000f459362b896c9e2105a418a31ffc8637ba0b469d7433ad5947dc2832f77b195a7b48162aee67f94a5c4aed79791cfaf2e0bac0c2f8ac8ddd3e3a6845988a1b91526be52cce9b588c3bce3db3faf5defaf9ffc42ea7436a688daf808f1ab5fc100d51f65b8e00c4f8d285890937a0ec54d2124e4e856b1439f30b258dd60b52d1e68eddf80873013a2bacd22d672c9e"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9b84c801bc9c47559f6905036aee2f8f949f12288edc6ada27bdf75332"}}]}, @TIPC_NLA_NODE={0x1024, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x22a0}, 0x1, 0x0, 0x0, 0x40008d0}, 0x9000) write$6lowpan_control(r0, 0x0, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000980)) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000001c0)={0x4, {0x7fff, 0x7, 0x1, 0x5}}) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x80000000, 0xc7, '\x00', &(0x7f0000000100)=0x9}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000980)) [ 496.585785] device hsr_slave_0 entered promiscuous mode [ 496.600494] device hsr_slave_1 entered promiscuous mode [ 496.617493] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 00:49:37 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 496.637080] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 496.820861] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.827529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.834244] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.840705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.903813] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 496.913415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.930509] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 496.941261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.953255] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.960960] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.974503] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 496.991421] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 496.998135] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.013004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 497.020430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.034400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.043605] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.050098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.065731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 497.075170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.088621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.096498] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.102991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.118399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 497.130826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.141043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 497.153014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.165961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 497.177907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.190173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.201559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 497.213625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.223252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.234869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.247972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 497.260925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.269303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.283963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 497.291848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.305118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.321336] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 497.328236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.351066] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 497.364920] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 497.374893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.386345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.399525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.537284] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 497.561470] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 497.582047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.595717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.681499] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 497.692614] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 497.701252] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 497.720616] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 497.730750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.740683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.754305] device veth0_vlan entered promiscuous mode [ 497.763076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.774810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.786384] device veth1_vlan entered promiscuous mode [ 497.797351] Bluetooth: hci2 command 0x0409 tx timeout [ 497.803861] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 497.820938] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 497.845489] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 497.860334] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 497.871182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.879510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.890465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.898477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.908630] device veth0_macvtap entered promiscuous mode [ 497.914917] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 497.928718] device veth1_macvtap entered promiscuous mode [ 497.935202] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 497.951074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 497.962662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 497.972462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 497.988268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 498.001490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.012077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.025736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.040987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.050468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.064433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.074174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.087802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.100822] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 498.111602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.121690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.133134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.145801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.160227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.169835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.183788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.193952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.207581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.218777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.231232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.244436] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 498.254005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.264107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.274999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:49:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 498.707953] IPVS: ftp: loaded support on port[0] = 21 [ 498.946087] chnl_net:caif_netlink_parms(): no params data found [ 499.060747] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.072105] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.081532] device bridge_slave_0 entered promiscuous mode [ 499.093291] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.100608] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.112453] device bridge_slave_1 entered promiscuous mode [ 499.151715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 499.161956] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.196160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 499.208630] team0: Port device team_slave_0 added [ 499.214559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 499.227966] team0: Port device team_slave_1 added [ 499.260741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.271230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.300752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.313252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.323792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.353870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.367981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 499.375783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 499.420841] device hsr_slave_0 entered promiscuous mode [ 499.427126] device hsr_slave_1 entered promiscuous mode [ 499.433952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 499.446213] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 499.596345] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.602832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.609561] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.615953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.682353] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 499.689106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.703165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 499.713515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.725153] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.733158] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.749103] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 499.755216] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.771803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.783970] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.790476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.821314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.829770] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.836147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.850523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.867048] Bluetooth: hci2 command 0x041b tx timeout [ 499.874381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.883797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 499.895853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.905108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 499.920481] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 499.930381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.952521] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 499.962625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.978255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.991090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.001910] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 500.119558] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 500.136042] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 500.145597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.159829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.219749] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 500.227860] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 500.234874] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 500.246307] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 500.254161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.262719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.273744] device veth0_vlan entered promiscuous mode [ 500.281718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.293959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.305203] device veth1_vlan entered promiscuous mode [ 500.318684] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 500.335431] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 500.355093] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 500.365839] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 500.378046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 500.386055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 500.398520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 500.406498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 500.421906] device veth0_macvtap entered promiscuous mode [ 500.429463] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 500.440146] device veth1_macvtap entered promiscuous mode [ 500.447862] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 500.458654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 500.471415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 500.480876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.491375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.501068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.511185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.520858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.531146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.540541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.550629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.560465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.570757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.582183] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 500.590377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.598082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 500.605478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 500.613779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 500.622682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.633714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.644998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.659742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.672105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.685481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.697647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.710083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.722696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.735407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.747633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.757265] Bluetooth: hci3 command 0x0409 tx timeout [ 500.770589] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 500.780186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.789930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.802042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.946957] Bluetooth: hci2 command 0x040f tx timeout [ 502.502117] oom_reaper: reaped process 6680 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 502.521306] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 502.544343] in:imklog cpuset=/ mems_allowed=0-1 [ 502.551387] CPU: 0 PID: 6489 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 502.558766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.568128] Call Trace: [ 502.570732] dump_stack+0x1b2/0x281 [ 502.574378] dump_header+0x178/0x82f [ 502.578109] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 502.583224] ? ___ratelimit+0x2cd/0x530 [ 502.587211] oom_kill_process.cold+0x10/0xa40 [ 502.591731] out_of_memory+0xe3e/0x1190 [ 502.595761] ? oom_killer_disable+0x1c0/0x1c0 [ 502.600278] ? mutex_trylock+0x152/0x1a0 [ 502.604352] __alloc_pages_nodemask+0x23e1/0x2720 [ 502.609223] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 502.614098] alloc_pages_current+0x155/0x260 [ 502.618535] filemap_fault+0x11a1/0x1ad0 [ 502.622623] ext4_filemap_fault+0x84/0xb0 [ 502.626787] __do_fault+0xfa/0x380 [ 502.630342] __handle_mm_fault+0x2497/0x4620 [ 502.634777] ? vm_insert_page+0x7c0/0x7c0 [ 502.638942] ? lock_downgrade+0x740/0x740 [ 502.640608] syz-executor.0: vmalloc: allocation failure, allocated 1642221568 of 4294778880 bytes [ 502.643101] ? mark_held_locks+0xa6/0xf0 [ 502.643113] handle_mm_fault+0x455/0x9c0 [ 502.654504] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 502.656191] __do_page_fault+0x549/0xad0 [ 502.664261] (null) [ 502.666205] ? spurious_fault+0x640/0x640 [ 502.673262] syz-executor.0 cpuset= [ 502.676544] ? do_page_fault+0x60/0x500 [ 502.676553] ? page_fault+0x2f/0x50 [ 502.676559] page_fault+0x45/0x50 [ 502.676567] RIP: 1fa0:0x1f9f [ 502.676571] RSP: 0000:000055f76eb8d9d0 EFLAGS: 7f5629d82da0 [ 502.684998] Mem-Info: [ 502.694693] / [ 502.700039] active_anon:12343 inactive_anon:25014 isolated_anon:0 [ 502.700039] active_file:33 inactive_file:2 isolated_file:0 [ 502.700039] unevictable:0 dirty:21 writeback:0 unstable:0 [ 502.700039] slab_reclaimable:12786 slab_unreclaimable:116759 [ 502.700039] mapped:52698 shmem:25364 pagetables:822 bounce:0 [ 502.700039] free:13913 free_pcp:60 free_cma:0 [ 502.702448] mems_allowed=0-1 [ 502.704106] Node 0 active_anon:46848kB inactive_anon:36012kB active_file:56kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175896kB dirty:56kB writeback:0kB shmem:36988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 502.743713] CPU: 1 PID: 6680 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 502.774926] Node 1 active_anon:2524kB inactive_anon:64044kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:28kB writeback:4kB shmem:64468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 502.776113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.803388] Node 0 [ 502.812654] Call Trace: [ 502.812679] dump_stack+0x1b2/0x281 [ 502.812693] warn_alloc.cold+0x96/0x1cc [ 502.812709] ? zone_watermark_ok_safe+0x220/0x220 [ 502.814940] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 502.817520] __vmalloc_area_node+0x48a/0x680 [ 502.817534] ? __vmalloc_node_range+0x150/0x150 [ 502.817541] ? __get_vm_area_node+0x27d/0x340 [ 502.817553] __vmalloc_node_range+0xbe/0x150 [ 502.821160] lowmem_reserve[]: [ 502.825140] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 502.829998] 0 [ 502.855722] vmalloc_user+0x47/0xa0 [ 502.855737] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 502.855746] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 502.855759] vb2_vmalloc_alloc+0xa6/0x2d0 [ 502.860197] 2717 [ 502.864986] __vb2_queue_alloc+0x47a/0xd90 [ 502.869539] 2718 [ 502.873923] vb2_core_create_bufs+0x279/0x5a0 [ 502.877069] 2718 [ 502.882398] ? __vb2_queue_free+0x7a0/0x7a0 [ 502.884171] 2718 [ 502.887799] ? trace_hardirqs_on+0x10/0x10 [ 502.887808] ? __lock_acquire+0x5fc/0x3f20 [ 502.887822] vb2_create_bufs+0x2e1/0x5b0 [ 502.887836] ? ___preempt_schedule+0x16/0x18 [ 502.897509] ? vb2_thread_start+0x310/0x310 [ 502.897521] ? trace_hardirqs_on+0x10/0x10 [ 502.897533] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 502.897546] vb2_ioctl_create_bufs+0x1f7/0x330 [ 502.897559] v4l_create_bufs+0xa4/0x150 [ 502.901690] Node 0 [ 502.903759] __video_do_ioctl+0x65b/0x6a0 [ 502.908039] DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:44476kB inactive_anon:36012kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:236kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2848kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 502.910062] ? video_ioctl2+0x30/0x30 [ 502.914531] lowmem_reserve[]: [ 502.916594] ? __might_fault+0x177/0x1b0 [ 502.916606] ? video_ioctl2+0x30/0x30 [ 502.916614] video_usercopy+0xfd/0xe70 [ 502.916628] ? v4l_g_ctrl+0x390/0x390 [ 502.916640] ? lock_acquire+0x170/0x3f0 [ 502.920945] 0 [ 502.923007] ? lock_downgrade+0x740/0x740 [ 502.927257] 0 [ 502.931447] ? trace_hardirqs_on+0x10/0x10 [ 502.935479] 0 [ 502.939887] ? futex_exit_release+0x220/0x220 [ 502.939899] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 502.939909] ? debug_check_no_obj_freed+0x2c0/0x680 [ 502.939925] v4l2_ioctl+0x1bb/0x2f0 [ 502.944250] 0 [ 502.948487] ? v4l2_open+0x2f0/0x2f0 [ 502.948499] do_vfs_ioctl+0x75a/0xff0 [ 502.948511] ? ioctl_preallocate+0x1a0/0x1a0 [ 502.948521] ? lock_downgrade+0x740/0x740 [ 502.948534] ? __fget+0x225/0x360 [ 502.953623] 0 [ 502.958218] ? do_vfs_ioctl+0xff0/0xff0 [ 502.958231] ? security_file_ioctl+0x83/0xb0 [ 502.958240] SyS_ioctl+0x7f/0xb0 [ 502.958249] ? do_vfs_ioctl+0xff0/0xff0 [ 502.958261] do_syscall_64+0x1d5/0x640 [ 502.964458] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 502.968615] Node 0 [ 502.996849] RIP: 0033:0x4665f9 [ 502.996855] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.996864] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 502.996869] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 502.996873] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 502.996878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 502.996883] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 503.005958] Mem-Info: [ 503.010068] Bluetooth: hci3 command 0x041b tx timeout [ 503.014108] active_anon:12343 inactive_anon:25014 isolated_anon:0 [ 503.014108] active_file:33 inactive_file:2 isolated_file:0 [ 503.014108] unevictable:0 dirty:21 writeback:0 unstable:0 [ 503.014108] slab_reclaimable:12786 slab_unreclaimable:116759 [ 503.014108] mapped:52698 shmem:25364 pagetables:822 bounce:0 [ 503.014108] free:13913 free_pcp:60 free_cma:0 [ 503.023038] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.030555] Node 0 active_anon:46848kB inactive_anon:36012kB active_file:56kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175896kB dirty:56kB writeback:0kB shmem:36988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 503.036426] lowmem_reserve[]: 0 [ 503.039326] Node 1 active_anon:2524kB inactive_anon:64044kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:28kB writeback:4kB shmem:64468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 503.045253] 0 [ 503.053462] Node 0 [ 503.063330] 0 [ 503.069284] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.070635] 0 [ 503.074631] lowmem_reserve[]: [ 503.084615] 0 [ 503.094033] 0 [ 503.099646] 2717 2718 2718 2718 [ 503.099663] Node 0 DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:44704kB inactive_anon:36012kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2848kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 503.099715] lowmem_reserve[]: [ 503.110658] Node 1 [ 503.124397] 0 [ 503.126536] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:2568kB inactive_anon:64044kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:440kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 503.132913] 0 [ 503.146785] lowmem_reserve[]: [ 503.153449] 0 [ 503.154731] 0 [ 503.157171] 0 0 [ 503.157181] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.157200] lowmem_reserve[]: 0 0 0 0 0 [ 503.157219] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:2568kB inactive_anon:64044kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:440kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 503.157242] lowmem_reserve[]: 0 0 0 0 0 [ 503.157260] Node 0 DMA: 8*4kB (UME) 7*8kB (UM) 13*16kB (UM) 17*32kB (UME) 8*64kB (UME) 5*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10952kB [ 503.157333] Node 0 DMA32: 549*4kB (UME) 362*8kB (UME) 115*16kB (UME) 36*32kB (UME) 29*64kB (UME) 22*128kB (UME) 12*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 503.157398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 503.157440] Node 1 Normal: 292*4kB (UM) 217*8kB (UME) 123*16kB (ME) 30*32kB (ME) 46*64kB (UM) 25*128kB (UM) 6*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 26824kB [ 503.157525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.157532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.157539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.157546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.157550] 25394 total pagecache pages [ 503.157561] 0 pages in swap cache [ 503.157566] Swap cache stats: add 0, delete 0, find 0/0 [ 503.157570] Free swap = 0kB [ 503.157573] Total swap = 0kB [ 503.157579] 2097051 pages RAM [ 503.157582] 0 pages HighMem/MovableOnly [ 503.157585] 363849 pages reserved [ 503.157588] 0 pages cma reserved [ 503.588628] 0 0 0 0 [ 503.591082] Node 0 DMA: 8*4kB (UME) 7*8kB (UM) 13*16kB (UM) 17*32kB (UME) 8*64kB (UME) 5*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10952kB [ 503.606983] Node 0 DMA32: 549*4kB (UME) 362*8kB (UME) 115*16kB (UME) 36*32kB (UME) 29*64kB (UME) 22*128kB (UME) 12*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 503.622931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 503.633912] Node 1 Normal: 292*4kB (UM) 217*8kB (UME) 123*16kB (ME) 30*32kB (ME) 46*64kB (UM) 25*128kB (UM) 6*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 26824kB [ 503.650965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.659883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.668529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.677415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.686004] 25394 total pagecache pages [ 503.690068] 0 pages in swap cache [ 503.693525] Swap cache stats: add 0, delete 0, find 0/0 [ 503.698937] Free swap = 0kB [ 503.701966] Total swap = 0kB [ 503.704991] 2097051 pages RAM [ 503.708618] 0 pages HighMem/MovableOnly [ 503.712597] 363849 pages reserved [ 503.716040] 0 pages cma reserved [ 503.722301] Out of memory (oom_kill_allocating_task): Kill process 6489 (in:imklog) score 0 or sacrifice child [ 503.732588] Killed process 6487 (rsyslogd) total-vm:254332kB, anon-rss:668kB, file-rss:0kB, shmem-rss:0kB [ 503.746371] oom_reaper: reaped process 6487 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 503.759298] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 503.801156] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 503.806488] CPU: 1 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 503.813940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.823298] Call Trace: [ 503.825889] dump_stack+0x1b2/0x281 [ 503.829517] dump_header+0x178/0x82f [ 503.833226] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 503.838329] ? ___ratelimit+0x2cd/0x530 [ 503.842301] oom_kill_process.cold+0x10/0xa40 [ 503.846805] out_of_memory+0xe3e/0x1190 [ 503.850779] ? oom_killer_disable+0x1c0/0x1c0 [ 503.855270] ? mutex_trylock+0x152/0x1a0 [ 503.859332] __alloc_pages_nodemask+0x23e1/0x2720 [ 503.864182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 503.869037] alloc_pages_current+0x155/0x260 [ 503.873446] filemap_fault+0x11a1/0x1ad0 [ 503.877665] ext4_filemap_fault+0x84/0xb0 [ 503.881905] __do_fault+0xfa/0x380 [ 503.885474] __handle_mm_fault+0x2497/0x4620 [ 503.889889] ? vm_insert_page+0x7c0/0x7c0 [ 503.894046] ? lock_downgrade+0x740/0x740 [ 503.898203] ? mark_held_locks+0xa6/0xf0 [ 503.902297] handle_mm_fault+0x455/0x9c0 [ 503.906369] __do_page_fault+0x549/0xad0 [ 503.910437] ? spurious_fault+0x640/0x640 [ 503.914590] ? do_page_fault+0x60/0x500 [ 503.918563] ? page_fault+0x2f/0x50 [ 503.922181] page_fault+0x45/0x50 [ 503.925628] RIP: 0000:0x947a7c [ 503.928812] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 503.938631] Mem-Info: [ 503.953328] active_anon:12111 inactive_anon:25014 isolated_anon:0 [ 503.953328] active_file:16 inactive_file:14 isolated_file:0 [ 503.953328] unevictable:0 dirty:0 writeback:0 unstable:0 [ 503.953328] slab_reclaimable:12786 slab_unreclaimable:116745 [ 503.953328] mapped:52654 shmem:25364 pagetables:822 bounce:0 [ 503.953328] free:14213 free_pcp:38 free_cma:0 [ 503.995228] Node 0 active_anon:46576kB inactive_anon:36012kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175800kB dirty:0kB writeback:0kB shmem:36988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 504.033643] Bluetooth: hci2 command 0x0419 tx timeout [ 504.033922] Node 1 active_anon:1868kB inactive_anon:64044kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 504.068698] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.097614] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 504.102678] Node 0 DMA32 free:18768kB min:36200kB low:45248kB high:54296kB active_anon:44472kB inactive_anon:36012kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2784kB bounce:0kB free_pcp:132kB local_pcp:40kB free_cma:0kB [ 504.135101] lowmem_reserve[]: 0 0 0 0 0 [ 504.139198] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.167190] lowmem_reserve[]: 0 0 0 0 0 [ 504.171207] Node 1 Normal free:27784kB min:53696kB low:67120kB high:80544kB active_anon:1784kB inactive_anon:64044kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:380kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 504.202370] lowmem_reserve[]: 0 0 0 0 0 [ 504.206378] Node 0 DMA: 8*4kB (UME) 7*8kB (UM) 13*16kB (UM) 17*32kB (UME) 8*64kB (UME) 5*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10952kB [ 504.224544] Node 0 DMA32: 544*4kB (UME) 365*8kB (UME) 107*16kB (UME) 32*32kB (UME) 25*64kB (UME) 21*128kB (UME) 10*256kB (UM) 6*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 18776kB [ 504.243035] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.253852] Node 1 Normal: 280*4kB (UM) 227*8kB (UME) 139*16kB (UME) 49*32kB (UME) 49*64kB (UM) 25*128kB (UM) 6*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 27912kB [ 504.273315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.282317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.293196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.302131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.313018] 25394 total pagecache pages [ 504.317060] 0 pages in swap cache [ 504.320513] Swap cache stats: add 0, delete 0, find 0/0 [ 504.325874] Free swap = 0kB [ 504.331276] Total swap = 0kB [ 504.334316] 2097051 pages RAM [ 504.337455] 0 pages HighMem/MovableOnly [ 504.341442] 363849 pages reserved [ 504.344885] 0 pages cma reserved [ 504.350659] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 504.361010] Killed process 6514 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 504.390401] oom_reaper: reaped process 6514 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 504.414171] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 504.435733] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 504.440607] CPU: 1 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 504.448060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.457415] Call Trace: [ 504.460012] dump_stack+0x1b2/0x281 [ 504.463650] dump_header+0x178/0x82f [ 504.467367] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 504.472473] ? ___ratelimit+0x2cd/0x530 [ 504.476454] oom_kill_process.cold+0x10/0xa40 [ 504.481016] out_of_memory+0xe3e/0x1190 [ 504.484994] ? oom_killer_disable+0x1c0/0x1c0 [ 504.489502] ? mutex_trylock+0x152/0x1a0 [ 504.493565] __alloc_pages_nodemask+0x23e1/0x2720 [ 504.498414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 504.503282] alloc_pages_current+0x155/0x260 [ 504.507691] filemap_fault+0x11a1/0x1ad0 [ 504.511757] ext4_filemap_fault+0x84/0xb0 [ 504.515895] __do_fault+0xfa/0x380 [ 504.519445] __handle_mm_fault+0x2497/0x4620 [ 504.523972] ? vm_insert_page+0x7c0/0x7c0 [ 504.528123] ? mark_held_locks+0xa6/0xf0 [ 504.532173] handle_mm_fault+0x455/0x9c0 [ 504.536229] __do_page_fault+0x549/0xad0 [ 504.540310] ? spurious_fault+0x640/0x640 [ 504.544461] ? do_page_fault+0x60/0x500 [ 504.548428] ? page_fault+0x2f/0x50 [ 504.552059] page_fault+0x45/0x50 [ 504.555511] RIP: 0070:0x200 [ 504.558433] RSP: 39a400:000000c00038fde0 EFLAGS: 00000071 [ 504.567357] Mem-Info: [ 504.575342] active_anon:12070 inactive_anon:25014 isolated_anon:0 [ 504.575342] active_file:15 inactive_file:15 isolated_file:0 [ 504.575342] unevictable:0 dirty:0 writeback:0 unstable:0 [ 504.575342] slab_reclaimable:12778 slab_unreclaimable:116592 [ 504.575342] mapped:43954 shmem:25364 pagetables:791 bounce:0 [ 504.575342] free:14408 free_pcp:113 free_cma:0 [ 504.617361] Node 0 active_anon:46496kB inactive_anon:36012kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141000kB dirty:0kB writeback:0kB shmem:36988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 504.654199] Node 1 active_anon:1784kB inactive_anon:64044kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 504.696277] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.740227] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 504.746337] Node 0 DMA32 free:30568kB min:36200kB low:45248kB high:54296kB active_anon:44424kB inactive_anon:36012kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2636kB bounce:0kB free_pcp:916kB local_pcp:676kB free_cma:0kB [ 504.780970] lowmem_reserve[]: 0 0 0 0 0 [ 504.789663] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.816949] lowmem_reserve[]: 0 0 0 0 0 [ 504.821304] Node 1 Normal free:194872kB min:53696kB low:67120kB high:80544kB active_anon:1784kB inactive_anon:64044kB active_file:24kB inactive_file:3524kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:380kB bounce:0kB free_pcp:864kB local_pcp:244kB free_cma:0kB [ 504.852256] lowmem_reserve[]: 0 0 0 0 0 [ 504.870370] Node 0 DMA: 8*4kB (UME) 7*8kB (UM) 13*16kB (UM) 17*32kB (UME) 8*64kB (UME) 5*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10952kB [ 504.899094] Node 0 DMA32: 5637*4kB (UE) 1959*8kB (UME) 148*16kB (UME) 34*32kB (UME) 36*64kB (UME) 21*128kB (UME) 10*256kB (UM) 6*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53324kB [ 504.915694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.926952] Node 1 Normal: 4*4kB (UM) 86*8kB (UME) 18*16kB (UE) 15*32kB (UE) 54*64kB (UM) 29*128kB (UM) 8*256kB (UME) 6*512kB (UE) 6*1024kB (UE) 121*2048kB (UM) 2*4096kB (U) = 275904kB [ 504.944058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.954372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.963987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.973534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.982890] 27318 total pagecache pages [ 504.987637] 0 pages in swap cache [ 504.991584] Swap cache stats: add 0, delete 0, find 0/0 [ 504.999929] Free swap = 0kB [ 505.003827] Total swap = 0kB [ 505.006979] 2097051 pages RAM [ 505.010082] 0 pages HighMem/MovableOnly [ 505.014045] 363849 pages reserved [ 505.017582] 0 pages cma reserved [ 505.020965] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 505.031763] Killed process 6755 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 505.052417] oom_reaper: reaped process 6755 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 505.066908] Bluetooth: hci3 command 0x040f tx timeout [ 505.419225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.427892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.440883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.451519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.471658] device bridge_slave_1 left promiscuous mode [ 505.483285] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.494792] device bridge_slave_0 left promiscuous mode [ 505.505275] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.529553] device veth1_macvtap left promiscuous mode [ 505.535138] device veth0_macvtap left promiscuous mode [ 505.541834] device veth1_vlan left promiscuous mode [ 505.547604] device veth0_vlan left promiscuous mode [ 505.704584] device hsr_slave_1 left promiscuous mode [ 505.714919] device hsr_slave_0 left promiscuous mode [ 505.743209] team0 (unregistering): Port device team_slave_1 removed [ 505.753940] team0 (unregistering): Port device team_slave_0 removed [ 505.770171] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 505.789171] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 505.835101] bond0 (unregistering): Released all slaves [ 507.146720] Bluetooth: hci3 command 0x0419 tx timeout 00:49:49 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:49 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000280)=0x2884) 00:49:49 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:49 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:49:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:49:49 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000980)) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x8}) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:49:49 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:49:49 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 508.939679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.946427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.958620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.965660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.978390] device bridge_slave_1 left promiscuous mode [ 508.984263] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.995628] device bridge_slave_0 left promiscuous mode [ 509.001606] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.015582] device veth1_macvtap left promiscuous mode [ 509.021353] device veth0_macvtap left promiscuous mode [ 509.030371] device veth1_vlan left promiscuous mode [ 509.035716] device veth0_vlan left promiscuous mode [ 509.180651] device hsr_slave_1 left promiscuous mode [ 509.192584] device hsr_slave_0 left promiscuous mode [ 509.215041] team0 (unregistering): Port device team_slave_1 removed [ 509.233435] team0 (unregistering): Port device team_slave_0 removed [ 509.245151] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 509.261130] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 509.305942] bond0 (unregistering): Released all slaves [ 511.018428] IPVS: ftp: loaded support on port[0] = 21 [ 511.138328] IPVS: ftp: loaded support on port[0] = 21 [ 511.339455] chnl_net:caif_netlink_parms(): no params data found [ 511.525491] chnl_net:caif_netlink_parms(): no params data found [ 511.625871] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.633000] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.646093] device bridge_slave_0 entered promiscuous mode [ 511.655045] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.667075] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.674930] device bridge_slave_1 entered promiscuous mode [ 511.725518] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.732714] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.741692] device bridge_slave_0 entered promiscuous mode [ 511.751759] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 511.761112] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.768775] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.776374] device bridge_slave_1 entered promiscuous mode [ 511.785445] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.833329] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 511.842602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 511.852741] team0: Port device team_slave_0 added [ 511.860152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.869695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 511.878244] team0: Port device team_slave_1 added [ 511.921391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 511.930026] team0: Port device team_slave_0 added [ 511.936027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.944392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.970597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.982397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 511.991027] team0: Port device team_slave_1 added [ 511.997293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.003559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.032105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.062260] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 512.070940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 512.080040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.086336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.112866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.133924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.140440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.166821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.177967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 512.195594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 512.225789] device hsr_slave_0 entered promiscuous mode [ 512.233007] device hsr_slave_1 entered promiscuous mode [ 512.256185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 512.280364] device hsr_slave_0 entered promiscuous mode [ 512.287191] device hsr_slave_1 entered promiscuous mode [ 512.293286] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 512.315021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 512.328144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 512.596446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 512.604144] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 512.699705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.709977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.725398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 512.734088] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 512.749623] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 512.761355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.769053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.778906] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 512.786407] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 512.794644] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.801754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.809853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.821306] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 512.827792] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.836315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 512.846905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.854875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.864237] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.870701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.881896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 512.892594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 512.900911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.909386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.918208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.925931] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.932381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.941611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.950324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.958885] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.965264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.978924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 512.992931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 513.000753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.013205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.022188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.035425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.044429] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.050867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.065957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 513.077175] Bluetooth: hci2 command 0x0409 tx timeout [ 513.082000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 513.090797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.100056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.111426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 513.123173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 513.135532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 513.144853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 513.156782] Bluetooth: hci3 command 0x0409 tx timeout [ 513.159043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.177470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 513.191834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 513.200357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.212162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 513.221718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 513.233746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 513.243983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 513.258802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 513.269168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 513.283770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.291786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.305134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.313994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 513.327179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 513.337166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 513.345625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.361293] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 513.368297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.380955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.390054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.404697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 513.415400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.423507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.434107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 513.444356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.457187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.465526] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 513.474265] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 513.484951] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 513.495456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.504298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.516841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.530174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.553119] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 513.571077] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 513.584309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.594952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.617377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.718715] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 513.735832] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 513.743818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.763374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.845852] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 513.863275] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 513.874102] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 513.885389] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 513.902114] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 513.912853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 513.921974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.936718] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 513.947725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.961442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.970921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.987489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.004027] device veth0_vlan entered promiscuous mode [ 514.015757] device veth1_vlan entered promiscuous mode [ 514.023657] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 514.034977] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 514.050528] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 514.061463] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 514.071431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 514.080324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 514.089251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 514.098105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.108705] device veth0_macvtap entered promiscuous mode [ 514.115193] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 514.129319] device veth1_macvtap entered promiscuous mode [ 514.135801] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 514.147753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 514.159329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 514.169743] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 514.179126] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 514.186076] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 514.198406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.208859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.218686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.228797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.238174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.248513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.257872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.268224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.278862] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 514.285904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.297169] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 514.305144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 514.313629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 514.321762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.330789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.339491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 514.348904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.359107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.369943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.379879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.390364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.399834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.409984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.419551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.430666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.441364] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 514.448757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.457440] device veth0_vlan entered promiscuous mode [ 514.466650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.473831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.481924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 514.490291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.510590] device veth1_vlan entered promiscuous mode [ 514.534395] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 514.544949] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 514.555404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 514.564586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.575458] device veth0_macvtap entered promiscuous mode [ 514.590157] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 514.605476] device veth1_macvtap entered promiscuous mode [ 514.612842] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 514.628487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 514.650097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 514.665135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.675389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.690767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.705706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.716011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.730085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.739752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.754128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.763729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.778367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.791573] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 514.800727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.816189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 514.825351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 514.833240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.851112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.866290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.880646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.890603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.904344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.915047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.929519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.939625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.952960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.963423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.987337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.004949] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 515.023212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.033240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.058616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.154179] Bluetooth: hci2 command 0x041b tx timeout [ 515.237113] Bluetooth: hci3 command 0x041b tx timeout [ 515.453475] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 515.467345] in:imklog cpuset=/ mems_allowed=0-1 [ 515.472050] CPU: 0 PID: 7053 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 515.479433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.488803] Call Trace: [ 515.491399] dump_stack+0x1b2/0x281 [ 515.495036] dump_header+0x178/0x82f [ 515.498762] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 515.503870] ? ___ratelimit+0x2cd/0x530 [ 515.507847] oom_kill_process.cold+0x10/0xa40 [ 515.512341] out_of_memory+0xe3e/0x1190 [ 515.516324] ? oom_killer_disable+0x1c0/0x1c0 [ 515.520827] ? mutex_trylock+0x152/0x1a0 [ 515.524869] __alloc_pages_nodemask+0x23e1/0x2720 [ 515.529700] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 515.534534] alloc_pages_current+0x155/0x260 [ 515.538928] filemap_fault+0x11a1/0x1ad0 [ 515.542977] ext4_filemap_fault+0x84/0xb0 [ 515.547108] __do_fault+0xfa/0x380 [ 515.550628] __handle_mm_fault+0x2497/0x4620 [ 515.555017] ? vm_insert_page+0x7c0/0x7c0 [ 515.559148] ? lock_downgrade+0x740/0x740 [ 515.563295] ? mark_held_locks+0xa6/0xf0 [ 515.567337] handle_mm_fault+0x455/0x9c0 [ 515.571381] __do_page_fault+0x549/0xad0 [ 515.575422] ? spurious_fault+0x640/0x640 [ 515.579558] ? do_page_fault+0x60/0x500 [ 515.583526] ? page_fault+0x2f/0x50 [ 515.587139] page_fault+0x45/0x50 [ 515.590574] RIP: 0000:0x7f09b2eceda3 [ 515.594725] RSP: a4002080:00007f09a40021c0 EFLAGS: 00000038 [ 515.600902] Mem-Info: [ 515.609113] active_anon:12262 inactive_anon:25014 isolated_anon:0 [ 515.609113] active_file:45 inactive_file:12 isolated_file:0 [ 515.609113] unevictable:0 dirty:0 writeback:0 unstable:0 [ 515.609113] slab_reclaimable:12812 slab_unreclaimable:113840 [ 515.609113] mapped:52735 shmem:25364 pagetables:807 bounce:0 [ 515.609113] free:25174 free_pcp:70 free_cma:0 [ 515.644901] Node 0 active_anon:46452kB inactive_anon:36000kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176100kB dirty:0kB writeback:0kB shmem:36972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 515.672583] Node 1 active_anon:2596kB inactive_anon:64056kB active_file:96kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:0kB writeback:0kB shmem:64484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 515.700311] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2068kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.729004] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 515.734061] Node 0 DMA32 free:36144kB min:36200kB low:45248kB high:54296kB active_anon:44384kB inactive_anon:36000kB active_file:108kB inactive_file:128kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2792kB bounce:0kB free_pcp:268kB local_pcp:104kB free_cma:0kB [ 515.825901] lowmem_reserve[]: 0 0 0 0 0 [ 515.829972] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.879853] lowmem_reserve[]: 0 0 0 0 0 [ 515.883891] Node 1 Normal free:53492kB min:53696kB low:67120kB high:80544kB active_anon:2596kB inactive_anon:64056kB active_file:96kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.961713] lowmem_reserve[]: 0 0 0 0 0 [ 515.965752] Node 0 DMA: 13*4kB (UME) 6*8kB (UM) 9*16kB (UM) 18*32kB (UME) 8*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11060kB [ 516.009183] Node 0 DMA32: 556*4kB (UME) 391*8kB (ME) 169*16kB (ME) 70*32kB (ME) 51*64kB (UME) 28*128kB (UME) 24*256kB (M) 7*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 36088kB [ 516.090883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 516.140653] Node 1 Normal: 326*4kB (ME) 250*8kB (ME) 164*16kB (ME) 59*32kB (UME) 35*64kB (UM) 13*128kB (ME) 4*256kB (UM) 2*512kB (ME) 1*1024kB (E) 1*2048kB (M) 9*4096kB (U) = 53704kB [ 516.210149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.251456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.281982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.314254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.332761] 25398 total pagecache pages [ 516.353528] 0 pages in swap cache [ 516.357074] Swap cache stats: add 0, delete 0, find 0/0 [ 516.362434] Free swap = 0kB [ 516.365441] Total swap = 0kB [ 516.404926] 2097051 pages RAM [ 516.416109] 0 pages HighMem/MovableOnly [ 516.433746] 363849 pages reserved [ 516.448661] 0 pages cma reserved [ 516.452056] Out of memory (oom_kill_allocating_task): Kill process 7053 (in:imklog) score 0 or sacrifice child [ 516.471741] Killed process 7051 (rsyslogd) total-vm:254332kB, anon-rss:744kB, file-rss:0kB, shmem-rss:0kB [ 516.486654] oom_reaper: reaped process 7051 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 516.768864] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 516.873275] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 516.901683] CPU: 1 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 516.909162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.918524] Call Trace: [ 516.921121] dump_stack+0x1b2/0x281 [ 516.924758] dump_header+0x178/0x82f [ 516.928492] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 516.933602] ? ___ratelimit+0x2cd/0x530 [ 516.937586] oom_kill_process.cold+0x10/0xa40 [ 516.942095] out_of_memory+0xe3e/0x1190 [ 516.946089] ? oom_killer_disable+0x1c0/0x1c0 [ 516.950598] ? mutex_trylock+0x152/0x1a0 [ 516.954672] __alloc_pages_nodemask+0x23e1/0x2720 [ 516.959607] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 516.964636] alloc_pages_current+0x155/0x260 [ 516.969064] filemap_fault+0x11a1/0x1ad0 [ 516.973142] ext4_filemap_fault+0x84/0xb0 [ 516.977298] __do_fault+0xfa/0x380 [ 516.980843] __handle_mm_fault+0x2497/0x4620 [ 516.985264] ? vm_insert_page+0x7c0/0x7c0 [ 516.989509] ? lock_downgrade+0x740/0x740 [ 516.993664] ? mark_held_locks+0xa6/0xf0 [ 516.997729] handle_mm_fault+0x455/0x9c0 [ 517.001798] __do_page_fault+0x549/0xad0 [ 517.005868] ? spurious_fault+0x640/0x640 [ 517.010027] ? do_page_fault+0x60/0x500 [ 517.014004] ? page_fault+0x2f/0x50 [ 517.017629] page_fault+0x45/0x50 [ 517.021078] RIP: 0000:0x947a7c [ 517.024261] RSP: 109a70c:000000c00003dfa0 EFLAGS: 0043b6a0 [ 517.066757] Bluetooth: hci0 command 0x0406 tx timeout [ 517.126997] Mem-Info: [ 517.129604] active_anon:12050 inactive_anon:25014 isolated_anon:0 [ 517.129604] active_file:30 inactive_file:3 isolated_file:3 [ 517.129604] unevictable:0 dirty:0 writeback:0 unstable:0 [ 517.129604] slab_reclaimable:12780 slab_unreclaimable:113592 [ 517.129604] mapped:52722 shmem:25364 pagetables:779 bounce:0 [ 517.129604] free:25113 free_pcp:280 free_cma:0 [ 517.162995] Node 0 active_anon:46496kB inactive_anon:36000kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176064kB dirty:0kB writeback:0kB shmem:36972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.190694] Node 1 active_anon:1752kB inactive_anon:64056kB active_file:100kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34864kB dirty:0kB writeback:0kB shmem:64484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 517.219304] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2068kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.252083] Bluetooth: hci2 command 0x040f tx timeout [ 517.296603] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 517.301692] Node 0 DMA32 free:35948kB min:36200kB low:45248kB high:54296kB active_anon:44428kB inactive_anon:36000kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.341531] Bluetooth: hci3 command 0x040f tx timeout [ 517.385045] lowmem_reserve[]: 0 0 0 0 0 [ 517.389249] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.502589] lowmem_reserve[]: 0 0 0 0 0 [ 517.519757] Node 1 Normal free:53500kB min:53696kB low:67120kB high:80544kB active_anon:1752kB inactive_anon:64056kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.591631] lowmem_reserve[]: 0 0 0 0 0 [ 517.595662] Node 0 DMA: 13*4kB (UME) 6*8kB (UM) 9*16kB (UM) 18*32kB (UME) 8*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11060kB [ 517.627985] Node 0 DMA32: 567*4kB (UME) 400*8kB (UME) 170*16kB (UME) 71*32kB (UME) 50*64kB (ME) 28*128kB (UME) 25*256kB (UM) 6*512kB (M) 9*1024kB (UM) 0*2048kB 0*4096kB = 35932kB [ 517.674165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.719310] Node 1 Normal: 311*4kB (ME) 227*8kB (ME) 152*16kB (ME) 53*32kB (UME) 44*64kB (UM) 17*128kB (UME) 6*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UM) 8*4096kB (U) = 53652kB [ 517.791344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.842384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 517.887274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.896159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 517.944924] 25383 total pagecache pages [ 517.977146] 0 pages in swap cache [ 517.980637] Swap cache stats: add 0, delete 0, find 0/0 [ 517.986001] Free swap = 0kB [ 518.036084] Total swap = 0kB [ 518.052797] 2097051 pages RAM [ 518.055936] 0 pages HighMem/MovableOnly [ 518.090751] 363849 pages reserved [ 518.094249] 0 pages cma reserved [ 518.123957] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 518.141519] Killed process 7093 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 518.182156] oom_reaper: reaped process 7093 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 518.281407] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 518.332378] systemd cpuset=/ mems_allowed=0-1 [ 518.344323] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 518.351272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.360637] Call Trace: [ 518.363238] dump_stack+0x1b2/0x281 [ 518.366869] dump_header+0x178/0x82f [ 518.370585] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 518.375691] ? ___ratelimit+0x2cd/0x530 [ 518.379670] oom_kill_process.cold+0x10/0xa40 [ 518.384172] ? lock_downgrade+0x740/0x740 [ 518.388333] out_of_memory+0x2dc/0x1190 [ 518.392323] ? oom_killer_disable+0x1c0/0x1c0 [ 518.396826] ? mutex_trylock+0x152/0x1a0 [ 518.400892] __alloc_pages_nodemask+0x23e1/0x2720 [ 518.405748] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 518.410608] alloc_pages_current+0x155/0x260 [ 518.415020] filemap_fault+0x11a1/0x1ad0 [ 518.419091] ext4_filemap_fault+0x84/0xb0 [ 518.423241] __do_fault+0xfa/0x380 [ 518.426782] __handle_mm_fault+0x2497/0x4620 [ 518.431191] ? vm_insert_page+0x7c0/0x7c0 [ 518.435340] ? lock_downgrade+0x740/0x740 [ 518.439498] ? mark_held_locks+0xa6/0xf0 [ 518.443579] handle_mm_fault+0x455/0x9c0 [ 518.447627] __do_page_fault+0x549/0xad0 [ 518.451670] ? spurious_fault+0x640/0x640 [ 518.455803] ? do_page_fault+0x60/0x500 [ 518.459771] ? page_fault+0x2f/0x50 [ 518.463387] page_fault+0x45/0x50 [ 518.466830] RIP: 383dcca4: (null) [ 518.471047] RSP: 389c89a0:00007ffeb480acc0 EFLAGS: 5641389ca540 [ 518.498742] Mem-Info: [ 518.518680] active_anon:12041 inactive_anon:25014 isolated_anon:0 [ 518.518680] active_file:13 inactive_file:0 isolated_file:0 [ 518.518680] unevictable:0 dirty:0 writeback:0 unstable:0 [ 518.518680] slab_reclaimable:12779 slab_unreclaimable:113606 [ 518.518680] mapped:44017 shmem:25364 pagetables:740 bounce:0 [ 518.518680] free:25202 free_pcp:46 free_cma:0 [ 518.623549] Node 0 active_anon:46424kB inactive_anon:36000kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141252kB dirty:0kB writeback:0kB shmem:36972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 518.791557] Node 1 active_anon:1740kB inactive_anon:64056kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 518.863160] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2068kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.012570] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 519.019427] Node 0 DMA32 free:37436kB min:36200kB low:45248kB high:54296kB active_anon:44360kB inactive_anon:36000kB active_file:0kB inactive_file:508kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2640kB bounce:0kB free_pcp:232kB local_pcp:48kB free_cma:0kB [ 519.050784] lowmem_reserve[]: 0 0 0 0 0 [ 519.063924] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.095115] lowmem_reserve[]: 0 0 0 0 0 [ 519.099876] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:1740kB inactive_anon:64056kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.132544] lowmem_reserve[]: 0 0 0 0 0 [ 519.172028] Node 0 DMA: 13*4kB (UME) 6*8kB (UM) 9*16kB (UM) 18*32kB (UME) 8*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11060kB [ 519.306642] Bluetooth: hci2 command 0x0419 tx timeout [ 519.341045] Node 0 DMA32: 560*4kB (UME) 399*8kB (ME) 162*16kB (ME) 67*32kB (UME) 52*64kB (ME) 30*128kB (UME) 24*256kB (UM) 7*512kB (M) 9*1024kB (UM) 0*2048kB 0*4096kB = 36280kB [ 519.386615] Bluetooth: hci3 command 0x0419 tx timeout [ 519.453492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 519.473266] Node 1 Normal: 309*4kB (UME) 227*8kB (UME) 150*16kB (ME) 53*32kB (UME) 43*64kB (UM) 18*128kB (UME) 6*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UM) 8*4096kB (U) = 53676kB [ 519.615918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.681909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 519.734023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.806254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 519.872049] 25427 total pagecache pages [ 519.876117] 0 pages in swap cache [ 519.928644] Swap cache stats: add 0, delete 0, find 0/0 [ 519.934079] Free swap = 0kB [ 519.987272] Total swap = 0kB [ 519.990361] 2097051 pages RAM [ 519.993476] 0 pages HighMem/MovableOnly [ 520.015474] 363849 pages reserved [ 520.068075] 0 pages cma reserved [ 520.071503] Out of memory: Kill process 7068 (syz-executor.0) score 1005 or