ace bond_slave_1 [ 2319.609629] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2319.641505] bond0 (unregistering): Released all slaves [ 2319.660209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2319.671229] team0: Port device team_slave_0 added [ 2319.678950] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2319.689351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2319.697573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2319.722189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.728442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.756327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.767730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2319.775318] team0: Port device team_slave_1 added [ 2319.794907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.801276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.827758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.839809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.847837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.874630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2319.887844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.894866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.920793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2319.941551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2319.949095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2319.958916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2319.977254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2319.986281] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2319.994854] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2320.004938] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2320.038798] device hsr_slave_0 entered promiscuous mode [ 2320.044799] device hsr_slave_1 entered promiscuous mode [ 2320.053118] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2320.063357] device hsr_slave_0 entered promiscuous mode [ 2320.069048] device hsr_slave_1 entered promiscuous mode [ 2320.075290] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2320.084661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2320.092731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2320.100091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2320.109055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2320.116522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2320.124200] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2320.132348] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2320.139686] device veth0_vlan entered promiscuous mode [ 2320.169760] device veth1_vlan entered promiscuous mode [ 2320.178526] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2320.196227] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2320.283763] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2320.321176] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2320.339085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2320.347167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2320.355744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2320.371288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2320.379126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2320.402954] device veth0_macvtap entered promiscuous mode [ 2320.409419] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2320.437044] device veth1_macvtap entered promiscuous mode [ 2320.447713] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2320.483544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2320.505157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2320.535684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2320.544932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2320.555022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.568174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.589465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.599493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.617108] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2320.625267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2320.639726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2320.647842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2320.662590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2320.669846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2320.685400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2320.698334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.716329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.726712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.744109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.757931] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2320.772700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2320.793512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2320.806952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2320.821371] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2320.835758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2320.842933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2320.869752] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2320.877022] 8021q: adding VLAN 0 to HW filter on device team0 [ 2320.911915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2320.918946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2320.930992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2320.938641] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.945134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2320.963569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2320.980151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2320.989654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2320.997682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2321.005465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2321.019941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2321.035491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.041890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2321.058265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2321.068824] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2321.085741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2321.099868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2321.110914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2321.117044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2321.126886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2321.135231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2321.143319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2321.151092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2321.158076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2321.168844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2321.178668] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2321.187045] 8021q: adding VLAN 0 to HW filter on device team0 [ 2321.196493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2321.204679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2321.213463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2321.221700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2321.229640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2321.237648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.244179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2321.251645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2321.261855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2321.270916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2321.282809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2321.294564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2321.306001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2321.317783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2321.328767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2321.343910] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.350322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2321.365487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2321.378569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2321.395007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2321.413096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2321.429498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2321.454009] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2321.467941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2321.478239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2321.497370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2321.517254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2321.542800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2321.551617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2321.565048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2321.577118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2321.586555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2321.612989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2321.620207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2321.627905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2321.645462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2321.653589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2321.668215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2321.696536] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2321.705000] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2321.718142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2321.731324] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2321.751382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2321.770599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2321.796034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2321.823317] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2321.831506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.838622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.877102] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2321.887776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2321.908580] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2321.919491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.937360] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2321.942339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.953489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2321.962362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2321.971625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2321.978813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2322.006381] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2322.019027] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2322.026832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2322.035485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2322.100147] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2322.111666] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2322.118934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2322.127605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2322.170776] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2322.177875] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2322.185252] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2322.198418] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2322.210183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2322.217649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2322.225885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2322.232998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2322.245184] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2322.252716] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2322.259447] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2322.269003] device