sacrifice child [ 520.152209] Killed process 7074 (syz-executor.0) total-vm:93384kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 520.263857] oom_reaper: reaped process 7074 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 520.325004] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 520.356233] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 520.381387] CPU: 0 PID: 2879 Comm: kworker/u4:4 Not tainted 4.14.232-syzkaller #0 [ 520.389062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.398441] Workqueue: events_unbound call_usermodehelper_exec_work [ 520.404858] Call Trace: [ 520.407469] dump_stack+0x1b2/0x281 [ 520.411121] dump_header+0x178/0x82f [ 520.414859] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 520.419984] ? ___ratelimit+0x2cd/0x530 [ 520.423984] oom_kill_process.cold+0x10/0xa40 [ 520.428503] ? lock_downgrade+0x740/0x740 [ 520.432677] out_of_memory+0x2dc/0x1190 [ 520.436665] ? oom_killer_disable+0x1c0/0x1c0 [ 520.441156] ? mutex_trylock+0x152/0x1a0 [ 520.445217] __alloc_pages_nodemask+0x23e1/0x2720 [ 520.450064] ? trace_hardirqs_on+0x10/0x10 [ 520.454296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 520.459138] ? fs_reclaim_release+0xd0/0x110 [ 520.463573] ? kmem_cache_alloc_node+0x38b/0x410 [ 520.468409] copy_process.part.0+0x265/0x71c0 [ 520.472913] ? __lock_acquire+0x5fc/0x3f20 [ 520.477148] ? debug_object_activate+0x292/0x490 [ 520.481922] ? trace_hardirqs_on+0x10/0x10 [ 520.486268] ? static_obj+0x50/0x50 [ 520.489900] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 520.495355] ? __cleanup_sighand+0x40/0x40 [ 520.499598] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 520.505077] _do_fork+0x184/0xc80 [ 520.508529] ? fork_idle+0x270/0x270 [ 520.512245] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 520.517348] ? process_one_work+0x6c4/0x14a0 [ 520.521770] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 520.527239] kernel_thread+0x2f/0x40 [ 520.530961] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 520.536240] ? call_usermodehelper+0x80/0x80 [ 520.540668] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 520.546137] process_one_work+0x793/0x14a0 [ 520.550378] ? work_busy+0x320/0x320 [ 520.554086] ? worker_thread+0x158/0xff0 [ 520.558159] ? _raw_spin_unlock_irq+0x24/0x80 [ 520.562650] worker_thread+0x5cc/0xff0 [ 520.566550] ? rescuer_thread+0xc80/0xc80 [ 520.570702] kthread+0x30d/0x420 [ 520.574070] ? kthread_create_on_node+0xd0/0xd0 [ 520.578760] ret_from_fork+0x24/0x30 [ 520.593010] Mem-Info: [ 520.595475] active_anon:11521 inactive_anon:25014 isolated_anon:0 [ 520.595475] active_file:17 inactive_file:6 isolated_file:0 [ 520.595475] unevictable:0 dirty:0 writeback:0 unstable:0 [ 520.595475] slab_reclaimable:12753 slab_unreclaimable:113207 [ 520.595475] mapped:44026 shmem:25364 pagetables:740 bounce:0 [ 520.595475] free:13848 free_pcp:60 free_cma:0 [ 520.610964] syz-executor.0: [ 520.632135] Node 0 active_anon:44352kB inactive_anon:36000kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141288kB dirty:0kB writeback:0kB shmem:36972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 520.724385] Node 1 active_anon:1732kB inactive_anon:64056kB active_file:0kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 520.745594] vmalloc: allocation failure, allocated 1673064448 of 4294778880 bytes [ 520.752573] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.833881] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 520.882505] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 520.919226] CPU: 1 PID: 7074 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 520.927065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.936427] Call Trace: [ 520.939046] dump_stack+0x1b2/0x281 [ 520.942695] warn_alloc.cold+0x96/0x1cc [ 520.946689] ? zone_watermark_ok_safe+0x220/0x220 [ 520.951564] __vmalloc_area_node+0x48a/0x680 [ 520.955998] ? __vmalloc_node_range+0x150/0x150 [ 520.960680] ? __get_vm_area_node+0x27d/0x340 [ 520.965197] __vmalloc_node_range+0xbe/0x150 [ 520.969629] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 520.975009] vmalloc_user+0x47/0xa0 [ 520.978682] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 520.983025] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 520.988407] vb2_vmalloc_alloc+0xa6/0x2d0 [ 520.992574] __vb2_queue_alloc+0x47a/0xd90 [ 520.996837] vb2_core_create_bufs+0x279/0x5a0 [ 521.001353] ? __vb2_queue_free+0x7a0/0x7a0 [ 521.005698] ? trace_hardirqs_on+0x10/0x10 [ 521.009955] ? __lock_acquire+0x5fc/0x3f20 [ 521.014206] vb2_create_bufs+0x2e1/0x5b0 [ 521.018289] ? futex_wait_queue_me+0x3bb/0x590 [ 521.021451] lowmem_reserve[]: 0 [ 521.022880] ? vb2_thread_start+0x310/0x310 [ 521.022893] ? trace_hardirqs_on+0x10/0x10 [ 521.026177] 2717 [ 521.030517] vb2_ioctl_create_bufs+0x1f7/0x330 [ 521.030532] v4l_create_bufs+0xa4/0x150 [ 521.030542] __video_do_ioctl+0x65b/0x6a0 [ 521.030555] ? video_ioctl2+0x30/0x30 [ 521.030566] ? __might_fault+0x177/0x1b0 [ 521.030575] ? video_ioctl2+0x30/0x30 [ 521.030583] video_usercopy+0xfd/0xe70 [ 521.030601] ? v4l_g_ctrl+0x390/0x390 [ 521.068851] ? lock_acquire+0x170/0x3f0 [ 521.072056] 2718 2718 [ 521.072839] ? lock_downgrade+0x740/0x740 [ 521.072850] ? trace_hardirqs_on+0x10/0x10 [ 521.075367] 2718 [ 521.079521] ? futex_exit_release+0x220/0x220 [ 521.079533] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 521.079543] ? debug_check_no_obj_freed+0x2c0/0x680 [ 521.079555] v4l2_ioctl+0x1bb/0x2f0 [ 521.079564] ? v4l2_open+0x2f0/0x2f0 [ 521.079573] do_vfs_ioctl+0x75a/0xff0 [ 521.079584] ? ioctl_preallocate+0x1a0/0x1a0 [ 521.079594] ? lock_downgrade+0x740/0x740 [ 521.079606] ? __fget+0x225/0x360 [ 521.085885] ? do_vfs_ioctl+0xff0/0xff0 [ 521.102679] Node 0 [ 521.104104] ? security_file_ioctl+0x83/0xb0 [ 521.107913] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:44224kB inactive_anon:36000kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2636kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 521.111605] SyS_ioctl+0x7f/0xb0 [ 521.115994] lowmem_reserve[]: [ 521.120148] ? do_vfs_ioctl+0xff0/0xff0 [ 521.120163] do_syscall_64+0x1d5/0x640 [ 521.120177] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 521.120185] RIP: 0033:0x4665f9 [ 521.120189] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.120198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 521.120203] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 521.120207] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 521.120212] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 521.120216] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 521.272546] 0 0 0 0 0 [ 521.275098] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.300749] lowmem_reserve[]: 0 0 0 0 0 [ 521.304753] Node 1 Normal free:26972kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:64056kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.330315] Mem-Info: [ 521.333591] lowmem_reserve[]: 0 [ 521.335920] active_anon:11497 inactive_anon:25014 isolated_anon:0 [ 521.335920] active_file:20 inactive_file:14 isolated_file:0 [ 521.335920] unevictable:0 dirty:0 writeback:0 unstable:0 [ 521.335920] slab_reclaimable:12749 slab_unreclaimable:113198 [ 521.335920] mapped:44016 shmem:25364 pagetables:739 bounce:0 [ 521.335920] free:13986 free_pcp:0 free_cma:0 [ 521.335942] Node 0 active_anon:44260kB inactive_anon:36000kB active_file:48kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141248kB dirty:0kB writeback:0kB shmem:36972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 521.339392] 0 [ 521.395404] Node 1 active_anon:1728kB inactive_anon:64056kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 521.657783] 0 0 0 [ 521.660024] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.676101] Node 0 DMA: 5*4kB (UM) 6*8kB (UME) 10*16kB (UME) 8*32kB (UM) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 11108kB [ 521.773006] Node 0 DMA32: 650*4kB (UME) 537*8kB (UME) 253*16kB (UE) 174*32kB (UE) 178*64kB (UME) 42*128kB (UME) 13*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37632kB [ 521.792375] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 521.793477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.821411] Node 1 Normal: 308*4kB (UME) 224*8kB (ME) 151*16kB (UME) 53*32kB (ME) 42*64kB (M) 18*128kB (UME) 6*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 26976kB [ 521.821738] Node 0 [ 521.839355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.850682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.859578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.871030] DMA32 free:37928kB min:36200kB low:45248kB high:54296kB active_anon:44224kB inactive_anon:36000kB active_file:2064kB inactive_file:1452kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2636kB bounce:0kB free_pcp:508kB local_pcp:316kB free_cma:0kB [ 521.878965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.984640] lowmem_reserve[]: 0 0 0 0 0 [ 521.989102] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.010028] 25508 total pagecache pages [ 522.021326] lowmem_reserve[]: 0 0 0 0 0 [ 522.031316] Node 1 Normal free:27428kB min:53696kB low:67120kB high:80544kB active_anon:1432kB inactive_anon:64056kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:276kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 522.047163] 0 pages in swap cache [ 522.072497] Swap cache stats: add 0, delete 0, find 0/0 [ 522.073557] lowmem_reserve[]: 0 0 0 0 0 [ 522.092616] Free swap = 0kB [ 522.095661] Total swap = 0kB [ 522.108363] 2097051 pages RAM [ 522.140858] 0 pages HighMem/MovableOnly [ 522.141296] Node 0 DMA: 5*4kB (UM) 3*8kB (UME) 8*16kB (UME) 6*32kB (UM) 6*64kB (ME) 5*128kB (UME) 4*256kB (UME) 3*512kB [ 522.147028] 363849 pages reserved [ 522.154006] (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 11116kB [ 522.172150] 0 pages cma reserved [ 522.175734] Node 0 DMA32: 617*4kB (UME) 738*8kB (UME) 331*16kB (UME) 188*32kB (UME) 157*64kB (UE) 29*128kB (UME) 13*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37796kB [ 522.177142] Out of memory: Kill process 7085 (syz-executor.3) score 1004 or sacrifice child [ 522.198008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 522.221043] Node 1 Normal: 313*4kB (UME) 221*8kB (UME) 154*16kB (UME) 54*32kB (UME) 44*64kB (M) 18*128kB (UME) 5*256kB (UM) 3*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 27436kB [ 522.232224] Killed process 7086 (syz-executor.3) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 522.246669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.274368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 522.294001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.295411] oom_reaper: reaped process 7086 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 522.306048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 522.341735] 25759 total pagecache pages [ 522.348323] 0 pages in swap cache [ 522.352806] Swap cache stats: add 0, delete 0, find 0/0 [ 522.362139] Free swap = 0kB [ 522.365179] Total swap = 0kB [ 522.369056] 2097051 pages RAM [ 522.372417] 0 pages HighMem/MovableOnly [ 522.387807] 363849 pages reserved [ 522.391377] 0 pages cma reserved [ 522.599307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.617264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.644722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.659619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.693159] device bridge_slave_1 left promiscuous mode [ 522.703424] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.722562] device bridge_slave_0 left promiscuous mode [ 522.732901] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.743220] device veth1_macvtap left promiscuous mode [ 522.754191] device veth0_macvtap left promiscuous mode [ 522.760802] device veth1_vlan left promiscuous mode [ 522.766435] device veth0_vlan left promiscuous mode [ 522.973022] device hsr_slave_1 left promiscuous mode [ 522.983329] device hsr_slave_0 left promiscuous mode [ 523.021634] team0 (unregistering): Port device team_slave_1 removed [ 523.041963] team0 (unregistering): Port device team_slave_0 removed [ 523.062240] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 523.094979] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 523.202008] bond0 (unregistering): Released all slaves 00:50:05 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:05 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:05 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:05 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000280)=0x2884) [ 526.696276] IPVS: ftp: loaded support on port[0] = 21 [ 526.915857] chnl_net:caif_netlink_parms(): no params data found [ 527.027512] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.034407] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.047554] device bridge_slave_0 entered promiscuous mode [ 527.054977] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.068058] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.075690] device bridge_slave_1 entered promiscuous mode [ 527.115707] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 527.125570] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 527.166212] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 527.179265] team0: Port device team_slave_0 added [ 527.185164] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 527.198305] team0: Port device team_slave_1 added [ 527.230999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.241617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.272803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.285857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.297519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.328221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.343362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 527.353087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 527.393549] device hsr_slave_0 entered promiscuous mode [ 527.404190] device hsr_slave_1 entered promiscuous mode [ 527.412116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 527.424521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 527.574012] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.580456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.587150] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.593505] bridge0: port 1(bridge_slave_0) entered forwarding state 00:50:08 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000980)) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x8}) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:50:08 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 527.653218] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 527.660188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.670897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 527.685604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 527.695035] bridge0: port 1(bridge_slave_0) entered disabled state 00:50:08 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000280)=0x2884) [ 527.740212] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.778892] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 527.796614] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.811924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 527.821102] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.827522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.869134] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 527.876241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.884835] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.891231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.901095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 527.908194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 527.918725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 527.925534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 527.935487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 527.944030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 527.952958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 527.960138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 527.968569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 527.979206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 527.987713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 527.995189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.004425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 528.013017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.023607] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 528.030544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 528.040362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 528.048569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.061603] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 528.070378] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 528.077974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.084669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.095598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.152286] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 528.161970] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 528.169734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.178175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.205128] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 528.212602] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 528.219424] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 528.229207] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 528.235778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.243938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.253872] device veth0_vlan entered promiscuous mode [ 528.260076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.268065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.279843] device veth1_vlan entered promiscuous mode [ 528.285750] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 528.297530] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 528.309684] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 528.318953] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 528.325798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.333814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.341221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.348951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.358338] device veth0_macvtap entered promiscuous mode [ 528.364588] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 528.376834] device veth1_macvtap entered promiscuous mode [ 528.382842] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 528.392135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 528.401980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 528.410630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 528.421145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.432046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 528.441866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.451075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 528.461097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.470317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 528.480289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.489771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 528.499595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.509964] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 528.517309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.524256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.532147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.539522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.547628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.557441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 528.557447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.557453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 528.557456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.557463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 528.557466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.557472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 528.557476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.557482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 528.557485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.558491] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 528.659820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.667081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.674973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.756942] Bluetooth: hci3 command 0x0409 tx timeout 00:50:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:50:09 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:09 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:09 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:09 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) 00:50:09 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:09 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:09 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:09 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:50:09 executing program 0: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:09 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:50:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) [ 530.826681] Bluetooth: hci3 command 0x041b tx timeout [ 532.906812] Bluetooth: hci3 command 0x040f tx timeout [ 533.320979] oom_reaper: reaped process 7868 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 533.341079] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 533.353778] in:imklog cpuset=/ mems_allowed=0-1 [ 533.358542] CPU: 1 PID: 7575 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 533.365910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.375272] Call Trace: [ 533.377871] dump_stack+0x1b2/0x281 [ 533.381508] dump_header+0x178/0x82f [ 533.385227] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 533.390342] ? ___ratelimit+0x2cd/0x530 [ 533.394321] oom_kill_process.cold+0x10/0xa40 [ 533.398634] syz-executor.3: vmalloc: allocation failure, allocated 1659461632 of 4294778880 bytes [ 533.398855] out_of_memory+0xe3e/0x1190 [ 533.398866] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 533.407890] ? oom_killer_disable+0x1c0/0x1c0 [ 533.407901] ? mutex_trylock+0x152/0x1a0 [ 533.407912] __alloc_pages_nodemask+0x23e1/0x2720 [ 533.407932] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 533.411997] (null) [ 533.417881] alloc_pages_current+0x155/0x260 [ 533.417898] filemap_fault+0x11a1/0x1ad0 [ 533.417917] ext4_filemap_fault+0x84/0xb0 [ 533.422402] syz-executor.3 cpuset= [ 533.426466] __do_fault+0xfa/0x380 [ 533.426476] __handle_mm_fault+0x2497/0x4620 [ 533.426486] ? vm_insert_page+0x7c0/0x7c0 [ 533.426495] ? lock_downgrade+0x740/0x740 [ 533.426508] ? mark_held_locks+0xa6/0xf0 [ 533.431335] / [ 533.436204] handle_mm_fault+0x455/0x9c0 [ 533.438622] mems_allowed=0-1 [ 533.442984] __do_page_fault+0x549/0xad0 [ 533.487856] ? spurious_fault+0x640/0x640 [ 533.492038] ? do_page_fault+0x60/0x500 [ 533.496015] ? page_fault+0x2f/0x50 [ 533.499647] page_fault+0x45/0x50 [ 533.503108] RIP: 1fa0:0x1f9f [ 533.506231] RSP: 0000:0000564aa0a289d0 EFLAGS: 7fd0d5896da0 [ 533.506263] CPU: 0 PID: 7868 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 533.511856] Mem-Info: [ 533.512004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.519882] active_anon:11758 inactive_anon:25014 isolated_anon:0 [ 533.519882] active_file:21 inactive_file:0 isolated_file:0 [ 533.519882] unevictable:0 dirty:34 writeback:0 unstable:0 [ 533.519882] slab_reclaimable:12636 slab_unreclaimable:113467 [ 533.519882] mapped:52770 shmem:25364 pagetables:821 bounce:0 [ 533.519882] free:13708 free_pcp:84 free_cma:0 [ 533.522199] Call Trace: [ 533.533860] Node 0 active_anon:44876kB inactive_anon:36020kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176340kB dirty:52kB writeback:0kB shmem:36996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 533.564735] dump_stack+0x1b2/0x281 [ 533.564750] warn_alloc.cold+0x96/0x1cc [ 533.564762] ? zone_watermark_ok_safe+0x220/0x220 [ 533.564770] ? retint_kernel+0x2d/0x2d [ 533.564790] __vmalloc_area_node+0x48a/0x680 [ 533.564804] ? __vmalloc_node_range+0x150/0x150 [ 533.564811] ? __get_vm_area_node+0x27d/0x340 [ 533.564822] __vmalloc_node_range+0xbe/0x150 [ 533.564837] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 533.564844] vmalloc_user+0x47/0xa0 [ 533.564855] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 533.564864] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 533.564873] vb2_vmalloc_alloc+0xa6/0x2d0 [ 533.564884] __vb2_queue_alloc+0x47a/0xd90 [ 533.564904] vb2_core_create_bufs+0x279/0x5a0 [ 533.564914] ? __vb2_queue_free+0x7a0/0x7a0 [ 533.564928] ? trace_hardirqs_on+0x10/0x10 [ 533.564936] ? __lock_acquire+0x5fc/0x3f20 [ 533.564947] vb2_create_bufs+0x2e1/0x5b0 [ 533.564960] ? futex_wait_queue_me+0x3bb/0x590 [ 533.564969] ? vb2_thread_start+0x310/0x310 [ 533.564978] ? trace_hardirqs_on+0x10/0x10 [ 533.564989] ? cache_alloc_refill+0x1da/0x350 [ 533.565002] vb2_ioctl_create_bufs+0x1f7/0x330 [ 533.565015] v4l_create_bufs+0xa4/0x150 [ 533.565028] __video_do_ioctl+0x65b/0x6a0 [ 533.565043] ? video_ioctl2+0x30/0x30 [ 533.565054] ? __might_fault+0x177/0x1b0 [ 533.565064] ? video_ioctl2+0x30/0x30 [ 533.565074] video_usercopy+0xfd/0xe70 [ 533.565088] ? v4l_g_ctrl+0x390/0x390 [ 533.565096] ? lock_acquire+0x170/0x3f0 [ 533.565105] ? lock_downgrade+0x740/0x740 [ 533.565116] ? trace_hardirqs_on+0x10/0x10 [ 533.565125] ? futex_exit_release+0x220/0x220 [ 533.565135] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 533.565145] ? debug_check_no_obj_freed+0x2c0/0x680 [ 533.565156] v4l2_ioctl+0x1bb/0x2f0 [ 533.565164] ? v4l2_open+0x2f0/0x2f0 [ 533.565174] do_vfs_ioctl+0x75a/0xff0 [ 533.565186] ? ioctl_preallocate+0x1a0/0x1a0 [ 533.570148] Node 1 active_anon:2156kB inactive_anon:64036kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34740kB dirty:84kB writeback:0kB shmem:64460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 533.595562] ? lock_downgrade+0x740/0x740 [ 533.595580] ? __fget+0x225/0x360 [ 533.595590] ? do_vfs_ioctl+0xff0/0xff0 [ 533.595600] ? security_file_ioctl+0x83/0xb0 [ 533.595610] SyS_ioctl+0x7f/0xb0 [ 533.595619] ? do_vfs_ioctl+0xff0/0xff0 [ 533.595629] do_syscall_64+0x1d5/0x640 [ 533.595643] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 533.595652] RIP: 0033:0x4665f9 [ 533.595661] RSP: 002b:00007f06b7616188 EFLAGS: 00000246 [ 533.601568] Node 0 [ 533.603262] ORIG_RAX: 0000000000000010 [ 533.608181] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.611979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 533.616375] lowmem_reserve[]: [ 533.621036] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 533.621042] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 533.621047] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 533.621051] R13: 00007ffd10d9ec1f R14: 00007f06b7616300 R15: 0000000000022000 [ 533.632841] Mem-Info: [ 533.638075] 0 [ 533.645502] active_anon:11758 inactive_anon:25014 isolated_anon:0 [ 533.645502] active_file:21 inactive_file:0 isolated_file:0 [ 533.645502] unevictable:0 dirty:34 writeback:0 unstable:0 [ 533.645502] slab_reclaimable:12636 slab_unreclaimable:113467 [ 533.645502] mapped:52770 shmem:25364 pagetables:821 bounce:0 [ 533.645502] free:13708 free_pcp:84 free_cma:0 [ 533.649141] 2717 [ 533.655772] Node 0 active_anon:44876kB inactive_anon:36020kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176340kB dirty:52kB writeback:0kB shmem:36996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 533.659684] 2718 [ 533.667191] Node 1 active_anon:2156kB inactive_anon:64036kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34740kB dirty:84kB writeback:0kB shmem:64460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 533.670688] 2718 [ 533.674806] Node 0 [ 533.681132] 2718 [ 533.690131] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.700178] lowmem_reserve[]: [ 533.702767] Node 0 [ 533.705238] 0 2717 [ 533.711003] DMA32 free:17588kB min:36200kB low:45248kB high:54296kB active_anon:44756kB inactive_anon:36020kB active_file:60kB inactive_file:16kB unevictable:0kB writepending:252kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 533.718814] 2718 [ 533.721633] lowmem_reserve[]: [ 533.725512] 2718 2718 [ 533.731567] 0 [ 533.741873] 0 0 0 0 [ 533.741887] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.741904] lowmem_reserve[]: 0 0 0 0 0 [ 533.741921] Node 1 Normal free:26288kB min:53696kB low:67120kB high:80544kB active_anon:2156kB inactive_anon:64036kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:184kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:396kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 533.741944] lowmem_reserve[]: [ 533.748823] Node 0 [ 533.753813] 0 [ 533.765223] DMA32 free:17588kB min:36200kB low:45248kB high:54296kB active_anon:44756kB inactive_anon:36020kB active_file:60kB inactive_file:16kB unevictable:0kB writepending:252kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 533.769887] 0 [ 533.772158] lowmem_reserve[]: [ 533.801613] 0 [ 533.812587] 0 [ 533.815975] 0 [ 533.819414] 0 [ 533.825687] 0 [ 533.835417] 0 [ 533.841254] 0 [ 533.845676] Node 0 [ 533.855644] 0 [ 533.875909] DMA: [ 533.893680] 7*4kB [ 533.907519] Node 0 [ 533.915705] (UME) [ 533.915810] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.917634] 6*8kB (ME) 6*16kB (ME) 5*32kB (M) 6*64kB (ME) 4*128kB (ME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10956kB [ 533.917696] Node 0 DMA32: 693*4kB (UME) 426*8kB (ME) [ 533.961891] lowmem_reserve[]: [ 533.983709] 169*16kB [ 534.018702] 0 [ 534.045509] (UME) [ 534.055381] 0 [ 534.081293] 64*32kB [ 534.090706] 0 [ 534.090926] (UME) [ 534.125960] 0 [ 534.155851] 28*64kB [ 534.161024] 0 [ 534.191857] (ME) [ 534.200643] 14*128kB [ 534.202432] Node 1 [ 534.204216] (UME) [ 534.206449] Normal free:26288kB min:53696kB low:67120kB high:80544kB active_anon:2176kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:396kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 534.214541] 8*256kB [ 534.214685] lowmem_reserve[]: [ 534.216846] (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17588kB [ 534.216871] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 534.216922] Node 1 Normal: 336*4kB (UME) 232*8kB (UME) 175*16kB (UME) 74*32kB (ME) 68*64kB (M) 22*128kB (UME) 8*256kB (M) 5*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 26288kB [ 534.217003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.217009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 534.217015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.217021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 534.217025] 25395 total pagecache pages [ 534.217035] 0 pages in swap cache [ 534.217040] Swap cache stats: add 0, delete 0, find 0/0 [ 534.217044] Free swap = 0kB [ 534.217047] Total swap = 0kB [ 534.217053] 2097051 pages RAM [ 534.217057] 0 pages HighMem/MovableOnly [ 534.217060] 363849 pages reserved [ 534.217067] 0 pages cma reserved [ 534.246196] 0 [ 534.261689] Out of memory (oom_kill_allocating_task): Kill process 7575 (in:imklog) score 0 or sacrifice child [ 534.267792] 0 [ 534.268433] Killed process 7559 (rsyslogd) total-vm:254332kB, anon-rss:408kB, file-rss:0kB, shmem-rss:0kB [ 534.270033] 0 0 [ 534.273326] oom_reaper: reaped process 7559 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 534.274157] 0 [ 534.278635] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 534.286125] (null) [ 534.288570] Node 0 DMA: 7*4kB (UME) [ 534.296728] , order=0, oom_score_adj=0 [ 534.324940] 6*8kB [ 534.328802] in:imklog: [ 534.333365] (ME) [ 534.345122] systemd-journal cpuset= [ 534.365386] 6*16kB [ 534.372222] page allocation failure: order:0 [ 534.381582] (ME) [ 534.390805] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 534.395171] 5*32kB [ 534.399190] / mems_allowed=0-1 [ 534.399223] CPU: 1 PID: 6429 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 534.399228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.399231] Call Trace: [ 534.399251] dump_stack+0x1b2/0x281 [ 534.399263] dump_header+0x178/0x82f [ 534.406529] (M) [ 534.408209] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 534.411200] 6*64kB [ 534.414208] ? ___ratelimit+0x2cd/0x530 [ 534.417622] (ME) [ 534.421270] oom_kill_process.cold+0x10/0xa40 [ 534.424695] 4*128kB [ 534.428061] out_of_memory+0xe3e/0x1190 [ 534.428074] ? oom_killer_disable+0x1c0/0x1c0 [ 534.428084] ? mutex_trylock+0x152/0x1a0 [ 534.428095] __alloc_pages_nodemask+0x23e1/0x2720 [ 534.429874] (ME) [ 534.440020] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 534.440045] alloc_pages_current+0x155/0x260 [ 534.441836] 4*256kB [ 534.451538] filemap_fault+0x11a1/0x1ad0 [ 534.451557] ext4_filemap_fault+0x84/0xb0 [ 534.451571] __do_fault+0xfa/0x380 [ 534.453527] (UME) [ 534.462884] __handle_mm_fault+0x2497/0x4620 [ 534.462895] ? vm_insert_page+0x7c0/0x7c0 [ 534.462912] ? mark_held_locks+0xa6/0xf0 [ 534.462922] handle_mm_fault+0x455/0x9c0 [ 534.464709] 3*512kB [ 534.474855] __do_page_fault+0x549/0xad0 [ 534.474868] ? spurious_fault+0x640/0x640 [ 534.474878] ? do_page_fault+0x60/0x500 [ 534.477026] (UME) [ 534.480743] ? page_fault+0x2f/0x50 [ 534.484697] 1*1024kB [ 534.486830] page_fault+0x45/0x50 [ 534.486840] RIP: 0001:0xffffffffffffffff [ 534.486844] RSP: 7cdc31e0:00007ffc76344970 EFLAGS: 7ffc76344780 [ 534.491194] (null) [ 534.491496] (E) [ 534.495103] in:imklog cpuset= [ 534.505008] 3*2048kB [ 534.514874] / [ 534.516342] (ME) [ 534.524270] mems_allowed=0-1 [ 534.524285] CPU: 1 PID: 7575 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 534.524290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.524294] Call Trace: [ 534.524313] dump_stack+0x1b2/0x281 [ 534.524326] warn_alloc.cold+0x96/0x1cc [ 534.524337] ? zone_watermark_ok_safe+0x220/0x220 [ 534.524346] ? usleep_range+0x130/0x130 [ 534.524357] ? try_to_free_pages+0x23f/0x6e0 [ 534.537616] 0*4096kB [ 534.539890] ? _find_next_bit+0xdb/0x100 [ 534.543574] = 10956kB [ 534.545535] ? run_timer_softirq+0x5a0/0x5a0 [ 534.550652] Node 0 [ 534.552836] __alloc_pages_nodemask+0x2127/0x2720 [ 534.556797] DMA32: [ 534.558834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 534.563321] 693*4kB [ 534.565664] alloc_pages_current+0x155/0x260 [ 534.569635] (UME) [ 534.574086] filemap_fault+0x11a1/0x1ad0 [ 534.578143] 430*8kB [ 534.582959] ext4_filemap_fault+0x84/0xb0 [ 534.584993] (UME) [ 534.589825] __do_fault+0xfa/0x380 [ 534.589835] __handle_mm_fault+0x2497/0x4620 [ 534.589845] ? vm_insert_page+0x7c0/0x7c0 [ 534.589855] ? lock_downgrade+0x740/0x740 [ 534.589868] ? mark_held_locks+0xa6/0xf0 [ 534.594256] 169*16kB [ 534.596578] handle_mm_fault+0x455/0x9c0 [ 534.596592] __do_page_fault+0x549/0xad0 [ 534.596603] ? spurious_fault+0x640/0x640 [ 534.596613] ? do_page_fault+0x60/0x500 [ 534.600680] (UME) [ 534.604829] ? page_fault+0x2f/0x50 [ 534.608383] 64*32kB [ 534.610477] page_fault+0x45/0x50 [ 534.614864] (UME) [ 534.619020] RIP: 1fa0:0x1f9f [ 534.619025] RSP: 0000:0000564aa0a289d0 EFLAGS: 7fd0d5896da0 [ 534.623367] Mem-Info: [ 534.631832] 28*64kB [ 534.633570] active_anon:11570 inactive_anon:25014 isolated_anon:0 [ 534.633570] active_file:16 inactive_file:15 isolated_file:0 [ 534.633570] unevictable:0 dirty:0 writeback:0 unstable:0 [ 534.633570] slab_reclaimable:12633 slab_unreclaimable:113434 [ 534.633570] mapped:52777 shmem:25364 pagetables:821 bounce:0 [ 534.633570] free:13766 free_pcp:260 free_cma:0 [ 534.637790] (ME) [ 534.646053] Node 0 active_anon:44904kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:36996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 534.651409] 14*128kB [ 534.653451] Node 1 active_anon:1376kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 534.657535] (UME) 8*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 534.657565] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 534.667167] Node 0 [ 534.673272] 0*64kB [ 534.674972] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.677051] 0*128kB 0*256kB [ 534.681097] lowmem_reserve[]: [ 534.691334] Mem-Info: [ 534.701057] 0 [ 534.703116] active_anon:11570 inactive_anon:25014 isolated_anon:0 [ 534.703116] active_file:16 inactive_file:15 isolated_file:0 [ 534.703116] unevictable:0 dirty:0 writeback:0 unstable:0 [ 534.703116] slab_reclaimable:12633 slab_unreclaimable:113434 [ 534.703116] mapped:52777 shmem:25364 pagetables:821 bounce:0 [ 534.703116] free:13766 free_pcp:260 free_cma:0 [ 534.707127] 2717 2718 2718 2718 [ 534.707145] Node 0 DMA32 free:17620kB min:36200kB low:45248kB high:54296kB active_anon:44884kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 534.707164] lowmem_reserve[]: 0 0 0 0 0 [ 534.707182] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.707202] lowmem_reserve[]: [ 534.715928] 0*512kB [ 534.715987] 0 [ 534.720442] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 534.720457] Node 1 Normal: 339*4kB [ 534.727207] 0 [ 534.729428] Node 0 active_anon:44904kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:36996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 534.733804] 0 [ 534.736049] Node 1 active_anon:1376kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 534.743158] 0 [ 534.751950] Node 0 [ 534.756087] 0 [ 534.757489] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.763299] lowmem_reserve[]: [ 534.768339] Node 1 [ 534.773467] 0 [ 534.779773] (UME) [ 534.781758] 2717 [ 534.785888] 238*8kB [ 534.789965] 2718 2718 2718 [ 534.789977] Node 0 DMA32 free:17620kB min:36200kB low:45248kB high:54296kB active_anon:44884kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 534.789995] lowmem_reserve[]: 0 0 [ 534.794649] Normal free:26488kB min:53696kB low:67120kB high:80544kB active_anon:1376kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:396kB bounce:0kB free_pcp:800kB local_pcp:680kB free_cma:0kB [ 534.800353] 0 [ 534.802748] lowmem_reserve[]: [ 534.804711] 0 0 [ 534.810835] (UME) [ 534.810852] Node 0 [ 534.814491] 175*16kB [ 534.820680] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.823850] 0 [ 534.825452] lowmem_reserve[]: [ 534.831224] (UME) [ 534.836017] 0 [ 534.869295] 0 0 0 0 [ 534.869313] Node 0 DMA: 7*4kB [ 534.878344] 0 [ 534.899131] (UME) 6*8kB (ME) 6*16kB (ME) 5*32kB (M) 6*64kB (ME) 4*128kB (ME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10956kB [ 534.899199] Node 0 DMA32: 693*4kB (UME) 430*8kB (UME) [ 534.910140] 0 [ 534.928723] 75*32kB (UME) 70*64kB (M) 22*128kB (UME) 8*256kB (M) 5*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 26508kB [ 534.928782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.928788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 534.928798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.940648] 0 [ 534.941590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 534.943742] 0 [ 534.945963] 25395 total pagecache pages [ 534.980183] 169*16kB [ 534.981976] Node 1 [ 535.015374] Bluetooth: hci3 command 0x0419 tx timeout [ 535.028068] Normal free:26488kB min:53696kB low:67120kB high:80544kB active_anon:1376kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:396kB bounce:0kB free_pcp:800kB local_pcp:120kB free_cma:0kB [ 535.047713] 0 pages in swap cache [ 535.047720] Swap cache stats: add 0, delete 0, find 0/0 [ 535.047725] Free swap = 0kB [ 535.047728] Total swap = 0kB [ 535.047736] 2097051 pages RAM [ 535.047739] 0 pages HighMem/MovableOnly [ 535.047742] 363849 pages reserved [ 535.047746] 0 pages cma reserved [ 535.122550] (UME) [ 535.126563] lowmem_reserve[]: [ 535.197832] 64*32kB [ 535.201301] 0 [ 535.292502] (UME) [ 535.301042] 0 [ 535.303213] 28*64kB [ 535.305347] 0 [ 535.332513] (ME) [ 535.334780] 0 [ 535.335203] 14*128kB [ 535.347833] 0 [ 535.370252] (UME) [ 535.406532] 8*256kB [ 535.434647] Node 0 [ 535.456513] (UM) [ 535.464295] DMA: [ 535.465411] 2*512kB [ 535.469963] 7*4kB [ 535.488722] (UM) [ 535.495308] (UME) [ 535.495870] 0*1024kB [ 535.498055] 6*8kB (ME) 6*16kB (ME) 5*32kB (M) 6*64kB (ME) 4*128kB (ME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10956kB [ 535.508707] 0*2048kB [ 535.524177] Node 0 DMA32: 693*4kB (UME) 430*8kB (UME) 169*16kB (UME) 64*32kB (UME) 28*64kB (ME) 14*128kB (UME) 8*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 535.528725] 0*4096kB [ 535.552228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 535.568806] = 17620kB [ 535.569495] Node 1 [ 535.571238] Node 0 [ 535.571245] Normal: [ 535.573458] Normal: 0*4kB [ 535.575698] 339*4kB (UME) 238*8kB (UME) 175*16kB (UME) 75*32kB (UME) 70*64kB (M) 22*128kB (UME) 8*256kB (M) 5*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 26508kB [ 535.588729] 0*8kB [ 535.605848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 535.608682] 0*16kB [ 535.623110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 535.628656] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 535.634178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 535.656508] Node 1 Normal: 339*4kB (UME) 238*8kB (UME) 175*16kB (UME) 75*32kB (UME) 70*64kB (M) 22*128kB (UME) 8*256kB (M) 5*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 26508kB [ 535.656822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 535.688194] 25395 total pagecache pages [ 535.692205] 0 pages in swap cache [ 535.695655] Swap cache stats: add 0, delete 0, find 0/0 [ 535.705627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 535.722371] Free swap = 0kB [ 535.725445] Total swap = 0kB [ 535.728522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 535.743682] 2097051 pages RAM [ 535.746841] 0 pages HighMem/MovableOnly [ 535.750813] 363849 pages reserved [ 535.754260] 0 pages cma reserved [ 535.764118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 535.773276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 535.788372] 25395 total pagecache pages [ 535.792370] 0 pages in swap cache [ 535.795817] Swap cache stats: add 0, delete 0, find 0/0 [ 535.805445] Free swap = 0kB [ 535.810521] Total swap = 0kB [ 535.813549] 2097051 pages RAM [ 535.820836] 0 pages HighMem/MovableOnly [ 535.824831] 363849 pages reserved [ 535.830888] 0 pages cma reserved [ 535.834269] Out of memory (oom_kill_allocating_task): Kill process 6429 (systemd-journal) score 0 or sacrifice child [ 535.849216] Killed process 6429 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:2208kB [ 535.864141] oom_reaper: reaped process 6429 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2208kB [ 535.898766] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 535.926517] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 535.931333] CPU: 1 PID: 8005 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 535.938790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.948156] Call Trace: [ 535.950761] dump_stack+0x1b2/0x281 [ 535.954404] dump_header+0x178/0x82f [ 535.958135] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 535.963253] ? ___ratelimit+0x2cd/0x530 [ 535.967241] oom_kill_process.cold+0x10/0xa40 [ 535.971764] out_of_memory+0xe3e/0x1190 [ 535.975758] ? oom_killer_disable+0x1c0/0x1c0 [ 535.980264] ? mutex_trylock+0x152/0x1a0 [ 535.984338] __alloc_pages_nodemask+0x23e1/0x2720 [ 535.989207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 535.994078] alloc_pages_current+0x155/0x260 [ 535.998500] filemap_fault+0x11a1/0x1ad0 [ 536.002581] ext4_filemap_fault+0x84/0xb0 [ 536.006742] __do_fault+0xfa/0x380 [ 536.010292] __handle_mm_fault+0x2497/0x4620 [ 536.014715] ? vm_insert_page+0x7c0/0x7c0 [ 536.018885] ? mark_held_locks+0xa6/0xf0 [ 536.022972] handle_mm_fault+0x455/0x9c0 [ 536.027060] __do_page_fault+0x549/0xad0 [ 536.031137] ? spurious_fault+0x640/0x640 [ 536.035294] ? do_page_fault+0x60/0x500 [ 536.039385] ? page_fault+0x2f/0x50 [ 536.043014] page_fault+0x45/0x50 [ 536.046467] RIP: 122d80:0x7c31ebdb0c [ 536.050177] RSP: 0346:000000c0008cbe40 EFLAGS: 00000003 [ 536.051580] Mem-Info: [ 536.059444] active_anon:11448 inactive_anon:25014 isolated_anon:0 [ 536.059444] active_file:17 inactive_file:14 isolated_file:0 [ 536.059444] unevictable:0 dirty:0 writeback:0 unstable:0 [ 536.059444] slab_reclaimable:12608 slab_unreclaimable:113255 [ 536.059444] mapped:52777 shmem:25364 pagetables:784 bounce:0 [ 536.059444] free:14033 free_pcp:369 free_cma:0 [ 536.064592] systemd-journal: [ 536.092883] Node 0 active_anon:44780kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:36996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 536.129240] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 536.157083] systemd-journal cpuset=/ mems_allowed=0-1 [ 536.162349] CPU: 0 PID: 6429 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 536.170233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.176700] Node 1 active_anon:1012kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 536.179596] Call Trace: [ 536.209177] dump_stack+0x1b2/0x281 [ 536.212813] warn_alloc.cold+0x96/0x1cc [ 536.213472] Node 0 [ 536.216791] ? zone_watermark_ok_safe+0x220/0x220 [ 536.216801] ? usleep_range+0x130/0x130 [ 536.216808] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 536.216818] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 536.216825] ? run_timer_softirq+0x5a0/0x5a0 [ 536.216839] __alloc_pages_nodemask+0x2127/0x2720 [ 536.216858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 536.219097] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.223939] alloc_pages_current+0x155/0x260 [ 536.233988] lowmem_reserve[]: [ 536.243905] filemap_fault+0x11a1/0x1ad0 [ 536.243924] ext4_filemap_fault+0x84/0xb0 [ 536.243934] __do_fault+0xfa/0x380 [ 536.243943] __handle_mm_fault+0x2497/0x4620 [ 536.243955] ? vm_insert_page+0x7c0/0x7c0 [ 536.273705] 0 [ 536.283550] ? mark_held_locks+0xa6/0xf0 [ 536.283563] handle_mm_fault+0x455/0x9c0 [ 536.283577] __do_page_fault+0x549/0xad0 [ 536.283588] ? spurious_fault+0x640/0x640 [ 536.283595] ? do_page_fault+0x60/0x500 [ 536.283603] ? page_fault+0x2f/0x50 [ 536.283609] page_fault+0x45/0x50 [ 536.283617] RIP: 0001:0xffffffffffffffff [ 536.283621] RSP: 7cdc31e0:00007ffc76344970 EFLAGS: 7ffc76344780 [ 536.292799] Mem-Info: [ 536.306569] 2717 [ 536.315650] active_anon:11448 inactive_anon:25014 isolated_anon:0 [ 536.315650] active_file:16 inactive_file:15 isolated_file:0 [ 536.315650] unevictable:0 dirty:0 writeback:0 unstable:0 [ 536.315650] slab_reclaimable:12607 slab_unreclaimable:113248 [ 536.315650] mapped:52777 shmem:25364 pagetables:791 bounce:0 [ 536.315650] free:14253 free_pcp:1 free_cma:0 [ 536.326546] 2718 [ 536.338162] Node 0 active_anon:44780kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:36996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 536.429295] 2718 2718 [ 536.431838] Node 0 DMA32 free:18264kB min:36200kB low:45248kB high:54296kB active_anon:44780kB inactive_anon:36020kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 536.468668] lowmem_reserve[]: 0 0 0 0 0 [ 536.472701] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.507585] lowmem_reserve[]: 0 0 0 0 0 [ 536.511600] Node 1 Normal free:27772kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.518767] Node 1 active_anon:1012kB inactive_anon:64036kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:64460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 536.548031] lowmem_reserve[]: [ 536.569210] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.598504] 0 0 0 0 0 [ 536.598526] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 0*32kB 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10976kB [ 536.603501] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 536.623242] Node 0 DMA32 free:18264kB min:36200kB low:45248kB high:54296kB active_anon:44780kB inactive_anon:36020kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 536.628377] Node 0 [ 536.658508] lowmem_reserve[]: 0 0 0 0 0 [ 536.664766] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.676521] DMA32: [ 536.691089] lowmem_reserve[]: 0 0 0 0 0 [ 536.699629] Node 1 Normal free:69584kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:64036kB active_file:8kB inactive_file:508kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:276kB bounce:0kB free_pcp:724kB local_pcp:100kB free_cma:0kB [ 536.716516] 751*4kB [ 536.735034] lowmem_reserve[]: [ 536.737932] (UME) [ 536.738167] 0 [ 536.741458] 443*8kB [ 536.743822] 0 [ 536.745113] (UME) [ 536.747837] 0 0 0 [ 536.754407] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 0*32kB 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10976kB [ 536.763713] 171*16kB [ 536.769828] Node 0 DMA32: 751*4kB (UME) 443*8kB (UME) 171*16kB (UME) 64*32kB (UME) 32*64kB (UME) 16*128kB (UME) 7*256kB (M) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 18756kB [ 536.786506] (UME) 64*32kB (UME) 32*64kB (UME) 16*128kB (UME) 7*256kB (M) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 18756kB [ 536.789163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 536.812473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 536.812609] Node 1 Normal: 7*4kB (UE) 4*8kB (UME) 130*16kB (UME) 80*32kB (UME) 57*64kB (UM) 27*128kB (UME) 13*256kB (UM) 13*512kB (UME) 7*1024kB (UE) 7*2048kB (UM) 25*4096kB (UM) = 145692kB [ 536.841030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.841217] Node 1 [ 536.850003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 536.850010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.850015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 536.850019] 26100 total pagecache pages [ 536.850028] 0 pages in swap cache [ 536.850033] Swap cache stats: add 0, delete 0, find 0/0 [ 536.850037] Free swap = 0kB [ 536.850040] Total swap = 0kB [ 536.850047] 2097051 pages RAM [ 536.850056] 0 pages HighMem/MovableOnly [ 536.850103] 363849 pages reserved [ 536.850106] 0 pages cma reserved [ 536.913827] Normal: 8*4kB (UE) 17*8kB (UE) 9*16kB (UE) 46*32kB (UME) 56*64kB (UM) 27*128kB (UME) 13*256kB (UM) 12*512kB (UME) 7*1024kB (UE) 8*2048kB (UM) 45*4096kB (UM) = 226168kB [ 536.930345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.940250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 536.949741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.960137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 536.969461] 27136 total pagecache pages [ 536.974074] 0 pages in swap cache [ 536.977593] Swap cache stats: add 0, delete 0, find 0/0 [ 536.983060] Free swap = 0kB [ 536.986075] Total swap = 0kB [ 536.989204] 2097051 pages RAM [ 536.995346] 0 pages HighMem/MovableOnly [ 536.999952] 363849 pages reserved [ 537.004284] 0 pages cma reserved [ 537.008266] Out of memory (oom_kill_allocating_task): Kill process 8005 (syz-fuzzer) score 0 or sacrifice child [ 537.018682] Killed process 7094 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 537.037702] oom_reaper: reaped process 7094 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 537.065133] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 537.078675] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 537.100969] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 537.113192] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 537.121159] systemd[1]: Stopped Journal Service. [ 537.140191] systemd[1]: Starting Journal Service... [ 537.159903] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 537.181671] systemd[1]: Stopped System Logging Service. [ 537.201836] systemd[1]: Starting System Logging Service... [ 537.447899] systemd-journald[7906]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 537.604306] systemd[1]: Started System Logging Service. [ 538.459064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.471047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.479337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.486050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.500601] device bridge_slave_1 left promiscuous mode [ 538.506157] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.521706] device bridge_slave_0 left promiscuous mode [ 538.527311] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.541944] device veth1_macvtap left promiscuous mode [ 538.547386] device veth0_macvtap left promiscuous mode [ 538.552703] device veth1_vlan left promiscuous mode [ 538.563446] device veth0_vlan left promiscuous mode [ 538.706786] device hsr_slave_1 left promiscuous mode [ 538.715112] device hsr_slave_0 left promiscuous mode [ 538.743469] team0 (unregistering): Port device team_slave_1 removed [ 538.754519] team0 (unregistering): Port device team_slave_0 removed [ 538.770831] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 538.787911] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 538.831599] bond0 (unregistering): Released all slaves 00:50:21 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:21 executing program 0: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0xec, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:50:21 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x1a8, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:50:21 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:21 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) 00:50:21 executing program 0: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:21 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24004044) 00:50:21 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:21 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:21 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x24004044) 00:50:21 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:21 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:21 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 543.178484] IPVS: ftp: loaded support on port[0] = 21 [ 543.280872] chnl_net:caif_netlink_parms(): no params data found [ 543.440999] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.448121] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.455087] device bridge_slave_0 entered promiscuous mode [ 543.462503] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.469144] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.476187] device bridge_slave_1 entered promiscuous mode [ 543.495083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 543.504225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 543.524743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 543.532052] team0: Port device team_slave_0 added [ 543.538968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 543.546173] team0: Port device team_slave_1 added [ 543.564587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.570956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.597316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.608812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.615056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.641247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.652286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 543.660459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 543.684461] device hsr_slave_0 entered promiscuous mode [ 543.690309] device hsr_slave_1 entered promiscuous mode [ 543.696347] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 543.704403] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 543.780558] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.787132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.793741] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.800185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.831573] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 543.837959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.846131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 543.855595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.864118] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.871512] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.882771] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 543.889023] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.898232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.905989] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.912460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.927046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.934712] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.941187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.953826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.962482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.977100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.984898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.992961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.002226] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 544.008523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.021226] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 544.029763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.037842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.049300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.103824] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 544.115017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.149496] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 544.157011] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 544.163645] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 544.172860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.181733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.189224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.200471] device veth0_vlan entered promiscuous mode [ 544.210321] device veth1_vlan entered promiscuous mode [ 544.216128] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 544.226061] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 544.237469] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 544.248946] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 544.256222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.264715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.273033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.283248] device veth0_macvtap entered promiscuous mode [ 544.292049] device veth1_macvtap entered promiscuous mode [ 544.301627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 544.310883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 544.320278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 544.330276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.339972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 544.350006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.359354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 544.369164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.378602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 544.388936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.398118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 544.407921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.418329] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 544.425251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.433417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 544.441529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.451535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 544.461747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.470999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 544.480827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.490085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 544.499882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.509080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 544.519155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.528389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 544.538187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.548573] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 544.555517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.563648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.571840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:50:25 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:50:25 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:25 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:25 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:25 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) 00:50:25 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:25 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:25 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:25 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x5) 00:50:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x24004044) 00:50:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x24004044) 00:50:25 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) [ 545.226920] Bluetooth: hci2 command 0x0409 tx timeout [ 547.306626] Bluetooth: hci2 command 0x041b tx timeout [ 549.332159] oom_reaper: reaped process 8245 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 549.353306] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 549.374059] systemd-journal cpuset=/ mems_allowed=0-1 [ 549.379382] CPU: 1 PID: 7906 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 549.387189] Bluetooth: hci2 command 0x040f tx timeout [ 549.387272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.401851] Call Trace: [ 549.404449] dump_stack+0x1b2/0x281 [ 549.408079] dump_header+0x178/0x82f [ 549.411839] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 549.416981] ? ___ratelimit+0x2cd/0x530 [ 549.420945] oom_kill_process.cold+0x10/0xa40 [ 549.425437] out_of_memory+0xe3e/0x1190 [ 549.426596] syz-executor.0: vmalloc: allocation failure, allocated 1634570240 of 4294778880 bytes [ 549.429436] ? oom_killer_disable+0x1c0/0x1c0 [ 549.429448] ? mutex_trylock+0x152/0x1a0 [ 549.438619] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 549.442972] __alloc_pages_nodemask+0x23e1/0x2720 [ 549.447147] (null) [ 549.453009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 549.457883] syz-executor.0 cpuset= [ 549.459986] alloc_pages_current+0x155/0x260 [ 549.464796] / [ 549.468338] filemap_fault+0x11a1/0x1ad0 [ 549.473175] mems_allowed=0-1 [ 549.474441] ext4_filemap_fault+0x84/0xb0 [ 549.485728] __do_fault+0xfa/0x380 [ 549.489275] __handle_mm_fault+0x2497/0x4620 [ 549.493695] ? vm_insert_page+0x7c0/0x7c0 [ 549.497856] ? mark_held_locks+0xa6/0xf0 [ 549.501924] handle_mm_fault+0x455/0x9c0 [ 549.505997] __do_page_fault+0x549/0xad0 [ 549.510061] ? spurious_fault+0x640/0x640 [ 549.514205] ? do_page_fault+0x60/0x500 [ 549.518174] ? page_fault+0x2f/0x50 [ 549.521798] page_fault+0x45/0x50 [ 549.525243] RIP: 0001:0xffffffffffffffff [ 549.529295] RSP: e35c21e0:00007ffc8ad6bdd0 EFLAGS: 7ffc8ad6bbe0 [ 549.529322] CPU: 0 PID: 8245 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 549.532121] Mem-Info: [ 549.535395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.543280] active_anon:12352 inactive_anon:27046 isolated_anon:0 [ 549.543280] active_file:14 inactive_file:11 isolated_file:0 [ 549.543280] unevictable:0 dirty:0 writeback:0 unstable:0 [ 549.543280] slab_reclaimable:12605 slab_unreclaimable:116371 [ 549.543280] mapped:52620 shmem:27412 pagetables:847 bounce:0 [ 549.543280] free:13839 free_pcp:398 free_cma:0 [ 549.545587] Call Trace: [ 549.554994] Node 0 active_anon:47164kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 549.588270] dump_stack+0x1b2/0x281 [ 549.588285] warn_alloc.cold+0x96/0x1cc [ 549.588297] ? zone_watermark_ok_safe+0x220/0x220 [ 549.588319] __vmalloc_area_node+0x48a/0x680 [ 549.590920] Node 1 active_anon:2244kB inactive_anon:72216kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36392kB dirty:0kB writeback:0kB shmem:72636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 549.618588] ? __vmalloc_node_range+0x150/0x150 [ 549.618597] ? __get_vm_area_node+0x27d/0x340 [ 549.618609] __vmalloc_node_range+0xbe/0x150 [ 549.618626] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 549.622237] Node 0 [ 549.626207] vmalloc_user+0x47/0xa0 [ 549.631101] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.635453] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 549.662532] lowmem_reserve[]: [ 549.667163] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 549.667174] vb2_vmalloc_alloc+0xa6/0x2d0 [ 549.667187] __vb2_queue_alloc+0x47a/0xd90 [ 549.671666] 0 [ 549.676081] vb2_core_create_bufs+0x279/0x5a0 [ 549.681447] 2717 [ 549.683642] ? __vb2_queue_free+0x7a0/0x7a0 [ 549.687256] 2718 [ 549.712999] ? trace_hardirqs_on+0x10/0x10 [ 549.713009] ? __lock_acquire+0x5fc/0x3f20 [ 549.713024] vb2_create_bufs+0x2e1/0x5b0 [ 549.713036] ? ___preempt_schedule+0x16/0x18 [ 549.717376] 2718 [ 549.720459] ? vb2_thread_start+0x310/0x310 [ 549.725795] 2718 [ 549.729965] ? trace_hardirqs_on+0x10/0x10 [ 549.729978] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 549.729992] vb2_ioctl_create_bufs+0x1f7/0x330 [ 549.730005] v4l_create_bufs+0xa4/0x150 [ 549.734224] Node 0 [ 549.736033] __video_do_ioctl+0x65b/0x6a0 [ 549.740560] DMA32 free:17576kB min:36200kB low:45248kB high:54296kB active_anon:45116kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2992kB bounce:0kB free_pcp:844kB local_pcp:628kB free_cma:0kB [ 549.742562] ? video_ioctl2+0x30/0x30 [ 549.746938] lowmem_reserve[]: [ 549.748983] ? __might_fault+0x177/0x1b0 [ 549.753196] 0 [ 549.757453] ? video_ioctl2+0x30/0x30 [ 549.757463] video_usercopy+0xfd/0xe70 [ 549.757477] ? v4l_g_ctrl+0x390/0x390 [ 549.757486] ? lock_acquire+0x170/0x3f0 [ 549.757499] ? lock_downgrade+0x740/0x740 [ 549.761553] 0 [ 549.765962] ? trace_hardirqs_on+0x10/0x10 [ 549.768041] 0 [ 549.772313] ? futex_exit_release+0x220/0x220 [ 549.774380] 0 [ 549.778610] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 549.778621] ? debug_check_no_obj_freed+0x2c0/0x680 [ 549.778632] v4l2_ioctl+0x1bb/0x2f0 [ 549.778641] ? v4l2_open+0x2f0/0x2f0 [ 549.778653] do_vfs_ioctl+0x75a/0xff0 [ 549.783750] 0 [ 