veth0_vlan entered promiscuous mode [ 2322.278239] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2322.287986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2322.296495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2322.304664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2322.312146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2322.321757] device veth0_vlan entered promiscuous mode [ 2322.330679] device veth1_vlan entered promiscuous mode [ 2322.336496] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2322.357038] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2322.368146] device veth1_vlan entered promiscuous mode [ 2322.374713] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2322.384529] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2322.394868] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2322.416476] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2322.424704] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2322.433974] device veth0_macvtap entered promiscuous mode [ 2322.440395] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2322.447692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2322.455067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2322.462884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2322.470379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2322.477496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2322.485656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2322.493770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2322.503572] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2322.512042] device veth1_macvtap entered promiscuous mode [ 2322.518115] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2322.529226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2322.536624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2322.544704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2322.554245] device veth0_macvtap entered promiscuous mode [ 2322.562459] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2322.571694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2322.588427] device veth1_macvtap entered promiscuous mode [ 2322.595271] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2322.604492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2322.615200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2322.624852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.635708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.645404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.655190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.664350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.674146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.684307] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2322.691482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2322.702070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2322.709236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2322.716568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2322.725232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2322.735636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2322.750615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.763000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.772331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.782149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.791550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.801960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.812754] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2322.819770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2322.827969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.838252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.847568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.857325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.866662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.876507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.886131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.895897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.906067] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2322.913107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2322.920010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2322.928419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2322.937027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2322.945046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2323.000920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2323.011107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.020385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2323.031180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.040549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2323.050555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.060009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2323.069782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.086018] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2323.093224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2323.103736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2323.112401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2323.285554] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2323.307295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.314682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.336880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2323.352999] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2323.360847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2323.361359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.375353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.376837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2323.390840] device bridge_slave_1 left promiscuous mode [ 2323.396284] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.403531] device bridge_slave_0 left promiscuous mode [ 2323.408955] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.416745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2323.425067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2323.432971] device bridge_slave_1 left promiscuous mode [ 2323.438530] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.445983] device bridge_slave_0 left promiscuous mode [ 2323.451546] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.458705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2323.466650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2323.474598] device bridge_slave_1 left promiscuous mode [ 2323.480131] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.487047] device bridge_slave_0 left promiscuous mode [ 2323.492785] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.517771] device hsr_slave_1 left promiscuous mode [ 2323.525431] device hsr_slave_0 left promiscuous mode [ 2323.541379] team0 (unregistering): Port device team_slave_1 removed [ 2323.552287] team0 (unregistering): Port device team_slave_0 removed [ 2323.563031] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2323.572983] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2323.600535] bond0 (unregistering): Released all slaves [ 2323.615446] device hsr_slave_1 left promiscuous mode [ 2323.624132] device hsr_slave_0 left promiscuous mode [ 2323.638153] team0 (unregistering): Port device team_slave_1 removed [ 2323.651279] team0 (unregistering): Port device team_slave_0 removed [ 2323.663204] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2323.672876] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2323.703402] bond0 (unregistering): Released all slaves [ 2323.716689] device hsr_slave_1 left promiscuous mode [ 2323.723954] device hsr_slave_0 left promiscuous mode [ 2323.741288] team0 (unregistering): Port device team_slave_1 removed [ 2323.752633] team0 (unregistering): Port device team_slave_0 removed [ 2323.762348] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2323.772630] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2323.800656] bond0 (unregistering): Released all slaves [ 2323.819217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2323.837173] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2323.846725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.871101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.888187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2323.898753] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2323.914782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.923756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.933383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:42:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1000, 0xfffffffe, 0x14f2, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x9}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1000, 0xfffffffe, 0x14f2, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) clock_gettime(0x4, &(0x7f0000000080)) 06:42:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ffffffffffffffb, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x4}, {0x0, 0xfffffffd}, {}, {}, {0x3}], 0x0, 0x0, 0x0, 0x3}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c40000000000000000fc2e81542cf4", 0xa0363159}) 06:42:52 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x105000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x1f, 0x0, 0x4, 0xe000, 0x0, {0x77359400}, {0x5, 0xc, 0x0, 0x3, 0x0, 0x2, '%\'YZ'}, 0x9, 0x1, {&(0x7f0000000080)=[{0x3, 0xfffffffc, {}, 0xfffffab8}, {0x3, 0x5, {0x2}, 0x2}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x1f, 0x0, 0x4, 0xe000, 0x0, {0x77359400}, {0x5, 0xc, 0x0, 0x3, 0x0, 0x2, '%\'YZ'}, 0x9, 0x1, {&(0x7f0000000080)=[{0x3, 0xfffffffc, {}, 0xfffffab8}, {0x3, 0x5, {0x2}, 0x2}]}, 0x0, 0x0, r2}) 06:42:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@userptr={0x7fff, 0x2, 0x4, 0x70000, 0x3ff, {0x0, 0x2710}, {0x2, 0x1, 0x20, 0x6, 0x8, 0x5, "86bc953c"}, 0x81, 0x2, {&(0x7f0000000180)}, 0x8000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000080}, 0x4806) 06:42:52 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:42:52 executing program 1: r0 = syz_clone(0x80000000, &(0x7f00000000c0)="1cd3719ef8478ae17fa701784b087fc54ec541f3adbb21fbc49c367d3b9f15acc82f35bb4d11ed8ce93acd4f00fe299add44d8a0b9eaebfa54e36247d03bd070c020c2939c6a74936d7ab633a0275d1e76139d3730f52858dbe5dc85992f97f3af8df2fd96c782ccb3582bf39e148c77c1ffba545c26e72f94032ea7106d5eb0b33e4143", 0x84, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)="54441a9e855a08c1fe3b0cbdb6f2dfd77bbf9525926a5e16c3c29e014e") process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) clock_gettime(0x4, &(0x7f0000000080)) 06:42:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x600000000000000, 0x5000, 0x0, 0x8}) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x7, @pix_mp={0x0, 0x0, 0x3447504d}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x400, 0x2, 0x1, 0x0, 0x4}) 06:42:52 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:42:52 executing program 1: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 06:42:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x600000000000000, 0x5000, 0x0, 0x8}) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x7, @pix_mp={0x0, 0x0, 0x3447504d}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x400, 0x2, 0x1, 0x0, 0x4}) 06:42:52 executing program 1: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 06:42:52 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:42:52 executing program 0: r0 = syz_clone(0x0, &(0x7f00000000c0)="1cd3719ef8478ae17fa701784b087fc54ec541f3adbb21fbc49c367d3b9f15acc82f35bb4d11ed8ce93acd4f00fe299add44d8a0b9eaebfa54e36247d03bd070c020c2939c6a74936d7ab633a0275d1e76139d3730f52858dbe5dc85992f97f3af8df2fd96c782ccb3582bf39e148c77c1ffba545c26e72f94032ea7106d5eb0b33e4143", 0x84, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)="54441a9e855a08c1fe3b0cbdb6f2dfd77bbf9525926a5e16c3c29e014e") process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) [ 2325.233615] IPVS: ftp: loaded support on port[0] = 21 [ 2325.458450] chnl_net:caif_netlink_parms(): no params data found [ 2325.558386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2325.566656] bridge0: port 1(bridge_slave_0) entered disabled state [ 2325.579759] device bridge_slave_0 entered promiscuous mode [ 2325.588455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2325.600471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2325.608139] device bridge_slave_1 entered promiscuous mode [ 2325.645332] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2325.658126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2325.687448] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2325.701336] team0: Port device team_slave_0 added [ 2325.707183] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2325.718397] team0: Port device team_slave_1 added [ 2325.747676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2325.754398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2325.786257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2325.799838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2325.806154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2325.837426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2325.860122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2325.868072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2325.905973] device hsr_slave_0 entered promiscuous mode [ 2325.916851] device hsr_slave_1 entered promiscuous mode [ 2325.924137] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2325.936477] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2326.068602] bridge0: port 2(bridge_slave_1) entered blocking state [ 2326.075047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2326.081753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.088154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2326.155753] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2326.169496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2326.185175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2326.196601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2326.210997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.218242] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.230414] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2326.247638] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2326.254941] 8021q: adding VLAN 0 to HW filter on device team0 [ 2326.270635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2326.278814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.285208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2326.314735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2326.323750] bridge0: port 2(bridge_slave_1) entered blocking state [ 2326.330222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2326.351818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2326.363531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2326.382001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2326.394243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2326.402589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2326.419913] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2326.425992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2326.488464] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2326.502824] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2326.513944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2326.523316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2326.538230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2326.607806] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2326.624759] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2326.634755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2326.648575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2326.722645] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2326.735090] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2326.742827] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2326.758965] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2326.765676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2326.779370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2326.789271] device veth0_vlan entered promiscuous mode [ 2326.800069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2326.807434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2326.817355] device veth1_vlan entered promiscuous mode [ 2326.829739] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2326.846041] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2326.862118] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2326.880145] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2326.887288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2326.904132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2326.912854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2326.925894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2326.937545] device veth0_macvtap entered promiscuous mode [ 2326.949183] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2326.965714] device veth1_macvtap entered promiscuous mode [ 2326.972509] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2326.989710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2327.005550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2327.015133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.031225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.045167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.058145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.069969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.082897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.094140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.107198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.118083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.135842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.146697] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2327.158776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2327.165718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2327.179074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2327.186426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2327.201693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2327.216467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.227846] Bluetooth: hci5: command 0x0409 tx timeout [ 2327.238467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.248480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.263289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.272779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.288588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.297797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.312938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.322897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.338608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.354115] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2327.365872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2327.378156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2327.387457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2327.610948] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2327.618210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.639656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.646464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 06:42:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1000, 0xfffffffe, 0x14f2, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) clock_gettime(0x4, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1000, 0xfffffffe, 0x14f2, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x9}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) (async) clock_gettime(0x4, &(0x7f0000000080)) (async) 06:42:56 executing program 1: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2327.684389] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2327.692053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.700508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.707297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2329.279554] Bluetooth: hci5: command 0x041b tx timeout [ 2330.449625] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2330.461509] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2330.466292] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2330.473748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2330.483097] Call Trace: [ 2330.485697] dump_stack+0x1fc/0x2ef [ 2330.489345] dump_header+0x15d/0xc3f [ 2330.493074] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2330.500090] ? ___ratelimit+0x319/0x590 [ 2330.504074] oom_kill_process.cold+0x10/0x692 [ 2330.508579] ? check_preemption_disabled+0x41/0x280 [ 2330.513603] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2330.518886] out_of_memory+0x1072/0x1390 [ 2330.522954] ? oom_killer_disable+0x270/0x270 [ 2330.527450] ? mutex_trylock+0x15f/0x1a0 [ 2330.531608] __alloc_pages_nodemask+0x23a2/0x2890 [ 2330.536452] ? find_get_entry+0x4cd/0x8a0 [ 2330.540606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2330.545472] alloc_pages_current+0x193/0x2a0 [ 2330.549881] filemap_fault+0x146e/0x2180 [ 2330.553952] ext4_filemap_fault+0x84/0xb0 [ 2330.558099] __do_fault+0x10b/0x4b0 [ 2330.561729] __handle_mm_fault+0x273b/0x41c0 [ 2330.566146] ? vm_insert_page+0x9c0/0x9c0 [ 2330.570309] ? check_preemption_disabled+0x41/0x280 [ 2330.575327] handle_mm_fault+0x436/0xb10 [ 2330.579391] __do_page_fault+0x68e/0xd60 [ 2330.583459] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2330.588475] ? spurious_fault+0x840/0x840 [ 2330.592621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2330.597467] ? page_fault+0x8/0x30 [ 2330.601004] page_fault+0x1e/0x30 [ 2330.604454] RIP: 0033:0x46b583 [ 2330.607642] Code: Bad RIP value. [ 2330.611001] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2330.616359] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2330.623625] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2330.630886] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.638141] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2330.645580] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2330.670040] Mem-Info: [ 2330.672491] active_anon:27894 inactive_anon:75862 isolated_anon:0 [ 2330.672491] active_file:39 inactive_file:6 isolated_file:0 [ 2330.672491] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2330.672491] slab_reclaimable:13179 slab_unreclaimable:118270 [ 2330.672491] mapped:22366 shmem:89972 pagetables:581 bounce:0 [ 2330.672491] free:25100 free_pcp:124 free_cma:0 [ 2330.730533] Node 0 active_anon:108972kB inactive_anon:159064kB active_file:44kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87088kB dirty:28kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2330.811420] Node 1 active_anon:2612kB inactive_anon:144384kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2264kB dirty:0kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2330.872494] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2330.961300] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2330.966377] Node 0 DMA32 free:35940kB min:35996kB