549.788339] ? ioctl_preallocate+0x1a0/0x1a0 [ 549.788350] ? lock_downgrade+0x740/0x740 [ 549.788362] ? __fget+0x225/0x360 [ 549.788371] ? do_vfs_ioctl+0xff0/0xff0 [ 549.788385] ? security_file_ioctl+0x83/0xb0 [ 549.794596] SyS_ioctl+0x7f/0xb0 [ 549.798781] Node 0 [ 549.827012] ? do_vfs_ioctl+0xff0/0xff0 [ 549.827026] do_syscall_64+0x1d5/0x640 [ 549.827041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 549.827053] RIP: 0033:0x4665f9 [ 549.830853] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.833931] RSP: 002b:00007f0c9ba33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.838030] lowmem_reserve[]: [ 549.839775] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 549.843557] 0 [ 549.847435] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 549.847441] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 549.847445] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 549.847450] R13: 00007ffc56117ecf R14: 00007f0c9ba33300 R15: 0000000000022000 [ 549.864607] Mem-Info: [ 549.869207] 0 [ 549.880912] active_anon:12352 inactive_anon:27046 isolated_anon:0 [ 549.880912] active_file:14 inactive_file:11 isolated_file:0 [ 549.880912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 549.880912] slab_reclaimable:12605 slab_unreclaimable:116371 [ 549.880912] mapped:52620 shmem:27412 pagetables:847 bounce:0 [ 549.880912] free:13839 free_pcp:398 free_cma:0 [ 549.885324] 0 [ 549.892545] Node 0 active_anon:47164kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 549.895016] 0 [ 549.900741] Node 1 active_anon:2244kB inactive_anon:72216kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36392kB dirty:0kB writeback:0kB shmem:72636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 549.902961] 0 [ 549.907243] Node 0 [ 549.923182] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.924580] Node 1 [ 549.928620] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 549.928643] Node 0 DMA32 free:17576kB min:36200kB low:45248kB high:54296kB active_anon:45116kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2992kB bounce:0kB free_pcp:844kB local_pcp:216kB free_cma:0kB [ 549.928664] lowmem_reserve[]: 0 0 0 0 [ 549.938752] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:2244kB inactive_anon:72216kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:396kB bounce:0kB free_pcp:748kB local_pcp:4kB free_cma:0kB [ 549.945255] 0 [ 549.974245] lowmem_reserve[]: [ 549.986472] 0 [ 549.994016] Node 0 [ 550.006572] 0 [ 550.012170] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.015254] 0 [ 550.017725] lowmem_reserve[]: 0 0 0 0 0 [ 550.058485] 0 [ 550.087316] Node 1 [ 550.124855] 0 [ 550.148705] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:2244kB inactive_anon:72216kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:396kB bounce:0kB free_pcp:748kB local_pcp:744kB free_cma:0kB [ 550.180565] lowmem_reserve[]: [ 550.190234] Node 0 [ 550.215016] 0 [ 550.222770] DMA: [ 550.250467] 0 [ 550.258083] 1*4kB (E) [ 550.291008] 0 [ 550.299181] 3*8kB [ 550.299926] 0 [ 550.301693] (UE) [ 550.303825] 0 [ 550.305631] 26*16kB (UE) [ 550.313037] 17*32kB [ 550.314824] Node 0 [ 550.314826] (U) 10*64kB [ 550.317206] DMA: 1*4kB (E) 3*8kB (UE) 26*16kB (UE) 17*32kB (U) 10*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 550.322249] (UE) [ 550.341404] Node 0 [ 550.343190] 5*128kB [ 550.343500] DMA32: [ 550.345728] (UE) [ 550.348086] 736*4kB (ME) 529*8kB (UME) 198*16kB (UME) 60*32kB (UME) 33*64kB [ 550.350601] 2*256kB [ 550.352645] (UME) 15*128kB (ME) 8*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18344kB [ 550.367188] (UE) [ 550.374761] Node 0 [ 550.374781] 2*512kB [ 550.379091] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 550.384984] (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 550.393890] Node 1 Normal: 346*4kB (UME) 253*8kB (UME) 183*16kB (UME) 96*32kB (ME) 28*64kB (UM) 8*128kB (ME) 3*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 26816kB [ 550.404163] Node 0 DMA32: 736*4kB (ME) 529*8kB (UME) 198*16kB (UME) 60*32kB (UME) 33*64kB (UME) 15*128kB (ME) 8*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18344kB [ 550.424684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.441429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 550.452303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 550.460704] Node 1 Normal: 346*4kB (UME) 253*8kB (UME) 183*16kB (UME) 96*32kB (ME) 28*64kB (UM) 8*128kB (ME) 3*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) [ 550.465480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.465490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 550.483991] 2*4096kB [ 550.495326] 27437 total pagecache pages [ 550.501933] (U) = 26816kB [ 550.504204] 0 pages in swap cache [ 550.507009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.507016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 550.507022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.507027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 550.507031] 27437 total pagecache pages [ 550.507040] 0 pages in swap cache [ 550.516828] Swap cache stats: add 0, delete 0, find 0/0 [ 550.523362] Swap cache stats: add 0, delete 0, find 0/0 [ 550.532159] Free swap = 0kB [ 550.540696] Free swap = 0kB [ 550.551107] Total swap = 0kB [ 550.553031] Total swap = 0kB [ 550.558472] 2097051 pages RAM [ 550.558477] 0 pages HighMem/MovableOnly [ 550.558481] 363849 pages reserved [ 550.558484] 0 pages cma reserved [ 550.595306] 2097051 pages RAM [ 550.598483] 0 pages HighMem/MovableOnly [ 550.602457] 363849 pages reserved [ 550.605904] 0 pages cma reserved [ 550.615405] Out of memory (oom_kill_allocating_task): Kill process 7906 (systemd-journal) score 0 or sacrifice child [ 550.626202] Killed process 7906 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1544kB [ 550.643637] oom_reaper: reaped process 7906 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1544kB [ 550.658683] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 550.683163] in:imklog cpuset=/ mems_allowed=0-1 [ 550.698587] CPU: 1 PID: 7909 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 550.705983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.715341] Call Trace: [ 550.717949] dump_stack+0x1b2/0x281 [ 550.721589] dump_header+0x178/0x82f [ 550.725325] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 550.730439] ? ___ratelimit+0x2cd/0x530 [ 550.734426] oom_kill_process.cold+0x10/0xa40 [ 550.738943] out_of_memory+0xe3e/0x1190 [ 550.742934] ? oom_killer_disable+0x1c0/0x1c0 [ 550.747437] ? mutex_trylock+0x152/0x1a0 [ 550.751510] __alloc_pages_nodemask+0x23e1/0x2720 [ 550.756381] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 550.761253] alloc_pages_current+0x155/0x260 [ 550.765676] filemap_fault+0x11a1/0x1ad0 [ 550.769759] ext4_filemap_fault+0x84/0xb0 [ 550.773923] __do_fault+0xfa/0x380 [ 550.777478] __handle_mm_fault+0x2497/0x4620 [ 550.781903] ? vm_insert_page+0x7c0/0x7c0 [ 550.786063] ? lock_downgrade+0x740/0x740 [ 550.790227] ? mark_held_locks+0xa6/0xf0 [ 550.794325] handle_mm_fault+0x455/0x9c0 [ 550.798409] __do_page_fault+0x549/0xad0 [ 550.802486] ? spurious_fault+0x640/0x640 [ 550.806643] ? do_page_fault+0x60/0x500 [ 550.810636] ? page_fault+0x2f/0x50 [ 550.814272] page_fault+0x45/0x50 [ 550.817730] RIP: 1fa0:0x1f9f [ 550.820743] RSP: 0000:000055abacb049d0 EFLAGS: 7f8a06234da0 [ 550.831587] Mem-Info: [ 550.841897] active_anon:12252 inactive_anon:27046 isolated_anon:0 [ 550.841897] active_file:13 inactive_file:12 isolated_file:0 [ 550.841897] unevictable:0 dirty:0 writeback:0 unstable:0 [ 550.841897] slab_reclaimable:12605 slab_unreclaimable:116304 [ 550.841897] mapped:52245 shmem:27412 pagetables:847 bounce:0 [ 550.841897] free:14546 free_pcp:30 free_cma:0 [ 550.877410] Node 0 active_anon:47164kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 550.907898] Node 1 active_anon:1844kB inactive_anon:72216kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34892kB dirty:0kB writeback:0kB shmem:72636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 550.937337] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.965973] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 550.971097] Node 0 DMA32 free:19196kB min:36200kB low:45248kB high:54296kB active_anon:45116kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2992kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 551.001992] lowmem_reserve[]: 0 0 0 0 0 [ 551.006012] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.033715] lowmem_reserve[]: 0 0 0 0 0 [ 551.037785] Node 1 Normal free:28016kB min:53696kB low:67120kB high:80544kB active_anon:1784kB inactive_anon:72212kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:304kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 551.068852] lowmem_reserve[]: 0 0 0 0 0 [ 551.072879] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 26*16kB (UE) 17*32kB (U) 10*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 551.090544] Node 0 DMA32: 727*4kB (UME) 523*8kB (UME) 187*16kB (UME) 63*32kB (UME) 42*64kB (UME) 15*128kB (ME) 8*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19268kB [ 551.106181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 551.119186] Node 1 Normal: 331*4kB (UME) 232*8kB (ME) 181*16kB (UME) 95*32kB (UME) 34*64kB (UM) 15*128kB (UME) 4*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 28060kB [ 551.136088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.147310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 551.155915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.164813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 551.175599] 27437 total pagecache pages [ 551.179680] 0 pages in swap cache [ 551.183155] Swap cache stats: add 0, delete 0, find 0/0 [ 551.190879] Free swap = 0kB [ 551.193936] Total swap = 0kB [ 551.197002] 2097051 pages RAM [ 551.200112] 0 pages HighMem/MovableOnly [ 551.204087] 363849 pages reserved [ 551.209773] 0 pages cma reserved [ 551.213163] Out of memory (oom_kill_allocating_task): Kill process 7909 (in:imklog) score 0 or sacrifice child [ 551.223442] Killed process 7907 (rsyslogd) total-vm:254332kB, anon-rss:612kB, file-rss:0kB, shmem-rss:0kB [ 551.236928] oom_reaper: reaped process 7907 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 551.248941] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 551.262012] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 551.267107] CPU: 1 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.232-syzkaller #0 [ 551.274566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.283946] Workqueue: events_unbound call_usermodehelper_exec_work [ 551.290364] Call Trace: [ 551.292987] dump_stack+0x1b2/0x281 [ 551.296628] dump_header+0x178/0x82f [ 551.300373] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 551.305504] ? ___ratelimit+0x2cd/0x530 [ 551.309496] oom_kill_process.cold+0x10/0xa40 [ 551.314006] ? lock_downgrade+0x740/0x740 [ 551.318175] out_of_memory+0x2dc/0x1190 [ 551.322175] ? oom_killer_disable+0x1c0/0x1c0 [ 551.326690] ? mutex_trylock+0x152/0x1a0 [ 551.330767] __alloc_pages_nodemask+0x23e1/0x2720 [ 551.335635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 551.340490] ? fs_reclaim_release+0xd0/0x110 [ 551.344927] ? kmem_cache_alloc_node+0x38b/0x410 [ 551.349961] copy_process.part.0+0x265/0x71c0 [ 551.354470] ? __lock_acquire+0x5fc/0x3f20 [ 551.358719] ? debug_object_activate+0x292/0x490 [ 551.363505] ? trace_hardirqs_on+0x10/0x10 [ 551.367755] ? static_obj+0x50/0x50 [ 551.371400] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 551.376868] ? __cleanup_sighand+0x40/0x40 [ 551.381153] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 551.386618] _do_fork+0x184/0xc80 [ 551.390086] ? fork_idle+0x270/0x270 [ 551.393818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 551.398933] ? process_one_work+0x6c4/0x14a0 [ 551.403354] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 551.408815] kernel_thread+0x2f/0x40 [ 551.412539] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 551.417827] ? call_usermodehelper+0x80/0x80 [ 551.422242] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 551.427713] process_one_work+0x793/0x14a0 [ 551.431966] ? work_busy+0x320/0x320 [ 551.435691] ? worker_thread+0x158/0xff0 [ 551.439767] ? _raw_spin_unlock_irq+0x24/0x80 [ 551.444284] worker_thread+0x5cc/0xff0 [ 551.448192] ? rescuer_thread+0xc80/0xc80 [ 551.452351] kthread+0x30d/0x420 [ 551.455725] ? kthread_create_on_node+0xd0/0xd0 [ 551.460413] ret_from_fork+0x24/0x30 [ 551.464379] Mem-Info: [ 551.466570] Bluetooth: hci2 command 0x0419 tx timeout [ 551.466899] active_anon:12035 inactive_anon:27045 isolated_anon:0 [ 551.466899] active_file:15 inactive_file:10 isolated_file:0 [ 551.466899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 551.466899] slab_reclaimable:12592 slab_unreclaimable:116279 [ 551.466899] mapped:52225 shmem:27412 pagetables:824 bounce:0 [ 551.466899] free:14650 free_pcp:187 free_cma:0 [ 551.505366] Node 0 active_anon:47156kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 551.533136] Node 1 active_anon:984kB inactive_anon:72212kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:72636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 551.560211] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.588870] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 551.593928] Node 0 DMA32 free:19268kB min:36200kB low:45248kB high:54296kB active_anon:45108kB inactive_anon:35968kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2992kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 551.622737] lowmem_reserve[]: 0 0 0 0 0 [ 551.626806] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.652430] lowmem_reserve[]: 0 0 0 0 0 [ 551.656503] Node 1 Normal free:28360kB min:53696kB low:67120kB high:80544kB active_anon:984kB inactive_anon:72212kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:304kB bounce:0kB free_pcp:724kB local_pcp:724kB free_cma:0kB [ 551.685142] lowmem_reserve[]: 0 0 0 0 0 [ 551.689182] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 26*16kB (UE) 17*32kB (U) 10*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 551.704710] Node 0 DMA32: 727*4kB (UME) 523*8kB (UME) 187*16kB (UME) 63*32kB (UME) 42*64kB (UME) 15*128kB (ME) 8*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19268kB [ 551.720304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 551.731110] Node 1 Normal: 335*4kB (UME) 239*8kB (UME) 184*16kB (UME) 98*32kB (UME) 36*64kB (UM) 15*128kB (UME) 4*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (U) = 28404kB [ 551.749075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.757964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 551.766582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.775425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 551.784074] 27437 total pagecache pages [ 551.788098] 0 pages in swap cache [ 551.791556] Swap cache stats: add 0, delete 0, find 0/0 [ 551.796998] Free swap = 0kB [ 551.800025] Total swap = 0kB [ 551.803045] 2097051 pages RAM [ 551.806150] 0 pages HighMem/MovableOnly [ 551.810183] 363849 pages reserved [ 551.813636] 0 pages cma reserved [ 551.817045] Out of memory: Kill process 8246 (syz-executor.3) score 1005 or sacrifice child [ 551.825562] Killed process 8252 (syz-executor.3) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 551.859992] oom_reaper: reaped process 8252 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 552.110600] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 552.123263] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 552.144833] systemd[1]: rsyslog.service: Unit entered failed state. [ 552.151716] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 552.164815] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 552.181216] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 552.191500] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 552.203119] systemd[1]: Stopped Journal Service. [ 552.225452] systemd[1]: Starting Journal Service... [ 552.462315] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 552.633656] systemd-journald[8278]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 00:50:33 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x5) 00:50:33 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:33 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:33 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x5) 00:50:35 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:35 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x5) 00:50:35 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:35 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:35 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x0, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:36 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:36 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) 00:50:36 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x5) 00:50:36 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x0, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:36 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:36 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:36 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:36 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x5) 00:50:36 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x0, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:36 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:36 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) 00:50:36 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:36 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:36 executing program 1: syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:36 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)) 00:50:36 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x0, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:36 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:36 executing program 1: syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:36 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:36 executing program 1: syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:36 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 00:50:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) [ 560.324205] oom_reaper: reaped process 8343 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 560.338712] systemd-timesyn invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 560.356215] systemd-timesyn cpuset=/ mems_allowed=0-1 [ 560.362081] CPU: 0 PID: 6081 Comm: systemd-timesyn Not tainted 4.14.232-syzkaller #0 [ 560.369988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.379342] Call Trace: [ 560.381930] dump_stack+0x1b2/0x281 [ 560.385555] dump_header+0x178/0x82f [ 560.389263] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 560.394353] ? ___ratelimit+0x2cd/0x530 [ 560.398339] oom_kill_process.cold+0x10/0xa40 [ 560.402821] out_of_memory+0xe3e/0x1190 [ 560.406785] ? oom_killer_disable+0x1c0/0x1c0 [ 560.411260] ? mutex_trylock+0x152/0x1a0 [ 560.415376] __alloc_pages_nodemask+0x23e1/0x2720 [ 560.420242] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 560.425070] alloc_pages_current+0x155/0x260 [ 560.429510] filemap_fault+0x11a1/0x1ad0 [ 560.433559] ext4_filemap_fault+0x84/0xb0 [ 560.437688] __do_fault+0xfa/0x380 [ 560.441222] __handle_mm_fault+0x2497/0x4620 [ 560.445607] ? vm_insert_page+0x7c0/0x7c0 [ 560.449734] ? lock_downgrade+0x740/0x740 [ 560.453861] ? mark_held_locks+0xa6/0xf0 [ 560.457902] handle_mm_fault+0x455/0x9c0 [ 560.461944] __do_page_fault+0x549/0xad0 [ 560.465984] ? spurious_fault+0x640/0x640 [ 560.470110] ? do_page_fault+0x60/0x500 [ 560.474059] ? page_fault+0x2f/0x50 [ 560.477678] page_fault+0x45/0x50 [ 560.481122] RIP: 0001:0x1 [ 560.483853] RSP: 3490f8f0:00007ffd2fd01c70 EFLAGS: 7ffd2fd01b20 [ 560.486958] Mem-Info: [ 560.495426] active_anon:11822 inactive_anon:29078 isolated_anon:0 [ 560.495426] active_file:26 inactive_file:0 isolated_file:0 [ 560.495426] unevictable:0 dirty:0 writeback:0 unstable:0 [ 560.495426] slab_reclaimable:12799 slab_unreclaimable:119773 [ 560.495426] mapped:52582 shmem:29460 pagetables:795 bounce:0 [ 560.495426] free:13867 free_pcp:85 free_cma:0 [ 560.498869] syz-executor.4: [ 560.530963] Node 0 active_anon:45660kB inactive_anon:36072kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 560.540928] vmalloc: allocation failure, allocated 1615622144 of 4294778880 bytes [ 560.564029] Node 1 active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36240kB dirty:0kB writeback:0kB shmem:80724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 560.572060] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 560.601312] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:56kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.609166] (null) [ 560.640864] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 560.642611] syz-executor.4 cpuset= [ 560.645937] Node 0 [ 560.645940] / mems_allowed=0-1 [ 560.651641] DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:45604kB inactive_anon:35972kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2836kB bounce:0kB free_pcp:216kB local_pcp:96kB free_cma:0kB [ 560.651758] CPU: 1 PID: 8343 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 560.654925] lowmem_reserve[]: [ 560.683127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.683132] Call Trace: [ 560.683154] dump_stack+0x1b2/0x281 [ 560.683167] warn_alloc.cold+0x96/0x1cc [ 560.683178] ? zone_watermark_ok_safe+0x220/0x220 [ 560.683200] __vmalloc_area_node+0x48a/0x680 [ 560.683213] ? __vmalloc_node_range+0x150/0x150 [ 560.683221] ? __get_vm_area_node+0x27d/0x340 [ 560.683234] __vmalloc_node_range+0xbe/0x150 [ 560.683249] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 560.683256] vmalloc_user+0x47/0xa0 [ 560.683265] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 560.683274] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 560.683282] vb2_vmalloc_alloc+0xa6/0x2d0 [ 560.683294] __vb2_queue_alloc+0x47a/0xd90 [ 560.697208] 0 [ 560.703538] vb2_core_create_bufs+0x279/0x5a0 [ 560.706087] 0 [ 560.709702] ? __vb2_queue_free+0x7a0/0x7a0 [ 560.709715] ? trace_hardirqs_on+0x10/0x10 [ 560.709723] ? __lock_acquire+0x5fc/0x3f20 [ 560.709735] vb2_create_bufs+0x2e1/0x5b0 [ 560.709747] ? futex_wait_queue_me+0x3bb/0x590 [ 560.709756] ? vb2_thread_start+0x310/0x310 [ 560.709764] ? trace_hardirqs_on+0x10/0x10 [ 560.709779] vb2_ioctl_create_bufs+0x1f7/0x330 [ 560.709792] v4l_create_bufs+0xa4/0x150 [ 560.709803] __video_do_ioctl+0x65b/0x6a0 [ 560.709833] ? video_ioctl2+0x30/0x30 [ 560.718615] 0 [ 560.723013] ? __might_fault+0x177/0x1b0 [ 560.731126] 0 [ 560.732140] ? video_ioctl2+0x30/0x30 [ 560.738744] 0 [ 560.741881] video_usercopy+0xfd/0xe70 [ 560.741897] ? v4l_g_ctrl+0x390/0x390 [ 560.741906] ? lock_acquire+0x170/0x3f0 [ 560.741915] ? lock_downgrade+0x740/0x740 [ 560.741927] ? trace_hardirqs_on+0x10/0x10 [ 560.749889] ? futex_exit_release+0x220/0x220 [ 560.749901] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 560.749911] ? debug_check_no_obj_freed+0x2c0/0x680 [ 560.749922] v4l2_ioctl+0x1bb/0x2f0 [ 560.749929] ? v4l2_open+0x2f0/0x2f0 [ 560.749939] do_vfs_ioctl+0x75a/0xff0 [ 560.749950] ? ioctl_preallocate+0x1a0/0x1a0 [ 560.749959] ? lock_downgrade+0x740/0x740 [ 560.749972] ? __fget+0x225/0x360 [ 560.749981] ? do_vfs_ioctl+0xff0/0xff0 [ 560.749995] ? security_file_ioctl+0x83/0xb0 [ 560.758603] Node 0 [ 560.759476] SyS_ioctl+0x7f/0xb0 [ 560.763692] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.765469] ? do_vfs_ioctl+0xff0/0xff0 [ 560.773966] lowmem_reserve[]: [ 560.776036] do_syscall_64+0x1d5/0x640 [ 560.782483] 0 [ 560.784476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 560.792367] 0 [ 560.793067] RIP: 0033:0x4665f9 [ 560.799593] 0 [ 560.801604] RSP: 002b:00007f092a8eb188 EFLAGS: 00000246 [ 560.806165] 0 0 [ 560.810124] ORIG_RAX: 0000000000000010 [ 560.810130] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 560.810135] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 560.810140] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 560.810144] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 560.810149] R13: 00007fff57cac8bf R14: 00007f092a8eb300 R15: 0000000000022000 [ 560.816461] Mem-Info: [ 560.825773] active_anon:11822 inactive_anon:29078 isolated_anon:0 [ 560.825773] active_file:26 inactive_file:0 isolated_file:0 [ 560.825773] unevictable:0 dirty:0 writeback:0 unstable:0 [ 560.825773] slab_reclaimable:12799 slab_unreclaimable:119773 [ 560.825773] mapped:52582 shmem:29460 pagetables:795 bounce:0 [ 560.825773] free:13867 free_pcp:85 free_cma:0 [ 560.831424] Node 1 [ 560.840978] Node 0 active_anon:45660kB inactive_anon:36072kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 560.849412] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 560.855390] Node 1 active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36240kB dirty:0kB writeback:0kB shmem:80724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 560.856167] lowmem_reserve[]: [ 560.863516] Node 0 [ 560.870614] 0 [ 560.877285] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:56kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.877638] 0 [ 560.881980] lowmem_reserve[]: [ 560.886122] 0 [ 560.894782] 0 [ 560.904645] 0 [ 560.934923] 2717 [ 560.938626] 0 [ 560.939805] 2718 [ 560.952976] 2718 [ 560.959350] Node 0 [ 560.960915] 2718 [ 560.964892] DMA: [ 560.978432] Node 0 [ 560.985554] 36*4kB [ 560.993060] DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:45604kB inactive_anon:35972kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2836kB bounce:0kB free_pcp:216kB local_pcp:120kB free_cma:0kB [ 560.994200] (ME) [ 561.001517] lowmem_reserve[]: 0 0 0 0 0 [ 561.001539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.001560] lowmem_reserve[]: 0 0 0 0 0 [ 561.001580] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 561.010177] 31*8kB [ 561.045338] lowmem_reserve[]: [ 561.128377] (UME) [ 561.145226] 0 [ 561.180195] 27*16kB [ 561.205127] 0 [ 561.218294] (UME) [ 561.224976] 0 [ 561.234859] 17*32kB [ 561.263891] 0 [ 561.270544] (M) [ 561.303625] 0 [ 561.328497] 4*64kB [ 561.343908] (ME) [ 561.346225] Node 0 [ 561.350261] 5*128kB [ 561.355695] DMA: [ 561.356152] (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 561.364616] 36*4kB [ 561.373796] Node 0 [ 561.375474] (ME) [ 561.376048] DMA32: 645*4kB (UME) 516*8kB (ME) 217*16kB (UME) 88*32kB (ME) 53*64kB (ME) 6*128kB (ME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17668kB [ 561.384540] 31*8kB [ 561.397875] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 561.406600] (UME) 27*16kB (UME) 17*32kB (M) 4*64kB (ME) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) [ 561.410894] Node 1 Normal: 330*4kB (UM) 215*8kB (M) 151*16kB (UME) 52*32kB (UME) 4*64kB (UM) 4*128kB (UME) 2*256kB (UM) 2*512kB (UE) 1*1024kB (E) 0*2048kB 4*4096kB (U) = 26832kB [ 561.431149] 1*2048kB [ 561.441763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 561.449602] (E) 1*4096kB (M) = 10968kB [ 561.453070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 561.462974] Node 0 DMA32: 645*4kB (UME) 516*8kB (ME) 217*16kB (UME) 88*32kB (ME) 53*64kB (ME) 6*128kB (ME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17668kB [ 561.470541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 561.486626] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 561.494992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 561.506225] Node 1 Normal: 330*4kB (UM) 215*8kB (M) 151*16kB (UME) 52*32kB (UME) 4*64kB (UM) 4*128kB (UME) 2*256kB (UM) 2*512kB (UE) 1*1024kB (E) 0*2048kB 4*4096kB (U) = 26832kB [ 561.515038] 29492 total pagecache pages [ 561.531127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 561.535784] 0 pages in swap cache [ 561.543511] Swap cache stats: add 0, delete 0, find 0/0 [ 561.544264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 561.555144] Free swap = 0kB [ 561.560600] Total swap = 0kB [ 561.563608] 2097051 pages RAM [ 561.565641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 561.572885] 0 pages HighMem/MovableOnly [ 561.575596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 561.579617] 363849 pages reserved [ 561.579621] 0 pages cma reserved [ 561.579629] Out of memory (oom_kill_allocating_task): Kill process 6081 (systemd-timesyn) score 0 or sacrifice child [ 561.579667] Killed process 6081 (systemd-timesyn) total-vm:123076kB, anon-rss:496kB, file-rss:0kB, shmem-rss:0kB [ 561.581438] oom_reaper: reaped process 6081 (systemd-timesyn), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 561.594427] 29492 total pagecache pages [ 561.613318] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 561.618601] 0 pages in swap cache [ 561.645498] Swap cache stats: add 0, delete 0, find 0/0 [ 561.650972] Free swap = 0kB [ 561.653989] Total swap = 0kB [ 561.656315] (null) [ 561.659242] 2097051 pages RAM [ 561.664485] 0 pages HighMem/MovableOnly [ 561.665526] , order=0, oom_score_adj=0 [ 561.668539] 363849 pages reserved [ 561.668545] 0 pages cma reserved [ 561.685107] systemd cpuset=/ mems_allowed=0-1 [ 561.692334] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 561.699272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.708639] Call Trace: [ 561.711274] dump_stack+0x1b2/0x281 [ 561.714906] dump_header+0x178/0x82f [ 561.718623] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 561.723735] ? ___ratelimit+0x2cd/0x530 [ 561.727714] oom_kill_process.cold+0x10/0xa40 [ 561.732208] ? lock_downgrade+0x740/0x740 [ 561.736357] out_of_memory+0x2dc/0x1190 [ 561.740365] ? oom_killer_disable+0x1c0/0x1c0 [ 561.744875] ? mutex_trylock+0x152/0x1a0 [ 561.748938] __alloc_pages_nodemask+0x23e1/0x2720 [ 561.753798] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 561.758658] alloc_pages_current+0x155/0x260 [ 561.763066] filemap_fault+0x11a1/0x1ad0 [ 561.767132] ext4_filemap_fault+0x84/0xb0 [ 561.771275] __do_fault+0xfa/0x380 [ 561.774806] __handle_mm_fault+0x2497/0x4620 [ 561.779216] ? vm_insert_page+0x7c0/0x7c0 [ 561.783372] ? mark_held_locks+0xa6/0xf0 [ 561.787433] handle_mm_fault+0x455/0x9c0 [ 561.791500] __do_page_fault+0x549/0xad0 [ 561.795568] ? spurious_fault+0x640/0x640 [ 561.799715] ? do_page_fault+0x60/0x500 [ 561.809164] ? page_fault+0x2f/0x50 [ 561.812790] page_fault+0x45/0x50 [ 561.816235] RIP: 0001:0xffffffffffffffff [ 561.820288] RSP: 389c8f50:00007ffeb480ae00 EFLAGS: 7ffeb480ab50 [ 561.830037] Mem-Info: [ 561.843569] active_anon:11695 inactive_anon:29078 isolated_anon:0 [ 561.843569] active_file:25 inactive_file:0 isolated_file:0 [ 561.843569] unevictable:0 dirty:0 writeback:0 unstable:0 [ 561.843569] slab_reclaimable:12798 slab_unreclaimable:119319 [ 561.843569] mapped:52582 shmem:29460 pagetables:767 bounce:0 [ 561.843569] free:14533 free_pcp:41 free_cma:0 [ 561.887031] Node 0 active_anon:45152kB inactive_anon:36072kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.917057] Node 1 active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36240kB dirty:0kB writeback:0kB shmem:80724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.947035] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:56kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.975812] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 561.980906] Node 0 DMA32 free:20228kB min:36200kB low:45248kB high:54296kB active_anon:45096kB inactive_anon:35972kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2724kB bounce:0kB free_pcp:164kB local_pcp:164kB free_cma:0kB [ 562.011959] lowmem_reserve[]: 0 0 0 0 0 [ 562.015971] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.044453] lowmem_reserve[]: 0 0 0 0 0 [ 562.048511] Node 1 Normal free:26936kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.079530] lowmem_reserve[]: 0 0 0 0 0 [ 562.083545] Node 0 DMA: 36*4kB (ME) 31*8kB (UME) 27*16kB (UME) 17*32kB (M) 4*64kB (ME) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 562.101510] Node 0 DMA32: 700*4kB (UME) 763*8kB (UME) 221*16kB (UME) 90*32kB (UME) 53*64kB (UME) 9*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 20376kB [ 562.118917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.129719] Node 1 Normal: 331*4kB (UM) 216*8kB (UM) 150*16kB (ME) 52*32kB (UME) 4*64kB (UM) 3*128kB (ME) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 0*2048kB 4*4096kB (U) = 26956kB [ 562.148614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.157540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.166211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.177405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.186001] 29492 total pagecache pages [ 562.190028] 0 pages in swap cache [ 562.193477] Swap cache stats: add 0, delete 0, find 0/0 [ 562.201027] Free swap = 0kB [ 562.204055] Total swap = 0kB [ 562.207738] 2097051 pages RAM [ 562.210839] 0 pages HighMem/MovableOnly [ 562.214800] 363849 pages reserved [ 562.220355] 0 pages cma reserved [ 562.223750] Out of memory: Kill process 8347 (syz-executor.5) score 1004 or sacrifice child [ 562.232332] Killed process 8351 (syz-executor.5) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 562.258640] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 562.286436] systemd-journal cpuset=/ mems_allowed=0-1 [ 562.291691] CPU: 0 PID: 8278 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 562.299570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.308993] Call Trace: [ 562.311600] dump_stack+0x1b2/0x281 [ 562.315277] dump_header+0x178/0x82f [ 562.318997] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 562.324103] ? ___ratelimit+0x2cd/0x530 [ 562.328125] oom_kill_process.cold+0x10/0xa40 [ 562.332631] out_of_memory+0xe3e/0x1190 [ 562.336633] ? oom_killer_disable+0x1c0/0x1c0 [ 562.341132] ? mutex_trylock+0x152/0x1a0 [ 562.345197] __alloc_pages_nodemask+0x23e1/0x2720 [ 562.350055] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 562.354919] alloc_pages_current+0x155/0x260 [ 562.359512] filemap_fault+0x11a1/0x1ad0 [ 562.363592] ext4_filemap_fault+0x84/0xb0 [ 562.367749] __do_fault+0xfa/0x380 [ 562.371295] __handle_mm_fault+0x2497/0x4620 [ 562.375710] ? vm_insert_page+0x7c0/0x7c0 [ 562.379867] ? mark_held_locks+0xa6/0xf0 [ 562.383929] handle_mm_fault+0x455/0x9c0 [ 562.388017] __do_page_fault+0x549/0xad0 [ 562.392113] ? spurious_fault+0x640/0x640 [ 562.396261] ? do_page_fault+0x60/0x500 [ 562.400232] ? page_fault+0x2f/0x50 [ 562.403856] page_fault+0x45/0x50 [ 562.407302] RIP: 0001:0xffffffffffffffff [ 562.411349] RSP: bc6c21e0:00007ffddf977c50 EFLAGS: 7ffddf977a60 [ 562.412086] Mem-Info: [ 562.420609] active_anon:11695 inactive_anon:29078 isolated_anon:0 [ 562.420609] active_file:16 inactive_file:11 isolated_file:0 [ 562.420609] unevictable:0 dirty:0 writeback:0 unstable:0 [ 562.420609] slab_reclaimable:12796 slab_unreclaimable:119285 [ 562.420609] mapped:52582 shmem:29460 pagetables:767 bounce:0 [ 562.420609] free:14575 free_pcp:47 free_cma:0 [ 562.454002] Node 0 active_anon:45152kB inactive_anon:36072kB active_file:60kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 562.481952] Node 1 active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36240kB dirty:0kB writeback:0kB shmem:80724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 562.509021] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:56kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.535615] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 562.549657] Node 0 DMA32 free:20376kB min:36200kB low:45248kB high:54296kB active_anon:45096kB inactive_anon:35972kB active_file:60kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2724kB bounce:0kB free_pcp:188kB local_pcp:176kB free_cma:0kB [ 562.589200] lowmem_reserve[]: 0 0 0 0 0 [ 562.593253] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.627208] lowmem_reserve[]: 0 0 0 0 0 [ 562.631246] Node 1 Normal free:26956kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:80240kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.669591] lowmem_reserve[]: 0 0 0 0 0 [ 562.673627] Node 0 DMA: 36*4kB (ME) 31*8kB (UME) 27*16kB (UME) 17*32kB (M) 4*64kB (ME) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 562.698113] Node 0 DMA32: 700*4kB (UME) 763*8kB (UME) 221*16kB (UME) 90*32kB (UME) 53*64kB (UME) 9*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 20376kB [ 562.721984] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.735587] Node 1 Normal: 332*4kB (UM) 216*8kB (UM) 151*16kB (UME) 54*32kB (UME) 4*64kB (UM) 3*128kB (ME) 3*256kB (UM) 1*512kB (E) 4*1024kB (UE) 1*2048kB (U) 9*4096kB (U) = 52128kB [ 562.757272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.792991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.805307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.832852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.850918] 31379 total pagecache pages [ 562.855628] 0 pages in swap cache [ 562.878542] Swap cache stats: add 0, delete 0, find 0/0 [ 562.885210] Free swap = 0kB [ 562.893414] Total swap = 0kB [ 562.899879] 2097051 pages RAM [ 562.903760] 0 pages HighMem/MovableOnly [ 562.915396] 363849 pages reserved [ 562.921372] 0 pages cma reserved [ 562.931093] Out of memory (oom_kill_allocating_task): Kill process 8278 (systemd-journal) score 0 or sacrifice child [ 562.943775] Killed process 8278 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1304kB [ 562.970328] oom_reaper: reaped process 8351 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 563.050174] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 563.060949] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 563.077150] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 563.083907] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 563.091640] systemd[1]: Stopped Journal Service. [ 563.108163] systemd[1]: Starting Journal Service... [ 563.146692] Bluetooth: hci1 command 0x0406 tx timeout [ 563.291503] systemd-journald[8385]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 563.370895] systemd[1]: Started Network Time Synchronization. [ 563.594995] systemd[1]: Started Journal Service. 00:50:44 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 00:50:46 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)) 00:50:46 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x0, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:46 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x5) 00:50:46 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:46 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:46 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)) 00:50:46 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:46 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:46 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)) 00:50:46 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:46 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 570.732827] oom_reaper: reaped process 8417 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 570.769591] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 570.784738] systemd-journal cpuset=/ mems_allowed=0-1 [ 570.790045] CPU: 0 PID: 8385 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 570.797931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.807897] Call Trace: [ 570.810496] dump_stack+0x1b2/0x281 [ 570.814141] dump_header+0x178/0x82f [ 570.817863] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 570.822983] ? ___ratelimit+0x2cd/0x530 [ 570.826974] oom_kill_process.cold+0x10/0xa40 [ 570.831495] out_of_memory+0xe3e/0x1190 [ 570.832109] syz-executor.3: vmalloc: allocation failure, allocated 1592770560 of 4294778880 bytes [ 570.835488] ? oom_killer_disable+0x1c0/0x1c0 [ 570.835501] ? mutex_trylock+0x152/0x1a0 [ 570.845941] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 570.849029] __alloc_pages_nodemask+0x23e1/0x2720 [ 570.849052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 570.849074] alloc_pages_current+0x155/0x260 [ 570.849087] filemap_fault+0x11a1/0x1ad0 [ 570.849108] ext4_filemap_fault+0x84/0xb0 [ 570.849120] __do_fault+0xfa/0x380 [ 570.859179] (null) [ 570.864146] __handle_mm_fault+0x2497/0x4620 [ 570.871387] syz-executor.3 cpuset= [ 570.873356] ? vm_insert_page+0x7c0/0x7c0 [ 570.879472] / [ 570.881571] ? mark_held_locks+0xa6/0xf0 [ 570.885118] mems_allowed=0-1 [ 570.887270] handle_mm_fault+0x455/0x9c0 [ 570.887287] __do_page_fault+0x549/0xad0 [ 570.887296] ? spurious_fault+0x640/0x640 [ 570.887304] ? do_page_fault+0x60/0x500 [ 570.887313] ? page_fault+0x2f/0x50 [ 570.887319] page_fault+0x45/0x50 [ 570.887327] RIP: 0001:0xffffffffffffffff [ 570.887331] RSP: 19d301e0:00007fffa4bf1420 EFLAGS: 7fffa4bf1230 [ 570.890838] Mem-Info: [ 570.893648] CPU: 1 PID: 8417 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 570.895349] active_anon:11903 inactive_anon:31111 isolated_anon:0 [ 570.895349] active_file:18 inactive_file:14 isolated_file:0 [ 570.895349] unevictable:0 dirty:0 writeback:0 unstable:0 [ 570.895349] slab_reclaimable:12874 slab_unreclaimable:122717 [ 570.895349] mapped:52578 shmem:31508 pagetables:846 bounce:0 [ 570.895349] free:13855 free_pcp:557 free_cma:0 [ 570.899497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.899502] Call Trace: [ 570.899525] dump_stack+0x1b2/0x281 [ 570.899538] warn_alloc.cold+0x96/0x1cc [ 570.899551] ? zone_watermark_ok_safe+0x220/0x220 [ 570.899571] __vmalloc_area_node+0x48a/0x680 [ 570.901281] Node 0 active_anon:45024kB inactive_anon:36072kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 570.905338] ? __vmalloc_node_range+0x150/0x150 [ 570.908501] Node 1 active_anon:2588kB inactive_anon:88372kB active_file:24kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36224kB dirty:0kB writeback:0kB shmem:88920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 570.912510] ? __get_vm_area_node+0x27d/0x340 [ 570.916551] Node 0 [ 570.920708] __vmalloc_node_range+0xbe/0x150 [ 570.920727] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 570.920733] vmalloc_user+0x47/0xa0 [ 570.920743] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 570.920755] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 570.924732] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.928348] vb2_vmalloc_alloc+0xa6/0x2d0 [ 570.928362] __vb2_queue_alloc+0x47a/0xd90 [ 570.928380] vb2_core_create_bufs+0x279/0x5a0 [ 570.928390] ? __vb2_queue_free+0x7a0/0x7a0 [ 570.928403] ? trace_hardirqs_on+0x10/0x10 [ 570.931840] lowmem_reserve[]: [ 570.935909] ? __lock_acquire+0x5fc/0x3f20 [ 570.941987] 0 [ 570.944359] vb2_create_bufs+0x2e1/0x5b0 [ 570.952163] 2717 [ 570.985395] ? vb2_thread_start+0x310/0x310 [ 570.985409] ? trace_hardirqs_on+0x10/0x10 [ 570.985418] ? retint_kernel+0x2d/0x2d [ 570.985432] vb2_ioctl_create_bufs+0x1f7/0x330 [ 570.994856] 2718 [ 570.997414] v4l_create_bufs+0xa4/0x150 [ 570.997426] __video_do_ioctl+0x65b/0x6a0 [ 570.997440] ? video_ioctl2+0x30/0x30 [ 571.001055] 2718 [ 571.005030] ? __might_fault+0x177/0x1b0 [ 571.009895] 2718 [ 571.014270] ? video_ioctl2+0x30/0x30 [ 571.046614] video_usercopy+0xfd/0xe70 [ 571.073698] Node 0 [ 571.078162] ? v4l_g_ctrl+0x390/0x390 [ 571.078174] ? lock_acquire+0x170/0x3f0 [ 571.078183] ? lock_downgrade+0x740/0x740 [ 571.078193] ? trace_hardirqs_on+0x10/0x10 [ 571.080444] DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:45100kB inactive_anon:35972kB active_file:0kB inactive_file:148kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2932kB bounce:0kB free_pcp:816kB local_pcp:696kB free_cma:0kB [ 571.084869] ? futex_exit_release+0x220/0x220 [ 571.090268] lowmem_reserve[]: [ 571.093864] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 571.098227] 0 [ 571.103554] ? debug_check_no_obj_freed+0x2c0/0x680 [ 571.129269] 0 [ 571.133398] v4l2_ioctl+0x1bb/0x2f0 [ 571.137651] 0 [ 571.142110] ? v4l2_open+0x2f0/0x2f0 [ 571.146409] 0 [ 571.150643] do_vfs_ioctl+0x75a/0xff0 [ 571.150656] ? ioctl_preallocate+0x1a0/0x1a0 [ 571.150666] ? lock_downgrade+0x740/0x740 [ 571.150681] ? __fget+0x225/0x360 [ 571.153775] 0 [ 571.158009] ? do_vfs_ioctl+0xff0/0xff0 [ 571.158022] ? security_file_ioctl+0x83/0xb0 [ 571.158030] SyS_ioctl+0x7f/0xb0 [ 571.158039] ? do_vfs_ioctl+0xff0/0xff0 [ 571.158051] do_syscall_64+0x1d5/0x640 [ 571.163899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.165928] Node 0 [ 571.170240] RIP: 0033:0x4665f9 [ 571.170246] RSP: 002b:00007f06b7616188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.170254] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 571.170259] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 571.170263] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 571.170268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 571.170273] R13: 00007ffd10d9ec1f R14: 00007f06b7616300 R15: 0000000000022000 [ 571.173484] Mem-Info: [ 571.174520] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.178471] active_anon:11903 inactive_anon:31111 isolated_anon:0 [ 571.178471] active_file:18 inactive_file:14 isolated_file:0 [ 571.178471] unevictable:0 dirty:0 writeback:0 unstable:0 [ 571.178471] slab_reclaimable:12874 slab_unreclaimable:122717 [ 571.178471] mapped:52578 shmem:31508 pagetables:846 bounce:0 [ 571.178471] free:13855 free_pcp:557 free_cma:0 [ 571.178490] Node 0 active_anon:45024kB inactive_anon:36072kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 571.184009] lowmem_reserve[]: [ 571.185438] Node 1 active_anon:2584kB inactive_anon:88372kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36224kB dirty:0kB writeback:0kB shmem:88920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 571.189436] 0 0 0 0 0 [ 571.189454] Node 1 Normal free:26488kB min:53696kB low:67120kB high:80544kB active_anon:2584kB inactive_anon:88372kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:1412kB local_pcp:604kB free_cma:0kB [ 571.189473] lowmem_reserve[]: 0 [ 571.195687] Node 0 [ 571.197504] 0 [ 571.199600] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.203632] 0 [ 571.205682] lowmem_reserve[]: [ 571.211457] 0 [ 571.213792] 0 [ 571.215642] 0 [ 571.219489] 2717 2718 2718 2718 [ 571.219504] Node 0 DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:45012kB inactive_anon:35972kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2928kB bounce:0kB free_pcp:816kB local_pcp:120kB free_cma:0kB [ 571.219527] lowmem_reserve[]: 0 [ 571.229915] 0 [ 571.235761] Node 0 [ 571.262637] 0 [ 571.266976] DMA: [ 571.268096] 0 [ 571.273143] 26*4kB [ 571.274928] 0 [ 571.283774] (UME) [ 571.287269] 22*8kB [ 571.290972] Node 0 [ 571.292758] (UME) [ 571.296589] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.301110] 22*16kB [ 571.311841] lowmem_reserve[]: [ 571.316103] (UME) [ 571.321253] 0 [ 571.323346] 15*32kB [ 571.332089] 0 [ 571.336417] (M) [ 571.340011] 0 [ 571.341946] 10*64kB [ 571.354648] 0 [ 571.357162] (UME) [ 571.365911] 0 [ 571.371943] 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 571.371985] Node 0 DMA32: 652*4kB (ME) 555*8kB (ME) 219*16kB (UME) 50*32kB (ME) 51*64kB (UME) 11*128kB (UME) [ 571.386972] 1*256kB [ 571.389159] Node 1 [ 571.416253] (M) [ 571.451613] Normal free:26488kB min:53696kB low:67120kB high:80544kB active_anon:2584kB inactive_anon:88372kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:1412kB local_pcp:808kB free_cma:0kB [ 571.478211] 1*512kB [ 571.482241] lowmem_reserve[]: [ 571.507911] (M) [ 571.512022] 0 [ 571.547711] 0*1024kB [ 571.574889] 0 [ 571.581217] 0*2048kB [ 571.583993] 0 [ 571.618990] 0*4096kB [ 571.624343] 0 [ 571.625985] = 17592kB [ 571.628294] 0 [ 571.628303] Node 0 DMA: 26*4kB (UME) 22*8kB (UME) [ 571.634431] Node 0 [ 571.634474] 22*16kB (UME) [ 571.636714] Normal: [ 571.642784] 15*32kB [ 571.670316] 0*4kB [ 571.675522] (M) [ 571.675674] 0*8kB [ 571.677525] 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 571.677572] Node 0 DMA32: [ 571.683972] 0*16kB [ 571.685421] 652*4kB [ 571.689782] 0*32kB [ 571.702548] (ME) [ 571.715155] 0*64kB [ 571.715523] 555*8kB [ 571.750742] 0*128kB [ 571.755292] (ME) [ 571.755604] 0*256kB [ 571.759700] 219*16kB [ 571.762099] 0*512kB [ 571.764074] (UME) [ 571.765868] 0*1024kB [ 571.772168] 50*32kB [ 571.776480] 0*2048kB [ 571.779469] (ME) [ 571.782435] 0*4096kB [ 571.782512] 51*64kB [ 571.784815] = 0kB [ 571.784821] Node 1 [ 571.794945] (UME) [ 571.805109] Normal: [ 571.813005] 11*128kB [ 571.813645] 392*4kB [ 571.815872] (UME) [ 571.822587] (UME) [ 571.822615] 1*256kB [ 571.824931] 257*8kB [ 571.833634] (M) [ 571.834223] (ME) [ 571.836539] 1*512kB [ 571.843387] 201*16kB [ 571.843437] (M) [ 571.845757] (UM) [ 571.853847] 0*1024kB [ 571.854549] 76*32kB [ 571.856951] 0*2048kB [ 571.863655] (M) [ 571.865849] 0*4096kB [ 571.868239] 19*64kB (UM) 7*128kB (UM) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (U) = 26488kB [ 571.868289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.868294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 571.868300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.868305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 571.868308] 31540 total pagecache pages [ 571.868320] 0 pages in swap cache [ 571.876285] = 17592kB [ 571.881851] Swap cache stats: add 0, delete 0, find 0/0 [ 571.883517] Node 0 [ 571.885829] Free swap = 0kB [ 571.894451] Normal: [ 571.907492] Total swap = 0kB [ 571.918088] 0*4kB [ 571.924775] 2097051 pages RAM [ 571.933241] 0*8kB [ 571.938008] 0 pages HighMem/MovableOnly [ 571.938013] 363849 pages reserved [ 571.938016] 0 pages cma reserved [ 571.938023] Out of memory (oom_kill_allocating_task): Kill process 8385 (systemd-journal) score 0 or sacrifice child [ 571.938055] Killed process 8385 (systemd-journal) total-vm:46096kB, anon-rss:456kB, file-rss:0kB, shmem-rss:1304kB [ 571.944369] 0*16kB [ 571.946319] oom_reaper: reaped process 8385 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1304kB [ 571.952883] 0*32kB [ 571.959665] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 571.963809] 0*64kB [ 571.964360] (null) [ 571.966494] 0*128kB [ 571.982880] , order=0, oom_score_adj=0 [ 571.999415] 0*256kB [ 572.030840] syz-fuzzer cpuset= [ 572.037873] 0*512kB [ 572.041171] / [ 572.041906] 0*1024kB [ 572.045142] mems_allowed=0-1 [ 572.053632] 0*2048kB 0*4096kB = 0kB [ 572.057357] CPU: 0 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 572.058601] Node 1 [ 572.065745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.065756] Normal: [ 572.067972] Call Trace: [ 572.067994] dump_stack+0x1b2/0x281 [ 572.068005] dump_header+0x178/0x82f [ 572.068015] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 572.068023] ? ___ratelimit+0x2cd/0x530 [ 572.068033] oom_kill_process.cold+0x10/0xa40 [ 572.068050] out_of_memory+0xe3e/0x1190 [ 572.068062] ? oom_killer_disable+0x1c0/0x1c0 [ 572.068069] ? mutex_trylock+0x152/0x1a0 [ 572.068079] __alloc_pages_nodemask+0x23e1/0x2720 [ 572.068100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 572.068124] alloc_pages_current+0x155/0x260 [ 572.068133] filemap_fault+0x11a1/0x1ad0 [ 572.068152] ext4_filemap_fault+0x84/0xb0 [ 572.083614] 358*4kB [ 572.086002] __do_fault+0xfa/0x380 [ 572.089803] (UME) [ 572.094802] __handle_mm_fault+0x2497/0x4620 [ 572.105052] 243*8kB [ 572.107197] ? vm_insert_page+0x7c0/0x7c0 [ 572.107208] ? lock_downgrade+0x740/0x740 [ 572.107222] ? mark_held_locks+0xa6/0xf0 [ 572.107232] handle_mm_fault+0x455/0x9c0 [ 572.107245] __do_page_fault+0x549/0xad0 [ 572.107256] ? spurious_fault+0x640/0x640 [ 572.111743] (UME) [ 572.115805] ? do_page_fault+0x60/0x500 [ 572.128843] 182*16kB [ 572.129850] ? page_fault+0x2f/0x50 [ 572.133888] (M) [ 572.138040] page_fault+0x45/0x50 [ 572.138051] RIP: 0000:0x947a7c [ 572.138054] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 572.152427] Mem-Info: [ 572.160960] 78*32kB [ 572.161360] active_anon:11782 inactive_anon:31111 isolated_anon:0 [ 572.161360] active_file:16 inactive_file:16 isolated_file:0 [ 572.161360] unevictable:0 dirty:0 writeback:0 unstable:0 [ 572.161360] slab_reclaimable:12862 slab_unreclaimable:122607 [ 572.161360] mapped:52578 shmem:31508 pagetables:845 bounce:0 [ 572.161360] free:14520 free_pcp:0 free_cma:0 [ 572.165377] (M) [ 572.169488] Node 0 active_anon:45012kB inactive_anon:36072kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 572.169503] Node 1 active_anon:2116kB inactive_anon:88372kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36224kB dirty:0kB writeback:0kB shmem:88920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 572.169507] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.169525] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 572.169547] Node 0 [ 572.181306] 22*64kB [ 572.183892] DMA32 free:18752kB min:36200kB low:45248kB high:54296kB active_anon:45012kB inactive_anon:35972kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2928kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.186279] (UM) [ 572.190162] lowmem_reserve[]: [ 572.196882] 8*128kB [ 572.198654] 0 0 0 0 [ 572.211559] (M) [ 572.241971] 0 [ 572.241981] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.242000] lowmem_reserve[]: 0 0 0 0 0 [ 572.242020] Node 1 Normal free:28360kB min:53696kB low:67120kB high:80544kB active_anon:2116kB inactive_anon:88372kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.242043] lowmem_reserve[]: [ 572.251115] 7*256kB [ 572.276848] 0 [ 572.307352] (UME) [ 572.329876] 0 [ 572.334599] 2*512kB [ 572.335143] 0 [ 572.368329] (M) [ 572.372852] 0 [ 572.373226] 2*1024kB [ 572.375188] 0 [ 572.376978] (UE) [ 572.438850] 2*2048kB [ 572.444806] Node 0 [ 572.446162] (UM) [ 572.448530] DMA: 26*4kB (UME) 22*8kB (UME) 22*16kB (UME) [ 572.452241] 2*4096kB [ 572.452297] 15*32kB (M) [ 572.454085] (U) [ 572.456473] 10*64kB (UME) [ 572.460246] = 28368kB [ 572.464747] 4*128kB [ 572.465013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.467119] (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 572.467162] Node 0 [ 572.474841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 572.475088] DMA32: [ 572.477825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.477832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 572.477839] 31540 total pagecache pages [ 572.484034] 686*4kB [ 572.485032] 0 pages in swap cache [ 572.487446] (UME) [ 572.496267] Swap cache stats: add 0, delete 0, find 0/0 [ 572.512975] 549*8kB [ 572.515659] Free swap = 0kB [ 572.520113] (UME) [ 572.526773] Total swap = 0kB [ 572.542012] 226*16kB [ 572.545153] 2097051 pages RAM [ 572.553520] (UME) [ 572.555009] 0 pages HighMem/MovableOnly [ 572.560250] 59*32kB [ 572.563219] 363849 pages reserved [ 572.565616] (UME) [ 572.568759] 0 pages cma reserved [ 572.594563] 56*64kB (UME) 11*128kB (ME) 3*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18912kB [ 572.604791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 572.623308] Node 1 Normal: 358*4kB (UME) 243*8kB (UME) 182*16kB (M) 78*32kB (M) 22*64kB (UM) 8*128kB (M) 7*256kB (UME) 2*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 2*4096kB (U) = 28368kB [ 572.648216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.663317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 572.674761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.689932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 572.703586] 31540 total pagecache pages [ 572.711127] 0 pages in swap cache [ 572.714590] Swap cache stats: add 0, delete 0, find 0/0 [ 572.724970] Free swap = 0kB [ 572.731558] Total swap = 0kB [ 572.734589] 2097051 pages RAM [ 572.742605] 0 pages HighMem/MovableOnly [ 572.746588] 363849 pages reserved [ 572.753617] 0 pages cma reserved [ 572.762015] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 572.775955] Killed process 7598 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 572.815955] oom_reaper: reaped process 7598 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 572.879500] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 572.902209] systemd cpuset=/ mems_allowed=0-1 [ 572.906757] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 572.913685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.923079] Call Trace: [ 572.925680] dump_stack+0x1b2/0x281 [ 572.929322] dump_header+0x178/0x82f [ 572.933045] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 572.938152] ? ___ratelimit+0x2cd/0x530 [ 572.942131] oom_kill_process.cold+0x10/0xa40 [ 572.946654] ? lock_downgrade+0x740/0x740 [ 572.950827] out_of_memory+0x2dc/0x1190 [ 572.954823] ? oom_killer_disable+0x1c0/0x1c0 [ 572.959323] ? mutex_trylock+0x152/0x1a0 [ 572.963393] __alloc_pages_nodemask+0x23e1/0x2720 [ 572.968256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 572.973122] alloc_pages_current+0x155/0x260 [ 572.977543] filemap_fault+0x11a1/0x1ad0 [ 572.981619] ext4_filemap_fault+0x84/0xb0 [ 572.985770] __do_fault+0xfa/0x380 [ 572.989319] __handle_mm_fault+0x2497/0x4620 [ 572.993737] ? vm_insert_page+0x7c0/0x7c0 [ 572.997898] ? mark_held_locks+0xa6/0xf0 [ 573.001959] handle_mm_fault+0x455/0x9c0 [ 573.006027] __do_page_fault+0x549/0xad0 [ 573.010098] ? spurious_fault+0x640/0x640 [ 573.014249] ? do_page_fault+0x60/0x500 [ 573.018218] ? page_fault+0x2f/0x50 [ 573.021844] page_fault+0x45/0x50 [ 573.025320] RIP: 0001:0xffffffffffffffff [ 573.029373] RSP: 389c8f50:00007ffeb480ae00 EFLAGS: 7ffeb480ab50 [ 573.043073] Mem-Info: [ 573.055664] active_anon:11758 inactive_anon:31110 isolated_anon:0 [ 573.055664] active_file:16 inactive_file:16 isolated_file:0 [ 573.055664] unevictable:0 dirty:0 writeback:0 unstable:0 [ 573.055664] slab_reclaimable:12862 slab_unreclaimable:122603 [ 573.055664] mapped:52225 shmem:31508 pagetables:778 bounce:0 [ 573.055664] free:14547 free_pcp:141 free_cma:0 [ 573.099306] Node 0 active_anon:44916kB inactive_anon:36072kB active_file:16kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 573.137644] Node 1 active_anon:2116kB inactive_anon:88368kB active_file:4kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:88920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 573.176689] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.214619] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 573.222061] Node 0 DMA32 free:18820kB min:36200kB low:45248kB high:54296kB active_anon:44916kB inactive_anon:35972kB active_file:16kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2748kB bounce:0kB free_pcp:448kB local_pcp:448kB free_cma:0kB [ 573.264202] lowmem_reserve[]: 0 0 0 0 0 [ 573.271780] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.307863] lowmem_reserve[]: 0 0 0 0 0 [ 573.311897] Node 1 Normal free:28400kB min:53696kB low:67120kB high:80544kB active_anon:2116kB inactive_anon:88368kB active_file:4kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 573.347775] lowmem_reserve[]: 0 0 0 0 0 [ 573.351812] Node 0 DMA: 26*4kB (UME) 22*8kB (UME) 22*16kB (UME) 15*32kB (M) 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10968kB [ 573.378458] Node 0 DMA32: 661*4kB (ME) 546*8kB (UME) 226*16kB (UME) 60*32kB (UME) 56*64kB (UME) 11*128kB (ME) 3*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18820kB [ 573.402981] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 573.417935] Node 1 Normal: 358*4kB (UME) 243*8kB (UME) 182*16kB (M) 79*32kB (UM) 22*64kB (UM) 8*128kB (M) 7*256kB (UME) 2*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 2*4096kB (U) = 28400kB [ 573.443379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.455723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 573.471981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.487354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 573.495973] 31540 total pagecache pages [ 573.506715] 0 pages in swap cache [ 573.513388] Swap cache stats: add 0, delete 0, find 0/0 [ 573.524511] Free swap = 0kB [ 573.528808] Total swap = 0kB [ 573.534145] 2097051 pages RAM [ 573.543676] 0 pages HighMem/MovableOnly [ 573.553100] 363849 pages reserved [ 573.569858] 0 pages cma reserved [ 573.574485] Out of memory: Kill process 8434 (syz-executor.5) score 1004 or sacrifice child [ 573.591285] Killed process 8436 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 573.640439] oom_reaper: reaped process 8436 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 573.705056] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 573.716020] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 573.739711] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 573.747427] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 573.760973] systemd[1]: Stopped Journal Service. [ 573.779654] systemd[1]: Starting Journal Service... [ 573.885496] systemd-journald[8446]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 574.356631] systemd[1]: Started Journal Service. 00:50:57 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:50:57 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) 00:50:57 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:57 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x0, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:57 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, {0x1, @sliced={0x0, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5], 0x400}}, 0xa9c}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:57 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 00:50:57 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x5, 0xffffff, "0f7fdbb64f5537a19536fbe0c87f799cf47aff752a1835cc", {0xfff, 0x7}, 0xfffffffe}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0xb, @sliced={0x40, [0x8000, 0xf001, 0x40, 0x3ae, 0xfffe, 0x6, 0x2, 0x9, 0x9ba9, 0xbb44, 0xd578, 0x8, 0x7620, 0x401, 0xffff, 0xbc, 0x7, 0x1, 0x6, 0x4, 0x0, 0x7, 0x2, 0x9, 0xdcd, 0x3f, 0x800, 0xfffa, 0x7ff, 0x4, 0x6, 0x884c, 0x1, 0x429, 0xba4, 0x0, 0xff, 0x9, 0x5, 0x7fff, 0xf5, 0x40, 0x43, 0x6, 0x6, 0x2, 0x9, 0x1006], 0x8ea2}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x5) 00:50:57 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x503, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) 00:50:57 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x80000000, 0x0, {0x1, @sliced={0x5, [0x2, 0x2, 0x2, 0x3f, 0xbc5, 0x9406, 0x4, 0x9, 0x1000, 0x24, 0xfffd, 0xf819, 0x3, 0x8, 0x214, 0x9, 0x8001, 0x80, 0x8001, 0xfffd, 0x0, 0x2, 0x100, 0x2, 0xe946, 0x4, 0x8001, 0x4, 0x9, 0x8c, 0x5, 0x2, 0x3ef8, 0x3, 0x7, 0x7ff, 0x81, 0x4, 0x7f, 0x5a97, 0x1, 0x1, 0x1, 0x3, 0xafc2, 0x98a, 0x5, 0x80], 0x400}}, 0xa9c}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 577.310249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.317049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.333926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.341464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.355891] device bridge_slave_1 left promiscuous mode [ 577.362364] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.375476] device bridge_slave_0 left promiscuous mode [ 577.382039] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.401791] device veth1_macvtap left promiscuous mode [ 577.412153] device veth0_macvtap left promiscuous mode [ 577.420102] device veth1_vlan left promiscuous mode [ 577.425529] device veth0_vlan left promiscuous mode [ 577.566001] device hsr_slave_1 left promiscuous mode [ 577.580300] device hsr_slave_0 left promiscuous mode [ 577.602370] team0 (unregistering): Port device team_slave_1 removed [ 577.620042] team0 (unregistering): Port device team_slave_0 removed [ 577.636132] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 577.652505] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 577.697000] bond0 (unregistering): Released all slaves [ 579.412248] IPVS: ftp: loaded support on port[0] = 21 [ 579.624473] chnl_net:caif_netlink_parms(): no params data found [ 579.775932] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.782579] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.796924] device bridge_slave_0 entered promiscuous mode [ 579.805205] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.816919] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.825702] device bridge_slave_1 entered promiscuous mode [ 579.865020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 579.880225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 579.913489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 579.925659] team0: Port device team_slave_0 added [ 579.932849] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 579.946093] team0: Port device team_slave_1 added [ 579.976762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.987108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.018208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.034001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.042415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.073280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.085285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 580.098052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 580.143794] device hsr_slave_0 entered promiscuous mode [ 580.150065] device hsr_slave_1 entered promiscuous mode [ 580.156453] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 580.169819] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 580.305486] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.311920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.318645] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.325017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.376876] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 580.387239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.399164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 580.414262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.421972] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.434275] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.445911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 580.457856] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.473585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.481792] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.488214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.519636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.529955] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.536370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.546024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.555211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 