low:44992kB high:53988kB active_anon:108972kB inactive_anon:155468kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2331.017939] lowmem_reserve[]: 0 0 1 1 1 [ 2331.021949] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2331.053255] lowmem_reserve[]: 0 0 0 0 0 [ 2331.057253] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:2612kB inactive_anon:144384kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2331.098791] lowmem_reserve[]: 0 0 0 0 0 [ 2331.102784] Node 0 DMA: 6*4kB (UM) 5*8kB (UM) 0*16kB 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2331.163099] Node 0 DMA32: 1125*4kB (UME) 563*8kB (ME) 276*16kB (ME) 157*32kB (UME) 76*64kB (ME) 34*128kB (UM) 12*256kB (UM) 7*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36364kB [ 2331.223889] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2331.237553] Node 1 Normal: 555*4kB (ME) 436*8kB (ME) 217*16kB (ME) 103*32kB (ME) 48*64kB (ME) 12*128kB (M) 4*256kB (M) 0*512kB 3*1024kB (UME) 2*2048kB (UM) 7*4096kB (U) = 53948kB [ 2331.271276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2331.312890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2331.355559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2331.358068] Bluetooth: hci5: command 0x040f tx timeout [ 2331.387735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2331.396364] 90000 total pagecache pages [ 2331.412991] 0 pages in swap cache [ 2331.416452] Swap cache stats: add 0, delete 0, find 0/0 [ 2331.440894] Free swap = 0kB [ 2331.443927] Total swap = 0kB [ 2331.446951] 2097051 pages RAM [ 2331.457412] 0 pages HighMem/MovableOnly [ 2331.461436] 369649 pages reserved [ 2331.464880] 0 pages cma reserved [ 2331.479278] Unreclaimable slab info: [ 2331.483022] Name Used Total [ 2331.499530] pid_2 10KB 32KB [ 2331.504966] batadv_tt_change_cache 4KB 11KB [ 2331.515880] batadv_tl_cache 14KB 16KB [ 2331.523355] SMC 4KB 13KB [ 2331.538273] TIPC 28KB 37KB [ 2331.543656] SCTPv6 26KB 43KB [ 2331.560202] DCCPv6 22KB 37KB [ 2331.565578] DCCP 16KB 35KB [ 2331.592769] RXRPC 26KB 39KB [ 2331.607607] rxrpc_call_jar 151KB 165KB [ 2331.612980] bridge_fdb_cache 21KB 27KB [ 2331.640048] fib6_nodes 246KB 308KB [ 2331.645420] ip6_dst_cache 666KB 746KB [ 2331.679425] RAWv6 141KB 155KB [ 2331.684808] UDPv6 45KB 45KB [ 2331.712417] TCPv6 30KB 36KB [ 2331.717848] nf_conntrack 18KB 18KB [ 2331.723259] t10_alua_lu_gp_cache 0KB 3KB [ 2331.772424] sd_ext_cdb 0KB 7KB [ 2331.778001] scsi_sense_cache 1056KB 1060KB [ 2331.783367] virtio_scsi_cmd 16KB 16KB [ 2331.793771] sgpool-128 8KB 8KB [ 2331.799220] sgpool-64 4KB 12KB [ 2331.804581] sgpool-32 2KB 15KB [ 2331.840012] sgpool-16 1KB 7KB [ 2331.845502] sgpool-8 0KB 7KB [ 2331.856156] mqueue_inode_cache 22KB 30KB [ 2331.861858] bio_post_read_ctx 14KB 15KB [ 2331.867324] bio-2 14KB 15KB [ 2331.877194] jfs_mp 7KB 7KB [ 2331.882730] cifs_small_rq 15KB 16KB [ 2331.888121] cifs_request 67KB 67KB [ 2331.893462] cifs_mpx_ids 0KB 7KB [ 2331.899092] nfs_commit_data 3KB 14KB [ 2331.904444] nfs_write_data 34KB 44KB [ 2331.909853] ext4_system_zone 1KB 7KB [ 2331.915208] bio-1 1KB 7KB [ 2331.921084] pid_namespace 4KB 11KB [ 2331.926437] rpc_buffers 17KB 25KB [ 2331.931830] rpc_tasks 2KB 7KB [ 2331.939499] UNIX 2094KB 2163KB [ 2331.944847] tcp_bind_bucket 2KB 8KB [ 2331.950262] ip_fib_trie 41KB 47KB [ 2331.955614] ip_fib_alias 174KB 213KB [ 2331.961489] ip_dst_cache 13KB 28KB [ 2331.966836] RAW 94KB 120KB [ 2331.973742] UDP 74KB 101KB [ 2331.982993] TCP 14KB 16KB [ 2331.990133] hugetlbfs_inode_cache 3KB 15KB [ 2331.995836] fscache_cookie_jar 1KB 7KB [ 2332.006407] eventpoll_pwq 30KB 43KB [ 2332.013536] eventpoll_epi 56KB 63KB [ 2332.020600] inotify_inode_mark 5KB 7KB [ 2332.026037] request_queue 199KB 199KB [ 2332.032284] blkdev_requests 1KB 3KB [ 2332.037725] blkdev_ioc 23KB 42KB [ 2332.043084] bio-0 634KB 930KB [ 2332.048498] biovec-max 1658KB 1740KB [ 2332.053854] biovec-64 569KB 819KB [ 2332.059269] biovec-16 124KB 172KB [ 2332.064627] bio_integrity_payload 1KB 8KB [ 2332.070342] khugepaged_mm_slot 3KB 19KB [ 2332.075776] uid_cache 0KB 4KB [ 2332.084860] dmaengine-unmap-2 0KB 3KB [ 2332.090289] skbuff_fclone_cache 29KB 45KB [ 2332.095821] skbuff_head_cache 8593KB 9705KB [ 2332.101263] configfs_dir_cache 3KB 7KB [ 2332.106708] file_lock_ctx 9KB 11KB [ 2332.112099] fsnotify_mark_connector 2KB 3KB [ 2332.118052] net_namespace 113KB 131KB [ 2332.123425] shmem_inode_cache 7966KB 7991KB [ 2332.128835] task_delay_info 331KB 446KB [ 2332.134203] taskstats 27KB 38KB [ 2332.141272] proc_dir_entry 1122KB 1128KB [ 2332.146651] pde_opener 17KB 23KB [ 2332.152044] seq_file 245KB 354KB [ 2332.157428] sigqueue 59KB 82KB [ 2332.162781] kernfs_node_cache 18237KB 18258KB [ 2332.168649] mnt_cache 232KB 264KB [ 2332.174002] filp 7561KB 8287KB [ 2332.179405] names_cache 100470KB 100529KB [ 2332.184754] iint_cache 31KB 51KB [ 2332.190156] key_jar 4KB 7KB [ 2332.195497] uts_namespace 6KB 11KB [ 2332.206441] nsproxy 6KB 11KB [ 2332.211967] vm_area_struct 2617KB 3333KB [ 2332.217329] mm_struct 474KB 565KB [ 2332.222760] fs_cache 393KB 412KB [ 2332.228165] files_cache 1459KB 1470KB [ 2332.233521] signal_cache 2518KB 2709KB [ 2332.238955] sighand_cache 686KB 728KB [ 2332.245391] task_struct 10068KB 10156KB [ 2332.250798] cred_jar 2748KB 2944KB [ 2332.256145] anon_vma_chain 763KB 1441KB [ 2332.261560] anon_vma 148KB 234KB [ 2332.266910] pid 219KB 256KB [ 2332.272298] Acpi-Operand 156KB 198KB [ 2332.277710] Acpi-ParseExt 9KB 11KB [ 2332.283061] Acpi-Parse 41KB 47KB [ 2332.288437] Acpi-State 52KB 63KB [ 2332.293778] Acpi-Namespace 20KB 27KB [ 2332.299185] numa_policy 0KB 3KB [ 2332.304535] debug_objects_cache 2780KB 3129KB [ 2332.310106] trace_event_file 297KB 298KB [ 2332.315448] ftrace_event_field 398KB 401KB [ 2332.344595] pool_workqueue 152KB 160KB [ 2332.353002] page->ptl 404KB 1102KB [ 2332.369907] kmalloc-2097152 2050KB 2050KB [ 2332.375290] kmalloc-524288 2056KB 2056KB [ 2332.403024] kmalloc-262144 1290KB 1290KB [ 2332.420269] kmalloc-131072 650KB 650KB [ 2332.425651] kmalloc-65536 3498KB 3630KB [ 2332.455070] kmalloc-32768 2772KB 2772KB [ 2332.475964] kmalloc-16384 1435KB 1518KB [ 2332.494086] kmalloc-8192 5931KB 5973KB [ 2332.504449] kmalloc-4096 32389KB 32448KB [ 2332.509923] kmalloc-2048 19677KB 19928KB [ 2332.515280] kmalloc-1024 13294KB 14663KB [ 2332.525993] kmalloc-512 16656KB 19953KB [ 2332.531408] kmalloc-256 6003KB 6690KB [ 2332.536762] kmalloc-128 1452KB 1838KB [ 2332.570481] kmalloc-96 3484KB 5336KB [ 2332.575869] kmalloc-64 3215KB 5056KB [ 2332.602363] kmalloc-32 2056KB 3150KB [ 2332.612225] kmalloc-192 2685KB 3112KB [ 2332.629181] kmem_cache 177KB 180KB [ 2332.634551] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2332.676602] Killed process 26859 (syz-executor.3) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB [ 2332.704700] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2332.716240] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2332.725231] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2332.732694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2332.742042] Call Trace: [ 2332.744637] dump_stack+0x1fc/0x2ef [ 2332.748264] dump_header+0x15d/0xc3f [ 2332.751964] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2332.757049] ? ___ratelimit+0x319/0x590 [ 2332.761010] oom_kill_process.cold+0x10/0x692 [ 2332.765544] ? check_preemption_disabled+0x41/0x280 [ 2332.770561] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2332.775824] out_of_memory+0x1072/0x1390 [ 2332.779887] ? oom_killer_disable+0x270/0x270 [ 2332.784387] ? mutex_trylock+0x15f/0x1a0 [ 2332.788448] __alloc_pages_nodemask+0x23a2/0x2890 [ 2332.793288] ? find_get_entry+0x4cd/0x8a0 [ 2332.797444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2332.802283] alloc_pages_current+0x193/0x2a0 [ 2332.806674] filemap_fault+0x146e/0x2180 [ 2332.810721] ext4_filemap_fault+0x84/0xb0 [ 2332.814850] __do_fault+0x10b/0x4b0 [ 2332.818458] __handle_mm_fault+0x273b/0x41c0 [ 2332.822852] ? vm_insert_page+0x9c0/0x9c0 [ 2332.826991] ? check_preemption_disabled+0x41/0x280 [ 2332.831991] handle_mm_fault+0x436/0xb10 [ 2332.836039] __do_page_fault+0x68e/0xd60 [ 2332.840084] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2332.845084] ? spurious_fault+0x840/0x840 [ 2332.849216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2332.854043] ? page_fault+0x8/0x30 [ 2332.857565] page_fault+0x1e/0x30 [ 2332.860999] RIP: 0033:0x46b583 [ 2332.864175] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 2332.883153] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2332.888513] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2332.895946] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2332.903207] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2332.910471] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2332.917734] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2332.937273] Mem-Info: [ 2332.939721] active_anon:27780 inactive_anon:75862 isolated_anon:0 [ 2332.939721] active_file:80 inactive_file:1825 isolated_file:30 [ 2332.939721] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2332.939721] slab_reclaimable:13157 slab_unreclaimable:117647 [ 2332.939721] mapped:20133 shmem:89972 pagetables:567 bounce:0 [ 2332.939721] free:25136 free_pcp:392 free_cma:0 [ 2332.982077] Node 0 active_anon:108456kB inactive_anon:159064kB active_file:2576kB inactive_file:3996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78640kB dirty:84kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2333.047814] Node 1 active_anon:2612kB inactive_anon:144384kB active_file:40kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2264kB dirty:4kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2333.107304] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.157242] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2333.164240] Node 0 DMA32 free:37100kB min:35996kB low:44992kB high:53988kB active_anon:108456kB inactive_anon:155468kB active_file:1436kB inactive_file:1324kB unevictable:0kB writepending:84kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:1988kB bounce:0kB free_pcp:1644kB local_pcp:0kB free_cma:0kB [ 2333.287206] lowmem_reserve[]: 0 0 1 1 1 [ 2333.291220] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.357243] lowmem_reserve[]: 0 0 0 0 0 [ 2333.361263] Node 1 Normal free:53440kB min:53876kB low:67344kB high:80812kB active_anon:2612kB inactive_anon:144384kB active_file:40kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.427154] lowmem_reserve[]: 0 0 0 0 0 [ 2333.431174] Node 0 DMA: 6*4kB (UM) 5*8kB (UM) 0*16kB 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2333.448231] Bluetooth: hci5: command 0x0419 tx timeout [ 2333.461808] Node 0 DMA32: 850*4kB (ME) 557*8kB (ME) 301*16kB (UME) 165*32kB (UME) 88*64kB (UME) 33*128kB (UM) 11*256kB (M) 7*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36256kB [ 2333.479659] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2333.490793] Node 1 Normal: 556*4kB (UME) 436*8kB (ME) 217*16kB (ME) 103*32kB (ME) 48*64kB (ME) 12*128kB (M) 4*256kB (M) 1*512kB (U) 2*1024kB (ME) 2*2048kB (UM) 7*4096kB (U) = 53440kB [ 2333.508085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.516921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.525856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.534938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.543538] 90020 total pagecache pages [ 2333.548133] 0 pages in swap cache [ 2333.551592] Swap cache stats: add 0, delete 0, find 0/0 [ 2333.556945] Free swap = 0kB [ 2333.560141] Total swap = 0kB [ 2333.563240] 2097051 pages RAM [ 2333.566335] 0 pages HighMem/MovableOnly [ 2333.570361] 369649 pages reserved [ 2333.573806] 0 pages cma reserved [ 2333.577196] Unreclaimable slab info: [ 2333.580898] Name Used Total [ 2333.586431] pid_2 9KB 32KB [ 