580.567621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 580.583832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.594926] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 580.602652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 580.610975] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 580.619532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 580.626633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 580.641844] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 580.653171] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 580.660537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 580.667275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 580.680126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.762369] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 580.773554] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 580.781564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 580.791054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 580.836655] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 580.844323] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 580.852838] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 580.868985] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 580.875636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 580.888694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 580.898226] device veth0_vlan entered promiscuous mode [ 580.912285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 580.920506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.932006] device veth1_vlan entered promiscuous mode [ 580.938901] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 580.949308] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 580.962491] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 580.973785] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 580.980774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 580.988745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 580.996031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 581.004858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.019532] device veth0_macvtap entered promiscuous mode [ 581.025885] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 581.041444] device veth1_macvtap entered promiscuous mode [ 581.052533] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 581.062758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 581.080938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 581.094665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 581.105857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.120239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 581.131344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.144152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 581.162954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.172745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 581.187160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.196955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 581.212535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.222984] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 581.235423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.242959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 581.255687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.264031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.276345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.286860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 581.302555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.314420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 581.329380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.340586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 581.353199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.364867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 581.378023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.387162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 581.402626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.413661] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 581.425453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.433041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.446058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.472108] Bluetooth: hci3 command 0x0409 tx timeout [ 582.614202] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 582.626968] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 582.638742] CPU: 0 PID: 8005 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 582.646224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.655585] Call Trace: [ 582.658189] dump_stack+0x1b2/0x281 [ 582.661829] dump_header+0x178/0x82f [ 582.665550] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 582.670659] ? ___ratelimit+0x2cd/0x530 [ 582.674654] oom_kill_process.cold+0x10/0xa40 [ 582.679170] out_of_memory+0xe3e/0x1190 [ 582.683165] ? oom_killer_disable+0x1c0/0x1c0 [ 582.687673] ? mutex_trylock+0x152/0x1a0 [ 582.691743] __alloc_pages_nodemask+0x23e1/0x2720 [ 582.696614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 582.701485] alloc_pages_current+0x155/0x260 [ 582.705909] filemap_fault+0x11a1/0x1ad0 [ 582.709988] ext4_filemap_fault+0x84/0xb0 [ 582.714151] __do_fault+0xfa/0x380 [ 582.717699] __handle_mm_fault+0x2497/0x4620 [ 582.722117] ? vm_insert_page+0x7c0/0x7c0 [ 582.726288] ? mark_held_locks+0xa6/0xf0 [ 582.730386] handle_mm_fault+0x455/0x9c0 [ 582.734467] __do_page_fault+0x549/0xad0 [ 582.738549] ? spurious_fault+0x640/0x640 [ 582.742709] ? do_page_fault+0x60/0x500 [ 582.746691] ? page_fault+0x2f/0x50 [ 582.750324] page_fault+0x45/0x50 [ 582.753781] RIP: 0001:0x8811c2190c [ 582.757324] RSP: 2a2058:000000c0008cbdb8 EFLAGS: 8811c2190c [ 582.785141] Mem-Info: [ 582.816761] active_anon:12388 inactive_anon:33142 isolated_anon:0 [ 582.816761] active_file:18 inactive_file:15 isolated_file:0 [ 582.816761] unevictable:0 dirty:26 writeback:12 unstable:0 [ 582.816761] slab_reclaimable:12953 slab_unreclaimable:120813 [ 582.816761] mapped:52612 shmem:33556 pagetables:849 bounce:0 [ 582.816761] free:25222 free_pcp:0 free_cma:0 [ 582.902665] Node 0 active_anon:46884kB inactive_anon:36056kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174092kB dirty:12kB writeback:36kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 582.993731] Node 1 active_anon:2668kB inactive_anon:96512kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36356kB dirty:92kB writeback:12kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 583.120678] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:100kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.211171] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 583.216290] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:44868kB inactive_anon:35956kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.267568] lowmem_reserve[]: 0 0 0 0 0 [ 583.271613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.350836] lowmem_reserve[]: 0 0 0 0 0 [ 583.354875] Node 1 Normal free:53180kB min:53696kB low:67120kB high:80544kB active_anon:2672kB inactive_anon:96512kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.384285] lowmem_reserve[]: 0 0 0 0 0 [ 583.389016] Node 0 DMA: 26*4kB (UME) 22*8kB (UME) 51*16kB (UME) 36*32kB (UM) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11080kB [ 583.417540] Node 0 DMA32: 536*4kB (UME) 516*8kB (UME) 244*16kB (ME) 71*32kB (ME) 53*64kB (ME) 20*128kB (ME) 8*256kB (M) 23*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36320kB [ 583.448078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 583.467139] Node 1 Normal: 389*4kB (M) 267*8kB (M) 192*16kB (ME) 83*32kB (UME) 24*64kB (UME) 10*128kB (UM) 1*256kB (U) 0*512kB 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53452kB [ 583.487213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.496289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 583.515556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.548077] Bluetooth: hci3 command 0x041b tx timeout [ 583.561744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 583.585058] 33599 total pagecache pages [ 583.611077] 0 pages in swap cache [ 583.614576] Swap cache stats: add 0, delete 0, find 0/0 [ 583.628040] Bluetooth: hci5 command 0x0406 tx timeout [ 583.671012] Free swap = 0kB [ 583.674072] Total swap = 0kB [ 583.677087] 2097051 pages RAM [ 583.710188] 0 pages HighMem/MovableOnly [ 583.714194] 363849 pages reserved [ 583.731828] 0 pages cma reserved [ 583.735227] Out of memory (oom_kill_allocating_task): Kill process 8005 (syz-fuzzer) score 0 or sacrifice child [ 583.766073] Killed process 7973 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 583.802873] oom_reaper: reaped process 7973 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 583.932938] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 583.956819] systemd-journal cpuset=/ mems_allowed=0-1 [ 583.966758] CPU: 0 PID: 8446 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 583.974668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.984028] Call Trace: [ 583.986625] dump_stack+0x1b2/0x281 [ 583.990285] dump_header+0x178/0x82f [ 583.993999] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 583.999105] ? ___ratelimit+0x2cd/0x530 [ 584.003083] oom_kill_process.cold+0x10/0xa40 [ 584.007600] out_of_memory+0xe3e/0x1190 [ 584.011581] ? oom_killer_disable+0x1c0/0x1c0 [ 584.016077] ? mutex_trylock+0x152/0x1a0 [ 584.020141] __alloc_pages_nodemask+0x23e1/0x2720 [ 584.024996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 584.029861] alloc_pages_current+0x155/0x260 [ 584.034280] filemap_fault+0x11a1/0x1ad0 [ 584.038352] ext4_filemap_fault+0x84/0xb0 [ 584.042506] __do_fault+0xfa/0x380 [ 584.046051] __handle_mm_fault+0x2497/0x4620 [ 584.050462] ? vm_insert_page+0x7c0/0x7c0 [ 584.054621] ? mark_held_locks+0xa6/0xf0 [ 584.058683] handle_mm_fault+0x455/0x9c0 [ 584.062745] __do_page_fault+0x549/0xad0 [ 584.066806] ? spurious_fault+0x640/0x640 [ 584.070955] ? do_page_fault+0x60/0x500 [ 584.074929] ? page_fault+0x2f/0x50 [ 584.078561] page_fault+0x45/0x50 [ 584.082011] RIP: 0001:0x1 [ 584.084761] RSP: 66491e0:00007ffdff1ca6e0 EFLAGS: 7ffdff1ca4f0 [ 584.115287] Mem-Info: [ 584.133230] active_anon:12372 inactive_anon:33142 isolated_anon:0 [ 584.133230] active_file:19 inactive_file:13 isolated_file:0 [ 584.133230] unevictable:0 dirty:0 writeback:0 unstable:0 [ 584.133230] slab_reclaimable:12953 slab_unreclaimable:120803 [ 584.133230] mapped:52608 shmem:33556 pagetables:804 bounce:0 [ 584.133230] free:25160 free_pcp:150 free_cma:0 [ 584.262769] Node 0 active_anon:46820kB inactive_anon:36056kB active_file:40kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 584.378329] Node 1 active_anon:2668kB inactive_anon:96512kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36344kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 584.464855] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.583328] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 584.596360] Node 0 DMA32 free:36128kB min:36200kB low:45248kB high:54296kB active_anon:44772kB inactive_anon:35956kB active_file:124kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.730373] lowmem_reserve[]: 0 0 0 0 0 [ 584.734462] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.780629] lowmem_reserve[]: 0 0 0 0 0 [ 584.784665] Node 1 Normal free:53452kB min:53696kB low:67120kB high:80544kB active_anon:2668kB inactive_anon:96512kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.909934] lowmem_reserve[]: 0 0 0 0 0 [ 584.913970] Node 0 DMA: 25*4kB (ME) 22*8kB (UME) 50*16kB (UME) 36*32kB (UM) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11060kB [ 584.947691] Node 0 DMA32: 563*4kB (UME) 525*8kB (UME) 242*16kB (ME) 75*32kB (UME) 53*64kB (ME) 21*128kB (ME) 8*256kB (M) 23*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36724kB [ 584.991566] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 585.005636] Node 1 Normal: 388*4kB (M) 266*8kB (M) 193*16kB (ME) 83*32kB (UME) 24*64kB (UME) 10*128kB (UM) 1*256kB (U) 0*512kB 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53456kB [ 585.022147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.033428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.049852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.063616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.072377] 33598 total pagecache pages [ 585.076358] 0 pages in swap cache [ 585.082246] Swap cache stats: add 0, delete 0, find 0/0 [ 585.087651] Free swap = 0kB [ 585.090664] Total swap = 0kB [ 585.093677] 2097051 pages RAM [ 585.096772] 0 pages HighMem/MovableOnly [ 585.103022] 363849 pages reserved [ 585.106476] 0 pages cma reserved [ 585.109866] Out of memory (oom_kill_allocating_task): Kill process 8446 (systemd-journal) score 0 or sacrifice child [ 585.122878] Killed process 8446 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1536kB [ 585.134196] oom_reaper: reaped process 8446 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1536kB [ 585.160319] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 585.227131] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 585.247792] CPU: 0 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 585.255272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.264634] Call Trace: [ 585.267235] dump_stack+0x1b2/0x281 [ 585.270879] dump_header+0x178/0x82f [ 585.274620] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 585.279732] ? ___ratelimit+0x2cd/0x530 [ 585.283719] oom_kill_process.cold+0x10/0xa40 [ 585.288233] out_of_memory+0xe3e/0x1190 [ 585.292220] ? oom_killer_disable+0x1c0/0x1c0 [ 585.296720] ? mutex_trylock+0x152/0x1a0 [ 585.300787] __alloc_pages_nodemask+0x23e1/0x2720 [ 585.305652] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 585.310522] alloc_pages_current+0x155/0x260 [ 585.314941] filemap_fault+0x11a1/0x1ad0 [ 585.319020] ext4_filemap_fault+0x84/0xb0 [ 585.323175] __do_fault+0xfa/0x380 [ 585.326724] __handle_mm_fault+0x2497/0x4620 [ 585.331142] ? vm_insert_page+0x7c0/0x7c0 [ 585.335316] ? setup_sigcontext+0x820/0x820 [ 585.339650] ? mark_held_locks+0xa6/0xf0 [ 585.343721] handle_mm_fault+0x455/0x9c0 [ 585.347792] __do_page_fault+0x549/0xad0 [ 585.351862] ? spurious_fault+0x640/0x640 [ 585.356014] ? do_page_fault+0x60/0x500 [ 585.359989] ? page_fault+0x2f/0x50 [ 585.363616] page_fault+0x45/0x50 [ 585.367067] RIP: 1e00:0xc00636c840 [ 585.370600] RSP: 0001:000000c000387a58 EFLAGS: 00000003 [ 585.627607] Bluetooth: hci3 command 0x040f tx timeout [ 585.698593] Mem-Info: [ 585.701052] active_anon:12272 inactive_anon:33142 isolated_anon:0 [ 585.701052] active_file:20 inactive_file:12 isolated_file:0 [ 585.701052] unevictable:0 dirty:0 writeback:0 unstable:0 [ 585.701052] slab_reclaimable:12951 slab_unreclaimable:120794 [ 585.701052] mapped:52233 shmem:33556 pagetables:767 bounce:0 [ 585.701052] free:25198 free_pcp:93 free_cma:0 [ 585.805651] Node 0 active_anon:46820kB inactive_anon:36056kB active_file:148kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 585.857583] Node 1 active_anon:2268kB inactive_anon:96512kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34844kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 585.950749] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.055431] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 586.067059] Node 0 DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:44768kB inactive_anon:35956kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.103896] lowmem_reserve[]: 0 0 0 0 0 [ 586.108295] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.133954] lowmem_reserve[]: 0 0 0 0 0 [ 586.138009] Node 1 Normal free:53352kB min:53696kB low:67120kB high:80544kB active_anon:2208kB inactive_anon:96508kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:472kB bounce:0kB free_pcp:588kB local_pcp:308kB free_cma:0kB [ 586.166868] lowmem_reserve[]: 0 0 0 0 0 [ 586.171009] Node 0 DMA: 25*4kB (ME) 22*8kB (UME) 50*16kB (UME) 36*32kB (UM) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11060kB [ 586.191819] Node 0 DMA32: 544*4kB (UME) 514*8kB (UME) 243*16kB (UME) 76*32kB (UME) 53*64kB (ME) 22*128kB (UME) 8*256kB (M) 22*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36224kB [ 586.208759] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 586.268207] Node 1 Normal: 379*4kB (UM) 267*8kB (UM) 192*16kB (UME) 85*32kB (UME) 25*64kB (UME) 10*128kB (M) 3*256kB (UM) 0*512kB 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 54052kB [ 586.343821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.386421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 586.407009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.458030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 586.466661] 33636 total pagecache pages [ 586.523763] 0 pages in swap cache [ 586.527266] Swap cache stats: add 0, delete 0, find 0/0 [ 586.561290] Free swap = 0kB [ 586.564349] Total swap = 0kB [ 586.567369] 2097051 pages RAM [ 586.597473] 0 pages HighMem/MovableOnly [ 586.615221] 363849 pages reserved [ 586.623087] 0 pages cma reserved [ 586.626494] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 586.636864] Killed process 687 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 586.682970] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 586.753702] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 586.776523] CPU: 0 PID: 8488 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 586.784360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.793723] Call Trace: [ 586.796339] dump_stack+0x1b2/0x281 [ 586.799987] dump_header+0x178/0x82f [ 586.803724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 586.808855] ? ___ratelimit+0x2cd/0x530 [ 586.812846] oom_kill_process.cold+0x10/0xa40 [ 586.817388] out_of_memory+0xe3e/0x1190 [ 586.821386] ? oom_killer_disable+0x1c0/0x1c0 [ 586.825895] ? mutex_trylock+0x152/0x1a0 [ 586.829976] __alloc_pages_nodemask+0x23e1/0x2720 [ 586.834852] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 586.839729] alloc_pages_current+0x155/0x260 [ 586.844174] filemap_fault+0x11a1/0x1ad0 [ 586.848276] ext4_filemap_fault+0x84/0xb0 [ 586.852447] __do_fault+0xfa/0x380 [ 586.856006] __handle_mm_fault+0x2497/0x4620 [ 586.860440] ? vm_insert_page+0x7c0/0x7c0 [ 586.864619] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 586.869080] ? nanosleep_copyout+0x100/0x100 [ 586.873522] ? mark_held_locks+0xa6/0xf0 [ 586.877602] handle_mm_fault+0x455/0x9c0 [ 586.881690] __do_page_fault+0x549/0xad0 [ 586.885780] ? spurious_fault+0x640/0x640 [ 586.889945] ? do_page_fault+0x60/0x500 [ 586.893933] ? page_fault+0x2f/0x50 [ 586.897574] page_fault+0x45/0x50 [ 586.901035] RIP: 8e384:0x5 [ 586.903884] RSP: 0003:00007ffc97fcfc5c EFLAGS: 00000032 [ 586.951043] Mem-Info: [ 586.959025] active_anon:12256 inactive_anon:33141 isolated_anon:0 [ 586.959025] active_file:18 inactive_file:16 isolated_file:0 [ 586.959025] unevictable:0 dirty:0 writeback:0 unstable:0 [ 586.959025] slab_reclaimable:12937 slab_unreclaimable:120774 [ 586.959025] mapped:52225 shmem:33556 pagetables:779 bounce:0 [ 586.959025] free:25222 free_pcp:3 free_cma:0 [ 586.995584] Node 0 active_anon:46816kB inactive_anon:36056kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 587.144205] Node 1 active_anon:2208kB inactive_anon:96508kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 587.206966] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.271954] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 587.277053] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:44768kB inactive_anon:35956kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.397082] lowmem_reserve[]: 0 0 0 0 0 [ 587.402036] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.548809] lowmem_reserve[]: 0 0 0 0 0 [ 587.552856] Node 1 Normal free:53644kB min:53696kB low:67120kB high:80544kB active_anon:2208kB inactive_anon:96508kB active_file:28kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:472kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 587.598682] lowmem_reserve[]: 0 0 0 0 0 [ 587.602730] Node 0 DMA: 25*4kB (ME) 22*8kB (UME) 50*16kB (UME) 36*32kB (UM) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11060kB [ 587.647636] Node 0 DMA32: 545*4kB (UME) 513*8kB (UME) 241*16kB (UME) 76*32kB (UME) 52*64kB (ME) 21*128kB (UME) 9*256kB (M) 22*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36252kB [ 587.705981] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 587.716900] Bluetooth: hci3 command 0x0419 tx timeout [ 587.755321] Node 1 Normal: 377*4kB (M) 261*8kB (M) 190*16kB (ME) 83*32kB (ME) 23*64kB (UME) 11*128kB (UM) 2*256kB (M) 0*512kB 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53644kB [ 587.783395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.792543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 587.827668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.836548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 587.893154] 33588 total pagecache pages [ 587.897196] 0 pages in swap cache [ 587.924382] Swap cache stats: add 0, delete 0, find 0/0 [ 587.945286] Free swap = 0kB [ 587.952168] Total swap = 0kB [ 587.955221] 2097051 pages RAM [ 587.958407] 0 pages HighMem/MovableOnly [ 587.962390] 363849 pages reserved [ 587.965846] 0 pages cma reserved [ 588.026046] Out of memory (oom_kill_allocating_task): Kill process 8488 (syz-executor.5) score 0 or sacrifice child [ 588.088559] Killed process 8726 (syz-executor.5) total-vm:93384kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 588.142202] oom_reaper: reaped process 687 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 588.216392] oom_reaper: reaped process 8726 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 588.332973] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 588.393709] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 588.426347] CPU: 0 PID: 8488 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 588.434179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.443538] Call Trace: [ 588.446142] dump_stack+0x1b2/0x281 [ 588.449782] dump_header+0x178/0x82f [ 588.453505] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 588.458623] ? ___ratelimit+0x2cd/0x530 [ 588.462614] oom_kill_process.cold+0x10/0xa40 [ 588.467131] out_of_memory+0xe3e/0x1190 [ 588.471129] ? oom_killer_disable+0x1c0/0x1c0 [ 588.475637] ? mutex_trylock+0x152/0x1a0 [ 588.479715] __alloc_pages_nodemask+0x23e1/0x2720 [ 588.484588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 588.489468] alloc_pages_current+0x155/0x260 [ 588.493900] filemap_fault+0x11a1/0x1ad0 [ 588.498007] ext4_filemap_fault+0x84/0xb0 [ 588.502169] __do_fault+0xfa/0x380 [ 588.505719] __handle_mm_fault+0x2497/0x4620 [ 588.510145] ? vm_insert_page+0x7c0/0x7c0 [ 588.514303] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 588.518725] ? nanosleep_copyout+0x100/0x100 [ 588.523155] ? mark_held_locks+0xa6/0xf0 [ 588.527232] handle_mm_fault+0x455/0x9c0 [ 588.531312] __do_page_fault+0x549/0xad0 [ 588.535388] ? spurious_fault+0x640/0x640 [ 588.539575] ? do_page_fault+0x60/0x500 [ 588.543556] ? page_fault+0x2f/0x50 [ 588.547191] page_fault+0x45/0x50 [ 588.550648] RIP: 8e384:0x5 [ 588.553488] RSP: 0003:00007ffc97fcfc5c EFLAGS: 00000032 [ 588.921946] Mem-Info: [ 588.949896] active_anon:12231 inactive_anon:33141 isolated_anon:0 [ 588.949896] active_file:40 inactive_file:12 isolated_file:0 [ 588.949896] unevictable:0 dirty:0 writeback:0 unstable:0 [ 588.949896] slab_reclaimable:12937 slab_unreclaimable:120774 [ 588.949896] mapped:52225 shmem:33556 pagetables:779 bounce:0 [ 588.949896] free:25202 free_pcp:139 free_cma:0 [ 589.084328] Node 0 active_anon:46748kB inactive_anon:36056kB active_file:120kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174180kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 589.120726] Node 1 active_anon:2080kB inactive_anon:96508kB active_file:12kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 589.207470] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.315914] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 589.334950] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:44700kB inactive_anon:35956kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.447801] lowmem_reserve[]: 0 0 0 0 0 [ 589.451818] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.564409] lowmem_reserve[]: 0 0 0 0 0 [ 589.568495] Node 1 Normal free:53548kB min:53696kB low:67120kB high:80544kB active_anon:2080kB inactive_anon:96508kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.697656] lowmem_reserve[]: 0 0 0 0 0 [ 589.701689] Node 0 DMA: 26*4kB (UME) 22*8kB (UME) 50*16kB (UME) 36*32kB (UM) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11064kB [ 589.745918] Node 0 DMA32: 552*4kB (UME) 504*8kB (UME) 244*16kB (UME) 77*32kB (UME) 52*64kB (ME) 21*128kB (UME) 9*256kB (M) 22*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36288kB [ 589.826176] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 589.875532] Node 1 Normal: 380*4kB (UM) 255*8kB (M) 188*16kB (UME) 86*32kB (ME) 25*64kB (UME) 10*128kB (M) 2*256kB (M) 0*512kB 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53672kB [ 589.937662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.946526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 590.000002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.033956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 590.059195] 33589 total pagecache pages [ 590.063202] 0 pages in swap cache [ 590.066643] Swap cache stats: add 0, delete 0, find 0/0 [ 590.121132] Free swap = 0kB [ 590.124176] Total swap = 0kB [ 590.127186] 2097051 pages RAM [ 590.150422] 0 pages HighMem/MovableOnly [ 590.154433] 363849 pages reserved [ 590.171092] 0 pages cma reserved [ 590.174487] Out of memory (oom_kill_allocating_task): Kill process 8488 (syz-executor.5) score 0 or sacrifice child [ 590.204416] Killed process 8488 (syz-executor.5) total-vm:93120kB, anon-rss:72kB, file-rss:33960kB, shmem-rss:0kB [ 590.283595] oom_reaper: reaped process 8488 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 590.359712] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 590.417086] systemd cpuset=/ mems_allowed=0-1 [ 590.436833] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 590.443796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.453166] Call Trace: [ 590.455768] dump_stack+0x1b2/0x281 [ 590.459420] dump_header+0x178/0x82f [ 590.463145] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 590.468261] ? ___ratelimit+0x2cd/0x530 [ 590.472250] oom_kill_process.cold+0x10/0xa40 [ 590.476756] ? lock_downgrade+0x740/0x740 [ 590.480921] out_of_memory+0x2dc/0x1190 [ 590.484918] ? oom_killer_disable+0x1c0/0x1c0 [ 590.489446] ? mutex_trylock+0x152/0x1a0 [ 590.493520] __alloc_pages_nodemask+0x23e1/0x2720 [ 590.498569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 590.503442] alloc_pages_current+0x155/0x260 [ 590.507897] filemap_fault+0x11a1/0x1ad0 [ 590.511984] ext4_filemap_fault+0x84/0xb0 [ 590.516142] __do_fault+0xfa/0x380 [ 590.519690] __handle_mm_fault+0x2497/0x4620 [ 590.524112] ? vm_insert_page+0x7c0/0x7c0 [ 590.528275] ? mark_held_locks+0xa6/0xf0 [ 590.532347] handle_mm_fault+0x455/0x9c0 [ 590.536423] __do_page_fault+0x549/0xad0 [ 590.540499] ? spurious_fault+0x640/0x640 [ 590.544655] ? do_page_fault+0x60/0x500 [ 590.548636] ? page_fault+0x2f/0x50 [ 590.552264] page_fault+0x45/0x50 [ 590.555716] RIP: 0001:0x1 [ 590.558523] RSP: 389c9080:00007ffeb480ae00 EFLAGS: 7ffeb480ab50 [ 590.560794] Mem-Info: [ 590.585720] active_anon:12188 inactive_anon:33141 isolated_anon:0 [ 590.585720] active_file:38 inactive_file:14 isolated_file:0 [ 590.585720] unevictable:0 dirty:0 writeback:0 unstable:0 [ 590.585720] slab_reclaimable:12935 slab_unreclaimable:120769 [ 590.585720] mapped:52229 shmem:33556 pagetables:711 bounce:0 [ 590.585720] free:25102 free_pcp:88 free_cma:0 [ 590.661168] Node 0 active_anon:46712kB inactive_anon:36056kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 590.707726] Node 1 active_anon:2040kB inactive_anon:96508kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 590.785645] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.820962] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 590.826042] Node 0 DMA32 free:35756kB min:36200kB low:45248kB high:54296kB active_anon:44664kB inactive_anon:35956kB active_file:20kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2552kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 590.877674] lowmem_reserve[]: 0 0 0 0 0 [ 590.881798] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.980707] lowmem_reserve[]: 0 0 0 0 0 [ 590.984749] Node 1 Normal free:53588kB min:53696kB low:67120kB high:80544kB active_anon:2040kB inactive_anon:96508kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:296kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 591.016164] lowmem_reserve[]: 0 0 0 0 0 [ 591.020240] Node 0 DMA: 26*4kB (UME) 22*8kB (UME) 50*16kB (UME) 36*32kB (UM) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11064kB [ 591.036312] Node 0 DMA32: 557*4kB (UME) 504*8kB (UME) 242*16kB (UME) 77*32kB (UME) 53*64kB (ME) 21*128kB (UME) 10*256kB (UM) 21*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36084kB [ 591.052727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 591.063529] Node 1 Normal: 377*4kB (UM) 252*8kB (UM) 185*16kB (UME) 86*32kB (ME) 25*64kB (UME) 12*128kB (UM) 3*256kB (UM) 1*512kB (U) 3*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53588kB [ 591.080439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.089361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 591.098008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.106852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 591.115476] 33589 total pagecache pages [ 591.119519] 0 pages in swap cache [ 591.122974] Swap cache stats: add 0, delete 0, find 0/0 [ 591.128429] Free swap = 0kB [ 591.131450] Total swap = 0kB [ 591.134469] 2097051 pages RAM [ 591.137567] 0 pages HighMem/MovableOnly [ 591.141574] 363849 pages reserved [ 591.145008] 0 pages cma reserved [ 591.148418] Out of memory: Kill process 8473 (syz-executor.2) score 1005 or sacrifice child [ 591.156921] Killed process 8476 (syz-executor.2) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 591.194675] oom_reaper: reaped process 8476 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 591.336721] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 591.356960] in:imklog cpuset=/ mems_allowed=0-1 [ 591.361745] CPU: 0 PID: 8282 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 591.369119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.378494] Call Trace: [ 591.381270] dump_stack+0x1b2/0x281 [ 591.384904] dump_header+0x178/0x82f [ 591.388632] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 591.393748] ? ___ratelimit+0x2cd/0x530 [ 591.397737] oom_kill_process.cold+0x10/0xa40 [ 591.402258] out_of_memory+0xe3e/0x1190 [ 591.406245] ? oom_killer_disable+0x1c0/0x1c0 [ 591.410732] ? mutex_trylock+0x152/0x1a0 [ 591.414831] __alloc_pages_nodemask+0x23e1/0x2720 [ 591.419692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 591.424583] alloc_pages_current+0x155/0x260 [ 591.429010] filemap_fault+0x11a1/0x1ad0 [ 591.433095] ext4_filemap_fault+0x84/0xb0 [ 591.437255] __do_fault+0xfa/0x380 [ 591.440809] __handle_mm_fault+0x2497/0x4620 [ 591.445230] ? vm_insert_page+0x7c0/0x7c0 [ 591.449388] ? lock_downgrade+0x740/0x740 [ 591.453558] ? mark_held_locks+0xa6/0xf0 [ 591.457655] handle_mm_fault+0x455/0x9c0 [ 591.461740] __do_page_fault+0x549/0xad0 [ 591.465825] ? spurious_fault+0x640/0x640 [ 591.469985] ? do_page_fault+0x60/0x500 [ 591.473975] ? page_fault+0x2f/0x50 [ 591.477620] page_fault+0x45/0x50 [ 591.481081] RIP: fffff7e7:0x1f9f [ 591.484628] RSP: d82fb4a0:00007f26d82fb4ac EFLAGS: 7f26d82fbda0 [ 591.495068] Mem-Info: [ 591.553275] active_anon:11658 inactive_anon:33141 isolated_anon:0 [ 591.553275] active_file:32 inactive_file:0 isolated_file:0 [ 591.553275] unevictable:0 dirty:0 writeback:0 unstable:0 [ 591.553275] slab_reclaimable:12916 slab_unreclaimable:120325 [ 591.553275] mapped:52225 shmem:33556 pagetables:712 bounce:0 [ 591.553275] free:25104 free_pcp:0 free_cma:0 [ 591.693621] Node 0 active_anon:44592kB inactive_anon:36056kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.806740] Node 1 active_anon:2040kB inactive_anon:96508kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.943286] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.977323] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 591.982448] Node 0 DMA32 free:35656kB min:36200kB low:45248kB high:54296kB active_anon:44664kB inactive_anon:35956kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.032923] lowmem_reserve[]: 0 0 0 0 0 [ 592.037032] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.163450] lowmem_reserve[]: 