2333.591925] batadv_tt_change_cache 4KB 11KB [ 2333.598993] batadv_tl_cache 11KB 16KB [ 2333.604372] SMC 2KB 13KB [ 2333.609798] TIPC 21KB 37KB [ 2333.615165] SCTPv6 26KB 43KB [ 2333.620600] DCCPv6 20KB 37KB [ 2333.625958] DCCP 16KB 35KB [ 2333.632120] RXRPC 24KB 39KB [ 2333.640101] rxrpc_call_jar 150KB 165KB [ 2333.645586] bridge_fdb_cache 17KB 27KB [ 2333.651064] fib6_nodes 240KB 308KB [ 2333.656419] ip6_dst_cache 683KB 746KB [ 2333.661818] RAWv6 141KB 155KB [ 2333.667890] UDPv6 43KB 45KB [ 2333.673265] TCPv6 24KB 36KB [ 2333.678734] nf_conntrack 18KB 18KB [ 2333.684144] t10_alua_lu_gp_cache 0KB 3KB [ 2333.689818] sd_ext_cdb 0KB 7KB [ 2333.695175] scsi_sense_cache 1056KB 1060KB [ 2333.700630] virtio_scsi_cmd 16KB 16KB [ 2333.705991] sgpool-128 8KB 8KB [ 2333.711428] sgpool-64 4KB 12KB [ 2333.716781] sgpool-32 2KB 15KB [ 2333.725732] sgpool-16 1KB 7KB [ 2333.731136] sgpool-8 0KB 7KB [ 2333.736503] mqueue_inode_cache 15KB 30KB [ 2333.741986] bio_post_read_ctx 14KB 15KB [ 2333.748178] bio-2 14KB 15KB [ 2333.753540] jfs_mp 7KB 7KB [ 2333.759308] cifs_small_rq 15KB 16KB [ 2333.764673] cifs_request 67KB 67KB [ 2333.770316] cifs_mpx_ids 0KB 7KB [ 2333.775688] nfs_commit_data 3KB 14KB [ 2333.781474] nfs_write_data 34KB 44KB [ 2333.786863] ext4_system_zone 1KB 7KB [ 2333.793037] bio-1 1KB 7KB [ 2333.798471] pid_namespace 3KB 11KB [ 2333.803837] rpc_buffers 17KB 25KB [ 2333.809234] rpc_tasks 2KB 7KB [ 2333.814589] UNIX 2081KB 2163KB [ 2333.820022] tcp_bind_bucket 2KB 8KB [ 2333.825389] ip_fib_trie 39KB 47KB [ 2333.830786] ip_fib_alias 171KB 213KB [ 2333.836141] ip_dst_cache 12KB 28KB [ 2333.842939] RAW 91KB 120KB [ 2333.848350] UDP 69KB 101KB [ 2333.853709] TCP 11KB 16KB [ 2333.859094] hugetlbfs_inode_cache 3KB 15KB [ 2333.878155] fscache_cookie_jar 1KB 7KB [ 2333.883615] eventpoll_pwq 26KB 43KB [ 2333.926247] eventpoll_epi 47KB 63KB [ 2333.931688] inotify_inode_mark 5KB 7KB [ 2333.955251] request_queue 199KB 199KB [ 2334.023311] blkdev_requests 1KB 3KB [ 2334.086451] blkdev_ioc 23KB 42KB [ 2334.115395] bio-0 693KB 930KB [ 2334.176163] biovec-max 1683KB 1757KB [ 2334.216762] biovec-64 608KB 819KB [ 2334.253840] biovec-16 123KB 172KB [ 2334.286198] bio_integrity_payload 1KB 8KB [ 2334.325176] khugepaged_mm_slot 2KB 19KB [ 2334.353655] uid_cache 0KB 4KB [ 2334.383043] dmaengine-unmap-2 0KB 3KB [ 2334.408022] skbuff_fclone_cache 39KB 45KB [ 2334.413583] skbuff_head_cache 8812KB 9705KB [ 2334.529405] configfs_dir_cache 3KB 7KB [ 2334.534891] file_lock_ctx 9KB 11KB [ 2334.603427] fsnotify_mark_connector 2KB 3KB [ 2334.634224] net_namespace 113KB 131KB [ 2334.689181] shmem_inode_cache 7958KB 7991KB [ 2334.694578] task_delay_info 327KB 446KB [ 2334.787140] taskstats 19KB 38KB [ 2334.792533] proc_dir_entry 1119KB 1128KB [ 2334.861174] pde_opener 15KB 23KB [ 2334.866572] seq_file 239KB 354KB [ 2334.923346] sigqueue 54KB 82KB [ 2334.951803] kernfs_node_cache 18234KB 18258KB [ 2334.986833] mnt_cache 231KB 264KB [ 2334.992227] filp 7547KB 8287KB [ 2335.051717] names_cache 100104KB 100159KB [ 2335.089029] iint_cache 30KB 51KB [ 2335.094421] key_jar 4KB 7KB [ 2335.153086] uts_namespace 5KB 11KB [ 2335.185938] nsproxy 4KB 11KB [ 2335.212573] vm_area_struct 2611KB 3333KB [ 2335.256990] mm_struct 469KB 565KB [ 2335.262381] fs_cache 387KB 412KB [ 2335.322060] files_cache 1424KB 1470KB [ 2335.347800] signal_cache 2407KB 2695KB [ 2335.353177] sighand_cache 675KB 728KB [ 2335.430032] task_struct 9538KB 9626KB [ 2335.435427] cred_jar 2667KB 2944KB [ 2335.509322] anon_vma_chain 758KB 1441KB [ 2335.514709] anon_vma 137KB 234KB [ 2335.577929] pid 216KB 256KB [ 2335.583314] Acpi-Operand 156KB 198KB [ 2335.635919] Acpi-ParseExt 9KB 11KB [ 2335.663927] Acpi-Parse 41KB 47KB [ 2335.705363] Acpi-State 52KB 63KB [ 2335.739917] Acpi-Namespace 20KB 27KB [ 2335.745307] numa_policy 0KB 3KB [ 2335.784902] debug_objects_cache 2778KB 3129KB [ 2335.826620] trace_event_file 297KB 298KB [ 2335.832016] ftrace_event_field 398KB 401KB [ 2335.871542] pool_workqueue 151KB 160KB [ 2335.904481] page->ptl 400KB 1098KB [ 2335.927302] kmalloc-2097152 2050KB 2050KB [ 2335.932694] kmalloc-524288 2056KB 2056KB [ 2335.997626] kmalloc-262144 1290KB 1290KB [ 2336.003022] kmalloc-131072 650KB 650KB [ 2336.046583] kmalloc-65536 3432KB 3630KB [ 2336.066573] kmalloc-32768 2706KB 2772KB [ 2336.071956] kmalloc-16384 1435KB 1518KB [ 2336.123172] kmalloc-8192 5915KB 5973KB [ 2336.167461] kmalloc-4096 32006KB 32066KB [ 2336.172848] kmalloc-2048 19666KB 19928KB [ 2336.213291] kmalloc-1024 13442KB 14663KB [ 2336.259900] kmalloc-512 17246KB 19953KB [ 2336.265286] kmalloc-256 5986KB 6690KB [ 2336.327142] kmalloc-128 1448KB 1838KB [ 2336.332534] kmalloc-96 3552KB 5336KB [ 2336.393095] kmalloc-64 3215KB 5056KB [ 2336.429539] kmalloc-32 2056KB 3150KB [ 2336.435027] kmalloc-192 2685KB 3112KB [ 2336.497730] kmem_cache 177KB 180KB [ 2336.503125] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2336.599343] Killed process 27486 (syz-executor.4) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 2337.580152] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2337.680786] systemd-journal cpuset=/ mems_allowed=0-1 [ 2337.686023] CPU: 1 PID: 26836 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2337.693984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2337.703329] Call Trace: [ 2337.705917] dump_stack+0x1fc/0x2ef [ 2337.709544] dump_header+0x15d/0xc3f [ 2337.713260] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2337.718385] ? ___ratelimit+0x319/0x590 [ 2337.722359] oom_kill_process.cold+0x10/0x692 [ 2337.726853] ? check_preemption_disabled+0x41/0x280 [ 2337.731879] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2337.737155] out_of_memory+0x1072/0x1390 [ 2337.741220] ? oom_killer_disable+0x270/0x270 [ 2337.745712] ? mutex_trylock+0x15f/0x1a0 [ 2337.749773] __alloc_pages_nodemask+0x23a2/0x2890 [ 2337.754622] ? find_get_entry+0x4cd/0x8a0 [ 2337.758776] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2337.763640] alloc_pages_current+0x193/0x2a0 [ 2337.768046] filemap_fault+0x146e/0x2180 [ 2337.772118] ext4_filemap_fault+0x84/0xb0 [ 2337.776262] __do_fault+0x10b/0x4b0 [ 2337.779891] __handle_mm_fault+0x273b/0x41c0 [ 2337.784300] ? vm_insert_page+0x9c0/0x9c0 [ 2337.788459] ? check_preemption_disabled+0x41/0x280 [ 2337.793479] handle_mm_fault+0x436/0xb10 [ 2337.797541] __do_page_fault+0x68e/0xd60 [ 2337.801610] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2337.806624] ? spurious_fault+0x840/0x840 [ 2337.810773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2337.815619] ? page_fault+0x8/0x30 [ 2337.819156] page_fault+0x1e/0x30 [ 2337.822608] RIP: 0033:0x7f30fefa1930 [ 2337.826318] Code: Bad RIP value. [ 2337.829674] RSP: 002b:00007ffc55ea6758 EFLAGS: 00010287 [ 2337.835206] RAX: 0000000000000032 RBX: 0000000000000026 RCX: 0000000000000064 [ 2337.842476] RDX: 00005622175e0fe8 RSI: 00005622175e0fe8 RDI: 0000000000000027 [ 2337.849741] RBP: 0000000000000026 R08: 00000000000000fc R09: 0000000000000026 [ 2337.857004] R10: 0000000000000075 R11: 00000000fffffff6 R12: 00007ffc55ea69c0 [ 2337.864264] R13: 0000000000000027 R14: 00007ffc55ea6898 R15: 0000000000000001 [ 2337.885956] Mem-Info: [ 2337.900504] active_anon:27635 inactive_anon:75862 isolated_anon:0 [ 2337.900504] active_file:16 inactive_file:37 isolated_file:5 [ 2337.900504] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2337.900504] slab_reclaimable:13147 slab_unreclaimable:116814 [ 2337.900504] mapped:15190 shmem:89972 pagetables:525 bounce:0 [ 2337.900504] free:25132 free_pcp:68 free_cma:0 [ 2337.934304] Node 0 active_anon:107976kB inactive_anon:159064kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:58496kB dirty:0kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2337.967562] Node 1 active_anon:2564kB inactive_anon:144384kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2264kB dirty:0kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2338.000466] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2338.028860] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2338.033936] Node 0 DMA32 free:35448kB min:35996kB low:44992kB high:53988kB active_anon:107976kB inactive_anon:155468kB active_file:112kB inactive_file:480kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:1884kB bounce:0kB free_pcp:608kB local_pcp:360kB free_cma:0kB [ 2338.063696] lowmem_reserve[]: 0 0 1 1 1 [ 2338.067700] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2338.093751] lowmem_reserve[]: 0 0 0 0 0 [ 2338.100735] Node 1 Normal free:53692kB min:53876kB low:67344kB high:80812kB active_anon:2564kB inactive_anon:144384kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:216kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2338.135597] lowmem_reserve[]: 0 0 0 0 0 [ 2338.141044] Node 0 DMA: 6*4kB (UM) 5*8kB (UM) 0*16kB 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2338.195628] Node 0 DMA32: 1038*4kB (UME) 556*8kB (UME) 285*16kB (UME) 157*32kB (UME) 79*64kB (ME) 31*128kB (UM) 12*256kB (M) 8*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36424kB [ 2338.217008] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2338.231595] Node 1 Normal: 548*4kB (UME) 435*8kB (UME) 216*16kB (ME) 103*32kB (UME) 48*64kB (UME) 11*128kB (M) 4*256kB (M) 2*512kB (UM) 2*1024kB (ME) 2*2048kB (UM) 7*4096kB (U) = 53768kB [ 2338.251422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2338.263113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2338.273119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2338.283836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2338.292456] 90040 total pagecache pages [ 2338.296642] 0 pages in swap cache [ 2338.300087] Swap cache stats: add 0, delete 0, find 0/0 [ 2338.305446] Free swap = 0kB [ 2338.309169] Total swap = 0kB [ 2338.312193] 2097051 pages RAM [ 2338.321711] 0 pages HighMem/MovableOnly [ 2338.325703] 369649 pages reserved [ 2338.329433] 0 pages cma reserved [ 2338.332795] Unreclaimable slab info: [ 2338.341876] Name Used Total [ 2338.347605] pid_2 9KB 32KB [ 2338.353037] batadv_tt_change_cache 3KB 11KB [ 2338.363816] batadv_tl_cache 8KB 16KB [ 2338.369246] TIPC 19KB 37KB [ 2338.374615] SCTPv6 26KB 43KB [ 2338.405711] DCCPv6 17KB 37KB [ 2338.411176] DCCP 16KB 35KB [ 2338.431296] RXRPC 22KB 39KB [ 2338.436731] rxrpc_call_jar 150KB 165KB [ 2338.442094] bridge_fdb_cache 17KB 27KB [ 2338.452432] fib6_nodes 238KB 308KB [ 2338.457849] ip6_dst_cache 717KB 746KB [ 2338.463208] RAWv6 141KB 155KB [ 2338.472923] UDPv6 43KB 45KB [ 2338.478379] TCPv6 21KB 30KB [ 2338.483730] nf_conntrack 16KB 18KB [ 2338.490893] t10_alua_lu_gp_cache 0KB 3KB [ 2338.505984] sd_ext_cdb 0KB 7KB [ 2338.511363] scsi_sense_cache 1056KB 1060KB [ 2338.536111] virtio_scsi_cmd 16KB 16KB [ 2338.541509] sgpool-128 8KB 8KB [ 2338.556635] sgpool-64 4KB 12KB [ 2338.562016] sgpool-32 2KB 15KB [ 2338.576016] sgpool-16 1KB 7KB [ 2338.581394] sgpool-8 0KB 7KB [ 2338.592313] mqueue_inode_cache 15KB 30KB [ 2338.597853] bio_post_read_ctx 14KB 15KB [ 2338.603272] bio-2 14KB 15KB [ 2338.613623] jfs_mp 7KB 7KB [ 2338.619086] cifs_small_rq 15KB 16KB [ 2338.624443] cifs_request 67KB 67KB [ 2338.635180] cifs_mpx_ids 0KB 7KB [ 2338.642941] nfs_commit_data 3KB 14KB [ 2338.653219] nfs_write_data 34KB 44KB [ 2338.658696] ext4_system_zone 1KB 7KB [ 2338.664079] bio-1 1KB 7KB [ 2338.674089] pid_namespace 3KB 11KB [ 2338.679509] rpc_buffers 17KB 25KB [ 2338.684864] rpc_tasks 2KB 7KB [ 2338.690331] UNIX 2070KB 2148KB [ 2338.695716] tcp_bind_bucket 2KB 8KB [ 2338.701132] ip_fib_trie 38KB 47KB [ 2338.706566] ip_fib_alias 169KB 213KB [ 2338.711923] ip_dst_cache 16KB 28KB [ 2338.717323] RAW 90KB 120KB [ 2338.722678] UDP 67KB 101KB [ 2338.728112] TCP 8KB 11KB [ 2338.733481] hugetlbfs_inode_cache 3KB 15KB [ 2338.739324] fscache_cookie_jar 1KB 7KB [ 2338.744767] eventpoll_pwq 23KB 43KB [ 2338.750190] eventpoll_epi 42KB 63KB [ 2338.755546] inotify_inode_mark 5KB 7KB [ 2338.766274] request_queue 199KB 199KB [ 2338.771638] blkdev_requests 1KB 3KB [ 2338.777041] blkdev_ioc 19KB 42KB [ 2338.782397] bio-0 744KB 930KB [ 2338.787805] biovec-max 1683KB 1757KB [ 2338.794448] biovec-64 703KB 819KB [ 2338.804817] biovec-16 132KB 172KB [ 2338.810238] bio_integrity_payload 1KB 8KB [ 2338.820938] khugepaged_mm_slot 2KB 19KB [ 2338.826480] uid_cache 0KB 4KB [ 2338.831839] dmaengine-unmap-2 0KB 3KB [ 2338.842242] skbuff_fclone_cache 32KB 41KB [ 2338.847882] skbuff_head_cache 9175KB 9705KB [ 2338.853239] configfs_dir_cache 3KB 7KB [ 2338.863622] file_lock_ctx 9KB 11KB [ 2338.869032] fsnotify_mark_connector 2KB 3KB [ 2338.874912] net_namespace 113KB 131KB [ 2338.883058] shmem_inode_cache 7956KB 7991KB [ 2338.892141] task_delay_info 305KB 446KB [ 2338.939335] taskstats 14KB 38KB [ 2338.944711] proc_dir_entry 1110KB 1128KB [ 2338.982267] pde_opener 14KB 23KB [ 2339.012257] seq_file 233KB 354KB [ 2339.026255] sigqueue 49KB 82KB [ 2339.031627] kernfs_node_cache 18119KB 18210KB [ 2339.088440] mnt_cache 228KB 260KB [ 2339.093836] filp 7503KB 8287KB [ 2339.143425] names_cache 99560KB 99620KB [ 2339.165709] iint_cache 30KB 51KB [ 2339.212773] key_jar 4KB 7KB [ 2339.253014] uts_namespace 4KB 11KB [ 2339.291810] nsproxy 3KB 11KB [ 2339.321038] vm_area_struct 2605KB 3333KB [ 2339.390292] mm_struct 466KB 565KB [ 2339.425699] fs_cache 357KB 412KB [ 2339.456140] files_cache 1372KB 1470KB [ 2339.491288] signal_cache 2337KB 2695KB [ 2339.520563] sighand_cache 663KB 721KB [ 2339.556058] task_struct 9209KB 9298KB [ 2339.561438] cred_jar 2628KB 2944KB [ 2339.610412] anon_vma_chain 745KB 1441KB [ 2339.641659] anon_vma 124KB 231KB [ 2339.667693] pid 213KB 256KB [ 2339.673069] Acpi-Operand 156KB 198KB [ 2339.724934] Acpi-ParseExt 9KB 11KB [ 2339.754826] Acpi-Parse 41KB 47KB [ 2339.781052] Acpi-State 52KB 63KB [ 2339.816417] Acpi-Namespace 20KB 27KB [ 2339.821794] numa_policy 0KB 3KB [ 2339.880746] debug_objects_cache 2778KB 3129KB [ 2339.921917] trace_event_file 297KB 298KB [ 2339.943440] ftrace_event_field 398KB 401KB [ 2339.988534] pool_workqueue 151KB 160KB [ 2339.994007] page->ptl 398KB 1098KB [ 2340.041325] kmalloc-2097152 2050KB 2050KB [ 2340.074557] kmalloc-524288 2056KB 2056KB [ 2340.101562] kmalloc-262144 1290KB 1290KB [ 2340.140117] kmalloc-131072 650KB 650KB [ 2340.145511] kmalloc-65536 3432KB 3498KB [ 2340.196878] kmalloc-32768 2673KB 2706KB [ 2340.202319] kmalloc-16384 1435KB 1518KB [ 2340.232868] kmalloc-8192 5907KB 5956KB [ 2340.256871] kmalloc-4096 31628KB 31671KB [ 2340.262248] kmalloc-2048 19692KB 19928KB [ 2340.305041] kmalloc-1024 13618KB 14663KB [ 2340.323170] kmalloc-512 17736KB 19953KB [ 2340.333575] kmalloc-256 5972KB 6690KB [ 2340.359630] kmalloc-128 1442KB 1838KB [ 2340.365046] kmalloc-96 3604KB 5336KB [ 2340.370466] kmalloc-64 3203KB 5056KB [ 2340.389945] kmalloc-32 2056KB 3150KB [ 2340.395320] kmalloc-192 2661KB 3112KB [ 2340.400753] kmem_cache 177KB 180KB [ 2340.420509] Out of memory (oom_kill_allocating_task): Kill process 26836 (systemd-journal) score 0 or sacrifice child [ 2340.432192] Killed process 26836 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2272kB [ 2340.458142] oom_reaper: reaped process 26836 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2272kB [ 2340.474524] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2340.517461] systemd cpuset=/ mems_allowed=0-1 [ 2340.521996] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 2340.528913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2340.538306] Call Trace: [ 2340.540917] dump_stack+0x1fc/0x2ef [ 2340.544552] dump_header+0x15d/0xc3f [ 2340.548270] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2340.553376] ? ___ratelimit+0x319/0x590 [ 2340.557355] oom_kill_process.cold+0x10/0x692 [ 2340.561852] ? lock_downgrade+0x720/0x720 [ 2340.566002] ? check_preemption_disabled+0x41/0x280 [ 2340.571025] out_of_memory+0x34d/0x1390 [ 2340.575006] ? oom_killer_disable+0x270/0x270 [ 2340.579502] ? mutex_trylock+0x15f/0x1a0 [ 2340.583566] __alloc_pages_nodemask+0x23a2/0x2890 [ 2340.588414] ? find_get_entry+0x4cd/0x8a0 [ 2340.592569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2340.597439] alloc_pages_current+0x193/0x2a0 [ 2340.601849] filemap_fault+0x146e/0x2180 [ 2340.605925] ext4_filemap_fault+0x84/0xb0 [ 2340.610070] __do_fault+0x10b/0x4b0 [ 2340.613693] ? do_raw_spin_unlock+0x171/0x230 [ 2340.618190] __handle_mm_fault+0x273b/0x41c0 [ 2340.622599] ? vm_insert_page+0x9c0/0x9c0 [ 2340.626751] ? fsnotify+0x84e/0xe10 [ 2340.630392] ? check_preemption_disabled+0x41/0x280 [ 2340.635416] handle_mm_fault+0x436/0xb10 [ 2340.639481] __do_page_fault+0x68e/0xd60 [ 2340.643546] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2340.648559] ? spurious_fault+0x840/0x840 [ 2340.652710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2340.657556] ? page_fault+0x8/0x30 [ 2340.661099] page_fault+0x1e/0x30 [ 2340.664549] RIP: 0033:0x7f81603803a0 [ 2340.668257] Code: Bad RIP value. [ 2340.671620] RSP: 002b:00007fff0eb18a98 EFLAGS: 00010206 [ 2340.676980] RAX: 00007f81606a05c0 RBX: 0000000000000018 RCX: 00007fff0eb18cb0 [ 2340.684243] RDX: 0000000000000017 RSI: 00007fff0eb18cb0 RDI: 00007fff0eb18aa0 [ 2340.691508] RBP: 00007fff0eb18cb0 R08: 0000000000000000 R09: 00005563ee203578 [ 2340.698780] R10: 00005563ee203540 R11: 0000000000000000 R12: 00007fff0eb18aa0 [ 2340.706054] R13: 00007f8161b23ea9 R14: 00007fff0eb18bd8 R15: 0000000000000001 [ 2341.007207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2341.013935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2341.120908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2341.166216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2341.223867] device bridge_slave_1 left promiscuous mode [ 2341.266781] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.277162] Mem-Info: [ 2341.279624] active_anon:27517 inactive_anon:75861 isolated_anon:0 [ 2341.279624] active_file:3 inactive_file:23 isolated_file:0 [ 2341.279624] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2341.279624] slab_reclaimable:13122 slab_unreclaimable:115849 [ 2341.279624] mapped:14623 shmem:89972 pagetables:501 bounce:0 [ 2341.279624] free:25199 free_pcp:2 free_cma:0 [ 2341.312873] device bridge_slave_0 left promiscuous mode [ 2341.312986] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.405482] Node 0 active_anon:107956kB inactive_anon:159064kB active_file:164kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:58392kB dirty:0kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2341.436614] Node 1 active_anon:2112kB inactive_anon:144380kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2341.472288] device veth1_macvtap left promiscuous mode [ 2341.477766] device veth0_macvtap left promiscuous mode [ 2341.478022] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2341.483085] device veth1_vlan left promiscuous mode [ 2341.510254] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2341.519697] Node 0 DMA32 free:35744kB min:35996kB low:44992kB high:53988kB active_anon:107956kB inactive_anon:155468kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1884kB bounce:0kB free_pcp:880kB local_pcp:400kB free_cma:0kB [ 2341.521155] device veth0_vlan left promiscuous mode [ 2341.550278] lowmem_reserve[]: 0 0 1 1 1 [ 2341.580217] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2341.612486] lowmem_reserve[]: 0 0 0 0 0 [ 2341.616881] Node 1 Normal free:53732kB min:53876kB low:67344kB high:80812kB active_anon:2112kB inactive_anon:144380kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:120kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2341.650828] lowmem_reserve[]: 0 0 0 0 0 [ 2341.654816] Node 0 DMA: 5*4kB (M) 6*8kB (UM) 0*16kB 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10980kB [ 2341.679258] Node 0 DMA32: 1045*4kB (UME) 579*8kB (UME) 292*16kB (UME) 158*32kB (UME) 81*64kB (UME) 31*128kB (UM) 12*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 36396kB [ 2341.700673] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2341.711772] Node 1 Normal: 508*4kB (ME) 403*8kB (ME) 198*16kB (ME) 92*32kB (UME) 38*64kB (ME) 18*128kB (M) 7*256kB (UM) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 7*4096kB (U) = 53736kB [ 2341.733515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2341.742556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2341.760443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2341.773966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2341.784287] 90039 total pagecache pages [ 2341.791635] 0 pages in swap cache [ 2341.795085] Swap cache stats: add 0, delete 0, find 0/0 [ 2341.804966] Free swap = 0kB [ 2341.811456] Total swap = 0kB [ 2341.814475] 2097051 pages RAM [ 2341.819382] 0 pages HighMem/MovableOnly [ 2341.823347] 369649 pages reserved [ 2341.830279] 0 pages cma reserved [ 2341.833639] Unreclaimable slab info: [ 2341.839052] Name Used Total [ 2341.844620] pid_2 8KB 32KB [ 2341.854749] batadv_tt_change_cache 4KB 11KB [ 2341.874751] batadv_tl_cache 8KB 16KB [ 2341.892626] TIPC 19KB 37KB [ 2341.920669] SCTPv6 26KB 43KB [ 2341.936135] DCCPv6 17KB 37KB [ 2341.941516] DCCP 16KB 35KB [ 2341.973781] RXRPC 22KB 39KB [ 2341.979416] rxrpc_call_jar 150KB 165KB [ 2341.984781] bridge_fdb_cache 17KB 27KB [ 2341.990194] fib6_nodes 237KB 308KB [ 2341.995636] ip6_dst_cache 734KB 746KB [ 2342.001003] RAWv6 141KB 155KB [ 2342.006396] UDPv6 43KB 45KB [ 2342.011789] TCPv6 21KB 30KB [ 2342.017192] nf_conntrack 15KB 18KB [ 2342.022610] t10_alua_lu_gp_cache 0KB 3KB [ 2342.028263] sd_ext_cdb 0KB 7KB [ 2342.033625] scsi_sense_cache 1056KB 1060KB [ 2342.117624] virtio_scsi_cmd 16KB 16KB [ 2342.123029] sgpool-128 8KB 8KB [ 2342.186513] sgpool-64 4KB 12KB [ 2342.191907] sgpool-32 2KB 15KB [ 2342.249685] sgpool-16 1KB 7KB [ 2342.279900] sgpool-8 0KB 7KB [ 2342.313574] mqueue_inode_cache 15KB 30KB [ 2342.344132] bio_post_read_ctx 14KB 15KB [ 2342.387767] bio-2 14KB 15KB [ 2342.393152] jfs_mp 7KB 7KB [ 2342.455125] cifs_small_rq 15KB 16KB [ 2342.460509] cifs_request 67KB 67KB [ 2342.498982] cifs_mpx_ids 0KB 7KB [ 2342.504384] nfs_commit_data 3KB 14KB [ 2342.554145] nfs_write_data 34KB 44KB [ 2342.588178] ext4_system_zone 1KB 7KB [ 2342.593583] bio-1 1KB 7KB [ 2342.658114] pid_namespace 3KB 11KB [ 2342.663508] rpc_buffers 17KB 25KB [ 2342.724217] rpc_tasks 2KB 7KB [ 2342.763033] UNIX 2060KB 2133KB [ 2342.791206] tcp_bind_bucket 1KB 8KB [ 2342.812792] ip_fib_trie 36KB 47KB [ 2342.820723] ip_fib_alias 167KB 213KB [ 2342.853945] ip_dst_cache 15KB 28KB [ 2342.892509] RAW 90KB 120KB [ 2342.919264] UDP 65KB 101KB [ 2342.924644] TCP 8KB 11KB [ 2342.930052] hugetlbfs_inode_cache 3KB 15KB [ 2342.949529] fscache_cookie_jar 1KB 7KB [ 2342.962253] eventpoll_pwq 20KB 43KB [ 2342.974636] eventpoll_epi 37KB 63KB [ 2342.995123] inotify_inode_mark 5KB 7KB [ 2343.000582] request_queue 199KB 199KB [ 2343.020400] blkdev_requests 1KB 3KB [ 2343.025887] blkdev_ioc 19KB 42KB [ 2343.031249] bio-0 786KB 930KB [ 2343.051171] biovec-max 1683KB 1757KB [ 2343.063878] biovec-64 730KB 819KB [ 2343.083716] biovec-16 132KB 172KB [ 2343.089151] bio_integrity_payload 1KB 8KB [ 2343.113140] khugepaged_mm_slot 2KB 19KB [ 2343.136077] uid_cache 0KB 4KB [ 2343.141451] dmaengine-unmap-2 0KB 3KB [ 2343.153875] skbuff_fclone_cache 25KB 41KB [ 2343.177452] skbuff_head_cache 9495KB 9705KB [ 2343.182840] configfs_dir_cache 3KB 7KB [ 2343.209377] file_lock_ctx 9KB 11KB [ 2343.214761] fsnotify_mark_connector 2KB 3KB [ 2343.239431] net_namespace 113KB 131KB [ 2343.251996] shmem_inode_cache 7955KB 7991KB [ 2343.280477] task_delay_info 298KB 446KB [ 2343.299180] taskstats 13KB 38KB [ 2343.304560] proc_dir_entry 1107KB 1128KB [ 2343.313645] pde_opener 14KB 23KB [ 2343.319137] seq_file 230KB 354KB [ 