0 0 0 0 0 [ 592.167522] Node 1 Normal free:53688kB min:53696kB low:67120kB high:80544kB active_anon:2036kB inactive_anon:96508kB active_file:4kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:296kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 592.211594] lowmem_reserve[]: 0 0 0 0 0 [ 592.215631] Node 0 DMA: 24*4kB (ME) 22*8kB (UME) 21*16kB (ME) 15*32kB (M) 10*64kB (UME) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11072kB [ 592.248236] Node 0 DMA32: 558*4kB (ME) 506*8kB (UME) 243*16kB (UME) 78*32kB (UME) 54*64kB (ME) 21*128kB (UME) 10*256kB (UM) 21*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36216kB [ 592.313933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 592.356095] Node 1 Normal: 375*4kB (UM) 250*8kB (M) 186*16kB (UME) 86*32kB (ME) 25*64kB (UME) 11*128kB (M) 2*256kB (M) 0*512kB 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53708kB [ 592.382671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.397735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 592.406346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.458393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 592.467024] 33589 total pagecache pages [ 592.498248] 0 pages in swap cache [ 592.501746] Swap cache stats: add 0, delete 0, find 0/0 [ 592.507113] Free swap = 0kB [ 592.512110] Total swap = 0kB [ 592.515196] 2097051 pages RAM [ 592.518395] 0 pages HighMem/MovableOnly [ 592.522374] 363849 pages reserved [ 592.525829] 0 pages cma reserved [ 592.547804] Out of memory (oom_kill_allocating_task): Kill process 8282 (in:imklog) score 0 or sacrifice child [ 592.587799] Killed process 8279 (rsyslogd) total-vm:254332kB, anon-rss:816kB, file-rss:0kB, shmem-rss:0kB [ 592.599505] oom_reaper: reaped process 8279 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 592.694845] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 592.725697] systemd cpuset=/ mems_allowed=0-1 [ 592.737622] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 592.744591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.753960] Call Trace: [ 592.756574] dump_stack+0x1b2/0x281 [ 592.760222] dump_header+0x178/0x82f [ 592.763957] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 592.769079] ? ___ratelimit+0x2cd/0x530 [ 592.773071] oom_kill_process.cold+0x10/0xa40 [ 592.777589] ? lock_downgrade+0x740/0x740 [ 592.781760] out_of_memory+0x2dc/0x1190 [ 592.785756] ? oom_killer_disable+0x1c0/0x1c0 [ 592.790268] ? mutex_trylock+0x152/0x1a0 [ 592.794385] __alloc_pages_nodemask+0x23e1/0x2720 [ 592.799307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 592.804206] alloc_pages_current+0x155/0x260 [ 592.808616] filemap_fault+0x11a1/0x1ad0 [ 592.812679] ext4_filemap_fault+0x84/0xb0 [ 592.816921] __do_fault+0xfa/0x380 [ 592.820477] __handle_mm_fault+0x2497/0x4620 [ 592.824909] ? vm_insert_page+0x7c0/0x7c0 [ 592.829058] ? mark_held_locks+0xa6/0xf0 [ 592.833114] handle_mm_fault+0x455/0x9c0 [ 592.837171] __do_page_fault+0x549/0xad0 [ 592.841250] ? spurious_fault+0x640/0x640 [ 592.845392] ? do_page_fault+0x60/0x500 [ 592.849359] ? page_fault+0x2f/0x50 [ 592.852994] page_fault+0x45/0x50 [ 592.856448] RIP: 0001:0x1 [ 592.859197] RSP: 389c9080:00007ffeb480ae00 EFLAGS: 7ffeb480ab50 [ 592.859576] Mem-Info: [ 592.877771] active_anon:11424 inactive_anon:33141 isolated_anon:0 [ 592.877771] active_file:14 inactive_file:20 isolated_file:0 [ 592.877771] unevictable:0 dirty:0 writeback:0 unstable:0 [ 592.877771] slab_reclaimable:12915 slab_unreclaimable:120323 [ 592.877771] mapped:52263 shmem:33556 pagetables:681 bounce:0 [ 592.877771] free:25154 free_pcp:58 free_cma:0 [ 592.916765] Node 0 active_anon:43960kB inactive_anon:36056kB active_file:20kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174152kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 592.964730] Node 1 active_anon:1736kB inactive_anon:96508kB active_file:36kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34900kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 592.993832] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.070316] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 593.075505] Node 0 DMA32 free:36484kB min:36200kB low:45248kB high:54296kB active_anon:43960kB inactive_anon:35956kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2500kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB [ 593.105091] lowmem_reserve[]: 0 0 0 0 0 [ 593.109179] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.186195] lowmem_reserve[]: 0 0 0 0 0 [ 593.209772] Node 1 Normal free:53252kB min:53696kB low:67120kB high:80544kB active_anon:1736kB inactive_anon:96508kB active_file:20kB inactive_file:112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 593.300975] lowmem_reserve[]: 0 0 0 0 0 [ 593.305030] Node 0 DMA: 24*4kB (ME) 22*8kB (UME) 21*16kB (ME) 15*32kB (M) 10*64kB (UME) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11072kB [ 593.339441] Node 0 DMA32: 534*4kB (UME) 490*8kB (ME) 232*16kB (UME) 77*32kB (ME) 55*64kB (ME) 23*128kB (ME) 12*256kB (UM) 20*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36104kB [ 593.386831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.430302] Node 1 Normal: 368*4kB (UM) 247*8kB (UM) 180*16kB (UME) 85*32kB (UME) 26*64kB (UME) 9*128kB (M) 3*256kB (M) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53592kB [ 593.497745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.506739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.564516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.592473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.616773] 33622 total pagecache pages [ 593.620881] 0 pages in swap cache [ 593.624361] Swap cache stats: add 0, delete 0, find 0/0 [ 593.668945] Free swap = 0kB [ 593.672012] Total swap = 0kB [ 593.675033] 2097051 pages RAM [ 593.694313] 0 pages HighMem/MovableOnly [ 593.698394] 363849 pages reserved [ 593.701853] 0 pages cma reserved [ 593.705223] Out of memory: Kill process 8463 (syz-executor.3) score 1004 or sacrifice child [ 593.776804] Killed process 8471 (syz-executor.3) total-vm:93384kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 593.852331] oom_reaper: reaped process 8471 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 593.937496] oom_reaper: reaped process 8470 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 594.009938] systemd-cgroups invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 594.030233] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 594.035493] CPU: 1 PID: 8731 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 594.043375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.052732] Call Trace: [ 594.055335] dump_stack+0x1b2/0x281 [ 594.058964] dump_header+0x178/0x82f [ 594.062685] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 594.067825] ? ___ratelimit+0x2cd/0x530 [ 594.071833] oom_kill_process.cold+0x10/0xa40 [ 594.076354] out_of_memory+0xe3e/0x1190 [ 594.080344] ? oom_killer_disable+0x1c0/0x1c0 [ 594.084846] ? mutex_trylock+0x152/0x1a0 [ 594.088918] __alloc_pages_nodemask+0x23e1/0x2720 [ 594.090105] syz-executor.1: vmalloc: allocation failure, allocated 1598320640 of 4294778880 bytes [ 594.093804] ? _find_next_bit+0xdb/0x100 [ 594.093811] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 594.102832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 594.102849] ? lock_acquire+0x170/0x3f0 [ 594.102859] ? do_raw_spin_unlock+0x164/0x220 [ 594.102873] alloc_pages_current+0x155/0x260 [ 594.106935] syz-executor.1 cpuset= [ 594.113432] __pmd_alloc+0x37/0x3f0 [ 594.113444] move_page_tables+0xf00/0x17d0 [ 594.113458] ? vmacache_update+0xbb/0x130 [ 594.113471] shift_arg_pages+0x17c/0x3e0 [ 594.118339] / [ 594.122313] ? put_arg_page+0x1c0/0x1c0 [ 594.126795] mems_allowed=0-1 [ 594.131238] ? change_protection+0xa0/0xa0 [ 594.131250] ? lock_downgrade+0x740/0x740 [ 594.131259] ? lock_acquire+0x170/0x3f0 [ 594.131266] ? setup_arg_pages+0x242/0x6f0 [ 594.131282] setup_arg_pages+0x584/0x6f0 [ 594.180286] ? shift_arg_pages+0x3e0/0x3e0 [ 594.184535] ? get_random_u64+0xd4/0x1c0 [ 594.188602] load_elf_binary+0xa01/0x4750 [ 594.192771] ? elf_core_dump+0x4410/0x4410 [ 594.197020] search_binary_handler.part.0+0xd5/0x640 [ 594.202137] do_execveat_common+0x1099/0x1f30 [ 594.206650] ? copy_strings_kernel+0x110/0x110 [ 594.211247] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 594.216716] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 594.221739] do_execve+0x33/0x50 [ 594.225116] call_usermodehelper_exec_async+0x2ed/0x510 [ 594.230504] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 594.235972] ret_from_fork+0x24/0x30 [ 594.239702] CPU: 0 PID: 8470 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 594.246110] Mem-Info: [ 594.247514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.250009] active_anon:11376 inactive_anon:33141 isolated_anon:0 [ 594.250009] active_file:16 inactive_file:18 isolated_file:0 [ 594.250009] unevictable:0 dirty:0 writeback:0 unstable:0 [ 594.250009] slab_reclaimable:12915 slab_unreclaimable:120323 [ 594.250009] mapped:52225 shmem:33556 pagetables:682 bounce:0 [ 594.250009] free:13945 free_pcp:134 free_cma:0 [ 594.259287] Call Trace: [ 594.259314] dump_stack+0x1b2/0x281 [ 594.259327] warn_alloc.cold+0x96/0x1cc [ 594.259339] ? zone_watermark_ok_safe+0x220/0x220 [ 594.259360] __vmalloc_area_node+0x48a/0x680 [ 594.259374] ? __vmalloc_node_range+0x150/0x150 [ 594.259381] ? __get_vm_area_node+0x27d/0x340 [ 594.259393] __vmalloc_node_range+0xbe/0x150 [ 594.259417] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 594.259441] vmalloc_user+0x47/0xa0 [ 594.299154] Node 0 active_anon:43776kB inactive_anon:36056kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.302847] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 594.312073] Node 1 active_anon:1728kB inactive_anon:96508kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.312106] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 594.316760] Node 0 [ 594.321261] vb2_vmalloc_alloc+0xa6/0x2d0 [ 594.321274] __vb2_queue_alloc+0x47a/0xd90 [ 594.321293] vb2_core_create_bufs+0x279/0x5a0 [ 594.321302] ? __vb2_queue_free+0x7a0/0x7a0 [ 594.321315] ? trace_hardirqs_on+0x10/0x10 [ 594.321323] ? __lock_acquire+0x5fc/0x3f20 [ 594.321334] vb2_create_bufs+0x2e1/0x5b0 [ 594.321347] ? futex_wait_queue_me+0x3bb/0x590 [ 594.321356] ? vb2_thread_start+0x310/0x310 [ 594.321368] ? trace_hardirqs_on+0x10/0x10 [ 594.327609] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.331142] vb2_ioctl_create_bufs+0x1f7/0x330 [ 594.331157] v4l_create_bufs+0xa4/0x150 [ 594.331167] __video_do_ioctl+0x65b/0x6a0 [ 594.331180] ? video_ioctl2+0x30/0x30 [ 594.331189] ? __might_fault+0x177/0x1b0 [ 594.331199] ? video_ioctl2+0x30/0x30 [ 594.331207] video_usercopy+0xfd/0xe70 [ 594.331219] ? v4l_g_ctrl+0x390/0x390 [ 594.331228] ? lock_acquire+0x170/0x3f0 [ 594.331239] ? lock_downgrade+0x740/0x740 [ 594.339815] lowmem_reserve[]: [ 594.362362] ? trace_hardirqs_on+0x10/0x10 [ 594.362376] ? futex_exit_release+0x220/0x220 [ 594.362386] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 594.362396] ? debug_check_no_obj_freed+0x2c0/0x680 [ 594.362408] v4l2_ioctl+0x1bb/0x2f0 [ 594.362417] ? v4l2_open+0x2f0/0x2f0 [ 594.362427] do_vfs_ioctl+0x75a/0xff0 [ 594.362437] ? ioctl_preallocate+0x1a0/0x1a0 [ 594.362446] ? lock_downgrade+0x740/0x740 [ 594.362459] ? __fget+0x225/0x360 [ 594.362467] ? do_vfs_ioctl+0xff0/0xff0 [ 594.362483] ? security_file_ioctl+0x83/0xb0 [ 594.372830] 0 [ 594.394044] SyS_ioctl+0x7f/0xb0 [ 594.394055] ? do_vfs_ioctl+0xff0/0xff0 [ 594.394066] do_syscall_64+0x1d5/0x640 [ 594.394080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 594.394089] RIP: 0033:0x4665f9 [ 594.394093] RSP: 002b:00007f2c9bf42188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.394102] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 594.394107] RDX: 00000000200002c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 594.394112] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 594.394117] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 594.394123] R13: 00007ffc8e413f0f R14: 00007f2c9bf42300 R15: 0000000000022000 [ 594.410169] Mem-Info: [ 594.415174] 2717 [ 594.427128] active_anon:11376 inactive_anon:33141 isolated_anon:0 [ 594.427128] active_file:16 inactive_file:18 isolated_file:0 [ 594.427128] unevictable:0 dirty:0 writeback:0 unstable:0 [ 594.427128] slab_reclaimable:12915 slab_unreclaimable:120323 [ 594.427128] mapped:52225 shmem:33556 pagetables:682 bounce:0 [ 594.427128] free:13945 free_pcp:134 free_cma:0 [ 594.427499] 2718 [ 594.433200] Node 0 active_anon:43776kB inactive_anon:36056kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.442062] 2718 [ 594.453086] Node 1 active_anon:1728kB inactive_anon:96508kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.475859] 2718 [ 594.487353] Node 0 [ 594.507347] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.515223] Node 0 [ 594.526556] lowmem_reserve[]: [ 594.534278] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:43772kB inactive_anon:35956kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2504kB bounce:0kB free_pcp:408kB local_pcp:100kB free_cma:0kB [ 594.537408] 0 [ 594.540623] lowmem_reserve[]: 0 0 0 0 0 [ 594.540646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.540665] lowmem_reserve[]: 0 0 0 0 0 [ 594.540684] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:96508kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:224kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 594.552539] 2717 [ 594.559412] lowmem_reserve[]: [ 594.564613] 2718 [ 594.564893] 0 [ 594.566686] 2718 [ 594.572258] 0 [ 594.578242] 2718 [ 594.586770] 0 [ 594.606955] 0 [ 594.617364] Node 0 [ 594.629924] 0 [ 594.638986] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:43772kB inactive_anon:35956kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2504kB bounce:0kB free_pcp:408kB local_pcp:308kB free_cma:0kB [ 594.706964] lowmem_reserve[]: [ 594.733914] Node 0 [ 594.760142] 0 [ 594.773759] DMA: [ 594.793688] 0 [ 594.806007] 25*4kB [ 594.831685] 0 [ 594.861548] (UME) [ 594.871738] 0 [ 594.872400] 21*8kB [ 594.874196] 0 [ 594.876453] (ME) [ 594.911375] 21*16kB [ 594.923211] Node 0 [ 594.923954] (ME) [ 594.925749] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.931175] 16*32kB [ 594.936136] lowmem_reserve[]: [ 594.936385] (UM) [ 594.944669] 0 [ 594.967253] 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 594.979258] 0 0 0 0 [ 594.985618] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:96508kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:224kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 594.987209] Node 0 DMA32: 522*4kB (ME) 484*8kB (UME) 217*16kB (ME) 68*32kB (UME) 46*64kB (ME) 17*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 595.028921] lowmem_reserve[]: [ 595.041966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 595.048551] 0 0 0 0 0 [ 595.055912] Node 1 Normal: 366*4kB (M) 244*8kB (M) 180*16kB (UME) 83*32kB (ME) 25*64kB (ME) 9*128kB (M) 3*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26808kB [ 595.069338] Node 0 [ 595.084879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.089733] DMA: 25*4kB (UME) 21*8kB (ME) 21*16kB (ME) 16*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 595.096077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.115658] Node 0 DMA32: 522*4kB (ME) 484*8kB (UME) 217*16kB (ME) 68*32kB (UME) 46*64kB (ME) 17*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 595.130591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.139719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 595.154554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.159686] Node 1 Normal: 366*4kB (M) 244*8kB (M) 180*16kB (UME) 83*32kB (ME) 25*64kB (ME) 9*128kB (M) 3*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26808kB [ 595.166484] 33590 total pagecache pages [ 595.184133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.193036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.194138] 0 pages in swap cache [ 595.206014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.207404] Swap cache stats: add 0, delete 0, find 0/0 [ 595.214922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.214930] 33590 total pagecache pages [ 595.214939] 0 pages in swap cache [ 595.214944] Swap cache stats: add 0, delete 0, find 0/0 [ 595.214947] Free swap = 0kB [ 595.214951] Total swap = 0kB [ 595.214958] 2097051 pages RAM [ 595.214962] 0 pages HighMem/MovableOnly [ 595.214965] 363849 pages reserved [ 595.214968] 0 pages cma reserved [ 595.264053] Free swap = 0kB [ 595.267082] Total swap = 0kB [ 595.270138] 2097051 pages RAM [ 595.273232] 0 pages HighMem/MovableOnly [ 595.277195] 363849 pages reserved [ 595.282866] 0 pages cma reserved [ 595.286247] Out of memory (oom_kill_allocating_task): Kill process 8731 (systemd-cgroups) score 0 or sacrifice child [ 595.297003] Killed process 8731 (systemd-cgroups) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 595.310015] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 595.346413] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 595.353460] CPU: 1 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 595.360924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.370281] Call Trace: [ 595.372881] dump_stack+0x1b2/0x281 [ 595.376519] dump_header+0x178/0x82f [ 595.380243] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 595.385534] ? ___ratelimit+0x2cd/0x530 [ 595.389520] oom_kill_process.cold+0x10/0xa40 [ 595.394061] out_of_memory+0xe3e/0x1190 [ 595.398052] ? oom_killer_disable+0x1c0/0x1c0 [ 595.402559] ? mutex_trylock+0x152/0x1a0 [ 595.406629] __alloc_pages_nodemask+0x23e1/0x2720 [ 595.411514] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 595.416388] alloc_pages_current+0x155/0x260 [ 595.420815] filemap_fault+0x11a1/0x1ad0 [ 595.424893] ext4_filemap_fault+0x84/0xb0 [ 595.429048] __do_fault+0xfa/0x380 [ 595.432595] __handle_mm_fault+0x2497/0x4620 [ 595.437014] ? vm_insert_page+0x7c0/0x7c0 [ 595.441179] ? mark_held_locks+0xa6/0xf0 [ 595.445250] handle_mm_fault+0x455/0x9c0 [ 595.449339] __do_page_fault+0x549/0xad0 [ 595.453412] ? spurious_fault+0x640/0x640 [ 595.457590] ? do_page_fault+0x60/0x500 [ 595.461567] ? page_fault+0x2f/0x50 [ 595.465192] page_fault+0x45/0x50 [ 595.468639] RIP: 0000:0x947a7c [ 595.471821] RSP: 0001:000000c00003dfa0 EFLAGS: 0043b6a0 [ 595.472132] systemd-cgroups: page allocation failure: order:0, mode:0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 595.491625] Mem-Info: [ 595.494046] active_anon:11376 inactive_anon:33141 isolated_anon:0 [ 595.494046] active_file:14 inactive_file:17 isolated_file:0 [ 595.494046] unevictable:0 dirty:0 writeback:0 unstable:0 [ 595.494046] slab_reclaimable:12892 slab_unreclaimable:120320 [ 595.494046] mapped:52225 shmem:33556 pagetables:682 bounce:0 [ 595.494046] free:13947 free_pcp:134 free_cma:0 [ 595.529809] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 595.535328] CPU: 1 PID: 8731 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 595.543220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.552577] Call Trace: [ 595.555175] dump_stack+0x1b2/0x281 [ 595.558816] warn_alloc.cold+0x96/0x1cc [ 595.562796] ? zone_watermark_ok_safe+0x220/0x220 [ 595.567646] ? usleep_range+0x130/0x130 [ 595.571629] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 595.576743] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 595.581765] ? run_timer_softirq+0x5a0/0x5a0 [ 595.586187] __alloc_pages_nodemask+0x2127/0x2720 [ 595.591068] ? _find_next_bit+0xdb/0x100 [ 595.595161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 595.600040] ? lock_acquire+0x170/0x3f0 [ 595.604025] ? do_raw_spin_unlock+0x164/0x220 [ 595.608527] alloc_pages_current+0x155/0x260 [ 595.612944] __pmd_alloc+0x37/0x3f0 [ 595.616577] move_page_tables+0xf00/0x17d0 [ 595.620816] ? vmacache_update+0xbb/0x130 [ 595.624972] shift_arg_pages+0x17c/0x3e0 [ 595.629040] ? put_arg_page+0x1c0/0x1c0 [ 595.633018] ? change_protection+0xa0/0xa0 [ 595.637254] ? lock_downgrade+0x740/0x740 [ 595.641407] ? lock_acquire+0x170/0x3f0 [ 595.645389] ? setup_arg_pages+0x242/0x6f0 [ 595.649634] setup_arg_pages+0x584/0x6f0 [ 595.653703] ? shift_arg_pages+0x3e0/0x3e0 [ 595.657943] ? get_random_u64+0xd4/0x1c0 [ 595.662016] load_elf_binary+0xa01/0x4750 [ 595.666186] ? elf_core_dump+0x4410/0x4410 [ 595.670434] search_binary_handler.part.0+0xd5/0x640 [ 595.675557] do_execveat_common+0x1099/0x1f30 [ 595.680064] ? copy_strings_kernel+0x110/0x110 [ 595.684680] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 595.690139] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 595.695163] do_execve+0x33/0x50 [ 595.698557] call_usermodehelper_exec_async+0x2ed/0x510 [ 595.703930] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 595.709396] ret_from_fork+0x24/0x30 [ 595.715507] Node 0 active_anon:43776kB inactive_anon:36056kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 595.745310] Node 1 active_anon:1728kB inactive_anon:96508kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 595.774786] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 595.803460] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 595.808579] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:43772kB inactive_anon:35956kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2504kB bounce:0kB free_pcp:408kB local_pcp:100kB free_cma:0kB [ 595.839813] lowmem_reserve[]: 0 0 0 0 0 [ 595.843838] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 595.871628] lowmem_reserve[]: 0 0 0 0 0 [ 595.875645] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:96508kB active_file:52kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:224kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 595.906510] lowmem_reserve[]: 0 0 0 0 0 [ 595.910617] Node 0 DMA: 25*4kB (UME) 21*8kB (ME) 21*16kB (ME) 16*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 595.928964] Mem-Info: [ 595.931408] active_anon:11376 inactive_anon:33141 isolated_anon:0 [ 595.931408] active_file:14 inactive_file:17 isolated_file:0 [ 595.931408] unevictable:0 dirty:0 writeback:0 unstable:0 [ 595.931408] slab_reclaimable:12892 slab_unreclaimable:120320 [ 595.931408] mapped:52225 shmem:33556 pagetables:682 bounce:0 [ 595.931408] free:13947 free_pcp:134 free_cma:0 [ 595.967004] Node 0 DMA32: 522*4kB (ME) 484*8kB (UME) 217*16kB (ME) 68*32kB (UME) 46*64kB (ME) 17*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 595.984405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 595.995226] Node 1 Normal: 366*4kB (M) 244*8kB (M) 180*16kB (UME) 83*32kB (ME) 25*64kB (ME) 9*128kB (M) 3*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26808kB [ 596.013829] Node 0 active_anon:43776kB inactive_anon:36056kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 596.044170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.053101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.063969] Node 1 active_anon:1728kB inactive_anon:96508kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 596.072037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.093436] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.135073] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 596.140213] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:43772kB inactive_anon:35956kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2504kB bounce:0kB free_pcp:412kB local_pcp:104kB free_cma:0kB [ 596.147832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.181588] lowmem_reserve[]: 0 0 0 0 0 [ 596.185611] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.197775] 33590 total pagecache pages [ 596.223305] lowmem_reserve[]: 0 0 0 0 0 [ 596.227332] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:96508kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:224kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 596.227770] 0 pages in swap cache [ 596.268354] lowmem_reserve[]: 0 0 0 0 0 [ 596.268754] Swap cache stats: add 0, delete 0, find 0/0 [ 596.272391] Node 0 [ 596.287817] Free swap = 0kB [ 596.290074] DMA: 25*4kB [ 596.293090] Total swap = 0kB [ 596.293099] 2097051 pages RAM [ 596.295770] (UME) [ 596.307922] 0 pages HighMem/MovableOnly [ 596.313623] 21*8kB [ 596.314050] 363849 pages reserved [ 596.314057] (ME) [ 596.316274] 0 pages cma reserved [ 596.325206] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 596.335575] Killed process 4864 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 596.354325] 21*16kB (ME) 16*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10972kB [ 596.369457] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 596.393484] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 596.401029] CPU: 0 PID: 7992 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 596.408513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.414345] Node 0 [ 596.417871] Call Trace: [ 596.417894] dump_stack+0x1b2/0x281 [ 596.417905] dump_header+0x178/0x82f [ 596.417915] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 596.417923] ? ___ratelimit+0x2cd/0x530 [ 596.417933] oom_kill_process.cold+0x10/0xa40 [ 596.417951] out_of_memory+0xe3e/0x1190 [ 596.417966] ? oom_killer_disable+0x1c0/0x1c0 [ 596.422342] DMA32: [ 596.422804] ? mutex_trylock+0x152/0x1a0 [ 596.426411] 522*4kB [ 596.430124] __alloc_pages_nodemask+0x23e1/0x2720 [ 596.430145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 596.430167] alloc_pages_current+0x155/0x260 [ 596.430178] filemap_fault+0x11a1/0x1ad0 [ 596.430197] ext4_filemap_fault+0x84/0xb0 [ 596.430207] __do_fault+0xfa/0x380 [ 596.430216] __handle_mm_fault+0x2497/0x4620 [ 596.430226] ? vm_insert_page+0x7c0/0x7c0 [ 596.430243] ? mark_held_locks+0xa6/0xf0 [ 596.448695] (ME) [ 596.452218] handle_mm_fault+0x455/0x9c0 [ 596.454434] 484*8kB [ 596.458496] __do_page_fault+0x549/0xad0 [ 596.458508] ? spurious_fault+0x640/0x640 [ 596.458515] ? do_page_fault+0x60/0x500 [ 596.458523] ? page_fault+0x2f/0x50 [ 596.458530] page_fault+0x45/0x50 [ 596.458537] RIP: 0000:0x947a7c [ 596.458540] RSP: 0001:000000c00003dfa0 EFLAGS: 0043b6a0 [ 596.462907] Mem-Info: [ 596.472189] (UME) [ 596.491628] active_anon:11351 inactive_anon:33141 isolated_anon:0 [ 596.491628] active_file:41 inactive_file:0 isolated_file:0 [ 596.491628] unevictable:0 dirty:0 writeback:0 unstable:0 [ 596.491628] slab_reclaimable:12892 slab_unreclaimable:120320 [ 596.491628] mapped:43525 shmem:33556 pagetables:645 bounce:0 [ 596.491628] free:13947 free_pcp:232 free_cma:0 [ 596.501843] 217*16kB [ 596.510219] Node 0 active_anon:43676kB inactive_anon:36056kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139284kB dirty:0kB writeback:0kB shmem:37092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 596.514329] (ME) [ 596.516363] Node 1 active_anon:1728kB inactive_anon:96508kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:97132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 596.532915] 69*32kB [ 596.573928] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.573948] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 596.573967] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:43672kB inactive_anon:35956kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2356kB bounce:0kB free_pcp:788kB local_pcp:684kB free_cma:0kB [ 596.573985] lowmem_reserve[]: 0 0 0 0 0 [ 596.574002] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.574018] lowmem_reserve[]: 0 0 [ 596.586586] (UME) [ 596.627807] 0 [ 596.639057] 46*64kB [ 596.698386] 0 [ 596.704805] (ME) 17*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 596.751602] 0 [ 596.751893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 596.753951] Node 1 [ 596.754220] 0*512kB [ 596.767780] Normal free:171884kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:96508kB active_file:160kB inactive_file:1964kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:224kB bounce:0kB free_pcp:828kB local_pcp:640kB free_cma:0kB [ 596.769097] 0*1024kB [ 596.770106] lowmem_reserve[]: 0 0 0 0 0 [ 596.770127] Node 0 DMA: 26*4kB (UME) 21*8kB (ME) 21*16kB (ME) 16*32kB (UM) 10*64kB (UME) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 596.822152] Node 0 DMA32: 522*4kB (ME) 484*8kB (UME) 217*16kB (ME) 69*32kB (UME) 46*64kB (ME) 17*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 596.837718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 596.848695] Node 1 Normal: 3*4kB (UM) 27*8kB (UM) 190*16kB (UME) 98*32kB (UME) 30*64kB (UME) 13*128kB (UM) 5*256kB (UM) 3*512kB (UM) 4*1024kB (UME) 99*2048kB (UM) 2*4096kB (U) = 227844kB [ 596.849360] 0*2048kB [ 596.865622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.865629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.865633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.865638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.865641] 34478 total pagecache pages [ 596.865650] 0 pages in swap cache [ 596.865654] Swap cache stats: add 0, delete 0, find 0/0 [ 596.865657] Free swap = 0kB [ 596.865660] Total swap = 0kB [ 596.865666] 2097051 pages RAM [ 596.865670] 0 pages HighMem/MovableOnly [ 596.865673] 363849 pages reserved [ 596.865676] 0 pages cma reserved [ 596.865682] Out of memory (oom_kill_allocating_task): Kill process 7992 (syz-fuzzer) score 0 or sacrifice child [ 596.865739] Killed process 5642 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 596.958550] 0*4096kB = 0kB [ 596.961406] Node 1 Normal: 6*4kB (UM) 48*8kB (UM) 74*16kB (UME) 117*32kB (UME) 48*64kB (UME) 18*128kB (UM) 13*256kB (UM) 9*512kB (UM) 9*1024kB (UME) 135*2048kB (UM) 2*4096kB (U) = 312536kB [ 596.978666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.987669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.996488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.005649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 597.014430] 35240 total pagecache pages [ 597.018526] 0 pages in swap cache [ 597.022054] Swap cache stats: add 0, delete 0, find 0/0 [ 597.027503] Free swap = 0kB [ 597.030599] Total swap = 0kB [ 597.033657] 2097051 pages RAM [ 597.036752] 0 pages HighMem/MovableOnly [ 597.040786] 363849 pages reserved [ 597.044254] 0 pages cma reserved [ 597.073013] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 597.089300] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 597.103292] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 597.111530] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 597.121500] systemd[1]: Stopped Journal Service. [ 597.130976] memory commitment underflow [ 597.131082] ------------[ cut here ]------------ [ 597.140104] WARNING: CPU: 0 PID: 1 at mm/util.c:622 __vm_enough_memory.cold+0x18/0x59 [ 597.148069] Kernel panic - not syncing: panic_on_warn set ... [ 597.148069] [ 597.155429] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 597.162354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.171710] Call Trace: [ 597.174303] dump_stack+0x1b2/0x281 [ 597.177931] panic+0x1f9/0x42d [ 597.181117] ? add_taint.cold+0x16/0x16 [ 597.185091] ? __vm_enough_memory.cold+0x18/0x59 [ 597.189844] ? __vm_enough_memory.cold+0x18/0x59 [ 597.194594] __warn.cold+0x20/0x44 [ 597.198155] ? ist_end_non_atomic+0x10/0x10 [ 597.202470] ? __vm_enough_memory.cold+0x18/0x59 [ 597.207220] report_bug+0x208/0x250 [ 597.210843] do_error_trap+0x195/0x2d0 [ 597.214723] ? math_error+0x2d0/0x2d0 [ 597.218527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.223370] invalid_op+0x1b/0x40 [ 597.226820] RIP: 0010:__vm_enough_memory.cold+0x18/0x59 [ 597.232183] RSP: 0018:ffff8880b5fc7bf8 EFLAGS: 00010286 [ 597.237552] RAX: 000000000000001b RBX: 0000000000000025 RCX: 0000000000000000 [ 597.244831] RDX: 0000000000000000 RSI: ffff8880b5fbe918 RDI: ffffed1016bf8f75 [ 597.252115] RBP: 0000000000000001 R08: 000000000000001b R09: 0000000000000000 [ 597.259397] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a4357940 [ 597.266681] R13: ffffffff88feaee0 R14: ffffffffffcb42e6 R15: 0000000000000d36 [ 597.274006] ? __vm_enough_memory.cold+0x18/0x59 [ 597.278775] copy_process.part.0+0x4ab3/0x71c0 [ 597.283535] ? __cleanup_sighand+0x40/0x40 [ 597.287782] ? lock_downgrade+0x740/0x740 [ 597.291948] _do_fork+0x184/0xc80 [ 597.295420] ? fork_idle+0x270/0x270 [ 597.299150] ? up_read+0x17/0x30 [ 597.302527] ? __do_page_fault+0x159/0xad0 [ 597.306775] ? do_syscall_64+0x4c/0x640 [ 597.310758] ? sys_vfork+0x20/0x20 [ 597.314311] do_syscall_64+0x1d5/0x640 [ 597.318219] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 597.323414] RIP: 0033:0x7ff8dc9be38b [ 597.327127] RSP: 002b:00007ffeb480a920 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 597.334839] RAX: ffffffffffffffda RBX: 00007ffeb480a920 RCX: 00007ff8dc9be38b [ 597.342147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 597.349425] RBP: 00007ffeb480a970 R08: 00007ff8de418500 R09: 0000000000000000 [ 597.356703] R10: 00007ff8de4187d0 R11: 0000000000000246 R12: 0000000000000000 [ 597.363982] R13: 0000000000000020 R14: 0000000000000001 R15: 0000000000000000 [ 597.372003] Kernel Offset: disabled [ 597.375736] Rebooting in 86400 seconds..