2343.324503] sigqueue 44KB 82KB [ 2343.347632] kernfs_node_cache 18008KB 18163KB [ 2343.353002] mnt_cache 226KB 260KB [ 2343.368409] filp 7408KB 8287KB [ 2343.373785] names_cache 98498KB 98557KB [ 2343.383851] iint_cache 29KB 51KB [ 2343.392902] key_jar 4KB 7KB [ 2343.404441] uts_namespace 4KB 11KB [ 2343.413476] nsproxy 3KB 11KB [ 2343.424018] vm_area_struct 2593KB 3333KB [ 2343.433107] mm_struct 456KB 565KB [ 2343.449673] fs_cache 346KB 412KB [ 2343.458407] files_cache 1331KB 1466KB [ 2343.463774] signal_cache 2291KB 2688KB [ 2343.534809] sighand_cache 663KB 721KB [ 2343.540199] task_struct 9096KB 9184KB [ 2343.617675] cred_jar 2574KB 2944KB [ 2343.623069] anon_vma_chain 740KB 1433KB [ 2343.682155] anon_vma 114KB 231KB [ 2343.712172] pid 201KB 256KB [ 2343.742773] Acpi-Operand 156KB 198KB [ 2343.780646] Acpi-ParseExt 9KB 11KB [ 2343.809270] Acpi-Parse 41KB 47KB [ 2343.814662] Acpi-State 52KB 63KB [ 2343.914739] Acpi-Namespace 20KB 27KB [ 2343.920127] numa_policy 0KB 3KB [ 2343.997658] debug_objects_cache 2778KB 3129KB [ 2344.003230] trace_event_file 297KB 298KB [ 2344.064850] ftrace_event_field 398KB 401KB [ 2344.070353] pool_workqueue 151KB 160KB [ 2344.132703] page->ptl 395KB 1098KB [ 2344.163512] kmalloc-2097152 2050KB 2050KB [ 2344.199428] kmalloc-524288 2056KB 2056KB [ 2344.240706] kmalloc-262144 1290KB 1290KB [ 2344.273307] kmalloc-131072 650KB 650KB [ 2344.292331] kmalloc-65536 3432KB 3498KB [ 2344.336117] kmalloc-32768 2673KB 2673KB [ 2344.341528] kmalloc-16384 1435KB 1518KB [ 2344.399746] kmalloc-8192 5907KB 5940KB [ 2344.433151] kmalloc-4096 31569KB 31569KB [ 2344.474268] kmalloc-2048 19692KB 19928KB [ 2344.508482] kmalloc-1024 13739KB 14663KB [ 2344.513874] kmalloc-512 18225KB 19953KB [ 2344.572935] kmalloc-256 5972KB 6690KB [ 2344.614553] kmalloc-128 1440KB 1838KB [ 2344.619963] kmalloc-96 3634KB 5336KB [ 2344.675177] kmalloc-64 3191KB 5056KB [ 2344.680576] kmalloc-32 2056KB 3150KB [ 2344.739714] kmalloc-192 2637KB 3112KB [ 2344.777102] kmem_cache 177KB 180KB [ 2344.782494] Out of memory: Kill process 27456 (syz-executor.5) score 1001 or sacrifice child [ 2344.801912] Killed process 27460 (syz-executor.5) total-vm:60812kB, anon-rss:520kB, file-rss:14340kB, shmem-rss:80kB [ 2344.813094] oom_reaper: reaped process 27460 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 2345.034927] rs:main Q:Reg invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2345.056581] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 2345.061633] CPU: 0 PID: 26840 Comm: rs:main Q:Reg Not tainted 4.19.211-syzkaller #0 [ 2345.069419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2345.078763] Call Trace: [ 2345.081351] dump_stack+0x1fc/0x2ef [ 2345.084984] dump_header+0x15d/0xc3f [ 2345.088703] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2345.093807] ? ___ratelimit+0x319/0x590 [ 2345.097786] oom_kill_process.cold+0x10/0x692 [ 2345.102291] ? check_preemption_disabled+0x41/0x280 [ 2345.107314] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2345.112594] out_of_memory+0x1072/0x1390 [ 2345.116671] ? oom_killer_disable+0x270/0x270 [ 2345.121174] ? mutex_trylock+0x15f/0x1a0 [ 2345.125245] __alloc_pages_nodemask+0x23a2/0x2890 [ 2345.130099] ? find_get_entry+0x4cd/0x8a0 [ 2345.134263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2345.139129] alloc_pages_current+0x193/0x2a0 [ 2345.143541] filemap_fault+0x146e/0x2180 [ 2345.147615] ext4_filemap_fault+0x84/0xb0 [ 2345.151763] __do_fault+0x10b/0x4b0 [ 2345.155399] __handle_mm_fault+0x273b/0x41c0 [ 2345.159813] ? vm_insert_page+0x9c0/0x9c0 [ 2345.163959] ? lock_downgrade+0x720/0x720 [ 2345.168117] ? check_preemption_disabled+0x41/0x280 [ 2345.173138] handle_mm_fault+0x436/0xb10 [ 2345.177204] __do_page_fault+0x68e/0xd60 [ 2345.181282] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2345.186306] ? spurious_fault+0x840/0x840 [ 2345.190453] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2345.195299] ? page_fault+0x8/0x30 [ 2345.198835] page_fault+0x1e/0x30 [ 2345.202286] RIP: 0033:0x55da32e26b0f [ 2345.206005] Code: Bad RIP value. [ 2345.209359] RSP: 002b:00007fcd21c32b30 EFLAGS: 00010246 [ 2345.214716] RAX: 0000000000000000 RBX: 00007fcd14002080 RCX: 0000000000000001 [ 2345.221977] RDX: 00007fcd14000078 RSI: 0000000000000000 RDI: 00007fcd14002168 [ 2345.229240] RBP: 00007fcd21c32b80 R08: 000055da3438b0b0 R09: 0000000000000000 [ 2345.236507] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 2345.243779] R13: 00007fcd21c32b90 R14: 000055da330a7bec R15: 000055da3438ad70 [ 2345.253641] Mem-Info: [ 2345.256214] active_anon:27493 inactive_anon:75861 isolated_anon:0 [ 2345.256214] active_file:35 inactive_file:26 isolated_file:3 [ 2345.256214] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2345.256214] slab_reclaimable:13122 slab_unreclaimable:115563 [ 2345.256214] mapped:14598 shmem:89972 pagetables:502 bounce:0 [ 2345.256214] free:13865 free_pcp:129 free_cma:0 [ 2345.289719] Node 0 active_anon:107860kB inactive_anon:159064kB active_file:60kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:58392kB dirty:0kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2345.340840] Node 1 active_anon:2112kB inactive_anon:144380kB active_file:80kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2345.370455] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.407784] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2345.424430] Node 0 DMA32 free:17852kB min:35996kB low:44992kB high:53988kB active_anon:107860kB inactive_anon:155468kB active_file:60kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.453300] lowmem_reserve[]: 0 0 1 1 1 [ 2345.457479] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.483523] lowmem_reserve[]: 0 0 0 0 0 [ 2345.490739] Node 1 Normal free:27088kB min:53876kB low:67344kB high:80812kB active_anon:2112kB inactive_anon:144380kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.519341] lowmem_reserve[]: 0 0 0 0 0 [ 2345.523328] Node 0 DMA: 5*4kB (M) 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2345.538792] Node 0 DMA32: 914*4kB (UME) 471*8kB (UME) 224*16kB (UME) 103*32kB (UME) 33*64kB (ME) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17952kB [ 2345.553657] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2345.569672] Node 1 Normal: 497*4kB (ME) 402*8kB (ME) 198*16kB (UME) 90*32kB (ME) 39*64kB (ME) 19*128kB (UM) 6*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (M) 1*4096kB (U) = 26932kB [ 2345.591101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2345.596614] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.605698] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.620060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2345.652531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2345.678620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2345.699552] 90029 total pagecache pages [ 2345.703531] 0 pages in swap cache [ 2345.713462] Swap cache stats: add 0, delete 0, find 0/0 [ 2345.723846] Free swap = 0kB [ 2345.726923] Total swap = 0kB [ 2345.729934] 2097051 pages RAM [ 2345.733029] 0 pages HighMem/MovableOnly [ 2345.742136] 369649 pages reserved [ 2345.745929] 0 pages cma reserved [ 2345.749297] Unreclaimable slab info: [ 2345.753009] Name Used Total [ 2345.765737] pid_2 8KB 32KB [ 2345.771180] batadv_tt_change_cache 4KB 11KB [ 2345.780366] batadv_tl_cache 8KB 16KB [ 2345.787727] TIPC 19KB 37KB [ 2345.793099] SCTPv6 26KB 43KB [ 2345.840150] DCCPv6 17KB 37KB [ 2345.845609] DCCP 16KB 35KB [ 2345.850996] RXRPC 22KB 39KB [ 2345.873274] rxrpc_call_jar 150KB 165KB [ 2345.878896] bridge_fdb_cache 16KB 27KB [ 2345.894973] fib6_nodes 237KB 308KB [ 2345.900346] ip6_dst_cache 734KB 746KB [ 2345.911002] RAWv6 141KB 155KB [ 2345.923321] UDPv6 43KB 45KB [ 2345.928927] TCPv6 21KB 30KB [ 2345.934506] nf_conntrack 15KB 18KB [ 2345.940271] t10_alua_lu_gp_cache 0KB 3KB [ 2345.944398] syz-executor.5: vmalloc: allocation failure, allocated 1101819904 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2345.946008] sd_ext_cdb 0KB 7KB [ 2345.965177] scsi_sense_cache 1056KB 1060KB [ 2345.970544] virtio_scsi_cmd 16KB 16KB [ 2345.975969] sgpool-128 8KB 8KB [ 2345.981418] sgpool-64 4KB 12KB [ 2345.986743] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2345.986896] sgpool-32 2KB 15KB [ 2345.991879] CPU: 1 PID: 27460 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2345.997236] sgpool-16 1KB 7KB [ 2346.005160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2346.005165] Call Trace: [ 2346.005188] dump_stack+0x1fc/0x2ef [ 2346.005207] warn_alloc.cold+0x7b/0x18f [ 2346.010544] sgpool-8 0KB 7KB [ 2346.019885] ? zone_watermark_ok_safe+0x260/0x260 [ 2346.019908] ? policy_node+0x116/0x140 [ 2346.022471] mqueue_inode_cache 15KB 30KB [ 2346.026077] ? __sanitizer_cov_trace_pc+0x37/0x50 [ 2346.026103] __vmalloc_area_node+0x4fd/0x780 [ 2346.030048] bio_post_read_ctx 14KB 15KB [ 2346.035396] ? __vmalloc_node_range+0x180/0x180 [ 2346.035415] ? _raw_spin_unlock+0x29/0x40 [ 2346.040285] bio-2 14KB 15KB [ 2346.044106] ? __get_vm_area_node+0x2e2/0x3a0 [ 2346.049550] jfs_mp 7KB 7KB [ 2346.054367] __vmalloc_node_range+0xed/0x180 [ 2346.054386] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2346.058788] cifs_small_rq 15KB 16KB [ 2346.064112] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2346.068775] cifs_request 67KB 67KB [ 2346.072892] vmalloc_user+0x70/0xe0 [ 2346.078250] cifs_mpx_ids 0KB 7KB [ 2346.082715] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2346.088093] nfs_commit_data 3KB 14KB [ 2346.092445] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2346.096766] nfs_write_data 34KB 44KB [ 2346.102095] __vb2_queue_alloc+0x472/0xe60 [ 2346.107482] ext4_system_zone 1KB 7KB [ 2346.112792] vb2_core_create_bufs+0x273/0x7e0 [ 2346.116421] bio-1 1KB 7KB [ 2346.121733] ? __vb2_queue_free+0x870/0x870 [ 2346.126916] pid_namespace 3KB 11KB [ 2346.132241] ? __video_do_ioctl+0x632/0xcd0 [ 2346.132262] ? __mutex_lock+0x368/0x1190 [ 2346.136407] rpc_buffers 17KB 25KB [ 2346.141730] vb2_create_bufs+0x332/0x620 [ 2346.145956] rpc_tasks 2KB 7KB [ 2346.151291] ? mark_held_locks+0xf0/0xf0 [ 2346.155778] UNIX 2051KB 2130KB [ 2346.161106] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2346.165428] tcp_bind_bucket 1KB 8KB [ 2346.170754] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2346.175074] ip_fib_trie 36KB 47KB [ 2346.179118] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2346.184467] ip_fib_alias 167KB 213KB [ 2346.188504] v4l_create_bufs+0xb2/0x160 [ 2346.193836] ip_dst_cache 13KB 28KB [ 2346.197882] __video_do_ioctl+0x49a/0xcd0 [ 2346.197904] ? v4l_querycap+0x340/0x340 [ 2346.203241] RAW 90KB 120KB [ 2346.208342] ? __might_fault+0x192/0x1d0 [ 2346.208361] ? v4l_querycap+0x340/0x340 [ 2346.208379] video_usercopy+0x13f/0xfa0 [ 2346.213722] UDP 65KB 101KB [ 2346.219079] ? v4l_enumstd+0x60/0x60 [ 2346.219092] ? do_futex+0x171/0x1880 [ 2346.219110] ? mark_held_locks+0xf0/0xf0 [ 2346.224484] TCP 8KB 11KB [ 2346.229645] ? debug_check_no_obj_freed+0x201/0x490 [ 2346.235008] hugetlbfs_inode_cache 3KB 15KB [ 2346.238950] ? video_usercopy+0xfa0/0xfa0 [ 2346.244312] fscache_cookie_jar 1KB 7KB [ 2346.248412] v4l2_ioctl+0x147/0x1a0 [ 2346.248428] ? video_devdata+0xa0/0xa0 [ 2346.252380] eventpoll_pwq 20KB 43KB [ 2346.257745] do_vfs_ioctl+0xcdb/0x12e0 [ 2346.257763] ? lock_downgrade+0x720/0x720 [ 2346.257785] ? check_preemption_disabled+0x41/0x280 [ 2346.261824] eventpoll_epi 37KB 63KB [ 2346.265781] ? ioctl_preallocate+0x200/0x200 [ 2346.265798] ? __fget+0x356/0x510 [ 2346.265815] ? do_dup2+0x450/0x450 [ 2346.269774] inotify_inode_mark 5KB 7KB [ 2346.275129] ? __se_sys_futex+0x298/0x3b0 [ 2346.275151] ksys_ioctl+0x9b/0xc0 [ 2346.275168] __x64_sys_ioctl+0x6f/0xb0 [ 2346.278858] request_queue 199KB 199KB [ 2346.282560] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2346.286616] blkdev_requests 1KB 3KB [ 2346.291951] do_syscall_64+0xf9/0x620 [ 2346.296972] blkdev_ioc 19KB 42KB [ 2346.302746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2346.306888] bio-0 803KB 930KB [ 2346.312294] RIP: 0033:0x7f579755f0f9 [ 2346.315915] biovec-max 1683KB 1757KB [ 2346.319789] Code: Bad RIP value. [ 2346.325180] biovec-64 730KB 819KB [ 2346.329001] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2346.333139] biovec-16 132KB 172KB [ 2346.338133] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2346.338142] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2346.338149] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2346.338157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2346.338169] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2346.343531] bio_integrity_payload 1KB 8KB [ 2346.366668] Mem-Info: [ 2346.458610] khugepaged_mm_slot 2KB 19KB [ 2346.469291] active_anon:27494 inactive_anon:75861 isolated_anon:0 [ 2346.469291] active_file:16 inactive_file:18 isolated_file:0 [ 2346.469291] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2346.469291] slab_reclaimable:13113 slab_unreclaimable:115504 [ 2346.469291] mapped:14598 shmem:89972 pagetables:505 bounce:0 [ 2346.469291] free:13804 free_pcp:54 free_cma:0 [ 2346.512438] uid_cache 0KB 4KB [ 2346.554277] dmaengine-unmap-2 0KB 3KB [ 2346.559663] skbuff_fclone_cache 23KB 41KB [ 2346.566626] Node 0 active_anon:107856kB inactive_anon:159064kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58392kB dirty:0kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2346.570021] skbuff_head_cache 9760KB 9761KB [ 2346.607840] configfs_dir_cache 3KB 7KB [ 2346.616290] Node 1 active_anon:2120kB inactive_anon:144380kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2346.622884] file_lock_ctx 9KB 11KB [ 2346.656226] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.672047] fsnotify_mark_connector 2KB 3KB [ 2346.694605] net_namespace 113KB 131KB [ 2346.699986] shmem_inode_cache 7953KB 7991KB [ 2346.712325] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2346.714113] task_delay_info 294KB 446KB [ 2346.722060] Node 0 DMA32 free:17700kB min:35996kB low:44992kB high:53988kB active_anon:107856kB inactive_anon:155468kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1884kB bounce:0kB free_pcp:196kB local_pcp:196kB free_cma:0kB [ 2346.722790] taskstats 13KB 38KB [ 2346.771286] proc_dir_entry 1106KB 1128KB [ 2346.773505] lowmem_reserve[]: 0 0 1 1 1 [ 2346.779849] pde_opener 13KB 23KB [ 2346.803147] seq_file 227KB 354KB [ 2346.803620] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.808627] sigqueue 43KB 82KB [ 2346.853042] kernfs_node_cache 17982KB 18155KB [ 2346.858455] mnt_cache 225KB 256KB [ 2346.861200] lowmem_reserve[]: 0 0 0 0 0 [ 2346.863812] filp 7346KB 8283KB [ 2346.868119] Node 1 Normal free:26692kB min:53876kB low:67344kB high:80812kB active_anon:2120kB inactive_anon:144380kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.884036] names_cache 98039KB 98098KB [ 2346.922349] iint_cache 29KB 51KB [ 2346.926853] lowmem_reserve[]: 0 0 0 0 0 [ 2346.931694] Node 0 DMA: 5*4kB (M) 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2346.932232] key_jar 4KB 7KB [ 2346.962434] Node 0 DMA32: 890*4kB (UME) 449*8kB (UME) 224*16kB (UME) 103*32kB (UME) 33*64kB (ME) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17680kB [ 2346.973522] uts_namespace 4KB 11KB [ 2346.997486] nsproxy 3KB 11KB [ 2346.999394] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2347.002867] vm_area_struct 2571KB 3329KB [ 2347.031459] Node 1 Normal: 503*4kB (UME) 403*8kB (UME) 197*16kB (ME) 90*32kB (ME) 39*64kB (ME) 19*128kB (UM) 7*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 26692kB [ 2347.033446] mm_struct 455KB 565KB [ 2347.068443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2347.072685] fs_cache 341KB 412KB [ 2347.092901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2347.099222] files_cache 1290KB 1466KB [ 2347.120100] signal_cache 2262KB 2688KB [ 2347.123479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2347.133104] sighand_cache 663KB 721KB [ 2347.151364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2347.158157] task_struct 8944KB 9033KB [ 2347.180570] 90006 total pagecache pages [ 2347.184387] cred_jar 2550KB 2944KB [ 2347.189604] 0 pages in swap cache [ 2347.190515] anon_vma_chain 737KB 1425KB [ 2347.193440] Swap cache stats: add 0, delete 0, find 0/0 [ 2347.212212] anon_vma 112KB 231KB [ 2347.221111] pid 199KB 256KB [ 2347.232540] Free swap = 0kB [ 2347.237113] Acpi-Operand 156KB 198KB [ 2347.242938] Acpi-ParseExt 9KB 11KB [ 2347.243383] Total swap = 0kB [ 2347.262173] Acpi-Parse 41KB 47KB [ 2347.271449] Acpi-State 52KB 63KB [ 2347.273118] 2097051 pages RAM [ 2347.290468] Acpi-Namespace 20KB 27KB [ 2347.301659] 0 pages HighMem/MovableOnly [ 2347.302990] numa_policy 0KB 3KB [ 2347.310771] 369649 pages reserved [ 2347.317185] debug_objects_cache 2778KB 3129KB [ 2347.322734] trace_event_file 297KB 298KB [ 2347.339180] 0 pages cma reserved [ 2347.360681] ftrace_event_field 398KB 401KB [ 2347.371510] pool_workqueue 151KB 160KB [ 2347.411045] page->ptl 391KB 1095KB [ 2347.427891] kmalloc-2097152 2050KB 2050KB [ 2347.433277] kmalloc-524288 2056KB 2056KB [ 2347.480994] kmalloc-262144 1290KB 1290KB [ 2347.493065] kmalloc-131072 650KB 650KB [ 2347.512406] kmalloc-65536 3432KB 3498KB [ 2347.521821] kmalloc-32768 2673KB 2673KB [ 2347.537929] kmalloc-16384 1435KB 1518KB [ 2347.543304] kmalloc-8192 5907KB 5923KB [ 2347.552269] kmalloc-4096 31488KB 31488KB [ 2347.571896] kmalloc-2048 19679KB 19928KB [ 2347.580929] kmalloc-1024 13915KB 14663KB [ 2347.599752] kmalloc-512 18630KB 19953KB [ 2347.620599] kmalloc-256 5972KB 6690KB [ 2347.661171] kmalloc-128 1438KB 1838KB [ 2347.694097] kmalloc-96 3664KB 5336KB [ 2347.699473] kmalloc-64 3179KB 5056KB [ 2347.723756] kmalloc-32 2067KB 3150KB [ 2347.747173] kmalloc-192 2613KB 3112KB [ 2347.752549] kmem_cache 177KB 180KB [ 2347.788845] Out of memory (oom_kill_allocating_task): Kill process 26840 (rs:main Q:Reg) score 0 or sacrifice child [ 2347.821453] Killed process 26837 (rsyslogd) total-vm:254332kB, anon-rss:840kB, file-rss:0kB, shmem-rss:0kB [ 2347.832846] oom_reaper: reaped process 26837 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2347.857248] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2347.902408] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2347.934952] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2347.942424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2347.951779] Call Trace: [ 2347.954384] dump_stack+0x1fc/0x2ef [ 2347.958023] dump_header+0x15d/0xc3f [ 2347.961745] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2347.966853] ? ___ratelimit+0x319/0x590 [ 2347.970836] oom_kill_process.cold+0x10/0x692 [ 2347.975338] ? check_preemption_disabled+0x41/0x280 [ 2347.980362] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2347.985644] out_of_memory+0x1072/0x1390 [ 2347.989714] ? oom_killer_disable+0x270/0x270 [ 2347.994217] ? mutex_trylock+0x15f/0x1a0 [ 2347.998288] __alloc_pages_nodemask+0x23a2/0x2890 [ 2348.003143] ? find_get_entry+0x4cd/0x8a0 [ 2348.007305] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2348.012178] alloc_pages_current+0x193/0x2a0 [ 2348.016597] filemap_fault+0x146e/0x2180 [ 2348.020675] ext4_filemap_fault+0x84/0xb0 [ 2348.024831] __do_fault+0x10b/0x4b0 [ 2348.028470] __handle_mm_fault+0x273b/0x41c0 [ 2348.032887] ? vm_insert_page+0x9c0/0x9c0 [ 2348.037036] ? __fget+0x356/0x510 [ 2348.040506] ? check_preemption_disabled+0x41/0x280 [ 2348.045533] handle_mm_fault+0x436/0xb10 [ 2348.049607] __do_page_fault+0x68e/0xd60 [ 2348.053682] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2348.058701] ? spurious_fault+0x840/0x840 [ 2348.062860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2348.067715] ? page_fault+0x8/0x30 [ 2348.071263] page_fault+0x1e/0x30 [ 2348.074806] RIP: 0033:0x43f3df [ 2348.077998] Code: Bad RIP value. [ 2348.081358] RSP: 002b:000000c000067ec0 EFLAGS: 00010206 [ 2348.086716] RAX: 0000000001ec3758 RBX: 000000c000007520 RCX: 0000000000000001 [ 2348.093993] RDX: 000000c000007520 RSI: 0000000000000002 RDI: 000000c000067e1c [ 2348.101264] RBP: 000000c000067f20 R08: 00007ffe2f573000 R09: 000002585d1d2bea [ 2348.108531] R10: 0016aeddba782c71 R11: 0000000000000001 R12: 000000c000067e58 [ 2348.115800] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2348.141047] Mem-Info: [ 2348.143496] active_anon:27262 inactive_anon:75861 isolated_anon:0 [ 2348.143496] active_file:37 inactive_file:23 isolated_file:0 [ 2348.143496] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2348.143496] slab_reclaimable:13113 slab_unreclaimable:115359 [ 2348.143496] mapped:14598 shmem:89972 pagetables:505 bounce:0 [ 2348.143496] free:14164 free_pcp:0 free_cma:0 [ 2348.190120] Node 0 active_anon:107808kB inactive_anon:159064kB active_file:56kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58392kB dirty:0kB writeback:0kB shmem:214608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2348.230816] Node 1 active_anon:1240kB inactive_anon:144380kB active_file:92kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:145280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2348.269518] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2348.311532] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2348.322235] Node 0 DMA32 free:17728kB min:35996kB low:44992kB high:53988kB active_anon:107808kB inactive_anon:155468kB active_file:56kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2348.367799] lowmem_reserve[]: 0 0 1 1 1 [ 2348.371810] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2348.415279] lowmem_reserve[]: 0 0 0 0 0 [ 2348.419852] Node 1 Normal free:45556kB min:53876kB low:67344kB high:80812kB active_anon:1240kB inactive_anon:144380kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:136kB bounce:0kB free_pcp:1260kB local_pcp:0kB free_cma:0kB [ 2348.454629] lowmem_reserve[]: 0 0 0 0 0 [ 2348.461192] Node 0 DMA: 5*4kB (M) 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2348.495957] Node 0 DMA32: 896*4kB (UME) 484*8kB (UME) 225*16kB (UME) 105*32kB (UME) 33*64kB (ME) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 2348.523972] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2348.545799] Node 1 Normal: 38*4kB (UME) 86*8kB (UME) 176*16kB (UME) 93*32kB (UME) 42*64kB (UME) 24*128kB (UM) 12*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 5*2048kB (UM) 21*4096kB (U) = 120936kB [ 2348.580851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2348.591686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2348.628726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2348.649827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2348.663044] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2348.704356] 92375 total pagecache pages [ 2348.714596] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2348.733605] 0 pages in swap cache [ 2348.743650] Swap cache stats: add 0, delete 0, find 0/0 [ 2348.749118] Free swap = 0kB [ 2348.752134] Total swap = 0kB [ 2348.772610] systemd[1]: rsyslog.service: Unit entered failed state. [ 2348.783631] 2097051 pages RAM [ 2348.786750] 0 pages HighMem/MovableOnly [ 2348.790717] 369649 pages reserved [ 2348.813636] 0 pages cma reserved [ 2348.813871] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2348.817025] Unreclaimable slab info: [ 2348.843619] Name Used Total [ 2348.849183] pid_2 8KB 32KB [ 2348.873625] batadv_tt_change_cache 4KB 11KB [ 2348.879491] batadv_tl_cache 8KB 16KB [ 2348.893579] TIPC 19KB 37KB [ 2348.899098] SCTPv6 26KB 43KB [ 2348.913660] DCCPv6 17KB 37KB [ 2348.914212] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2348.919038] DCCP 16KB 35KB [ 2348.948645] RXRPC 22KB 39KB [ 2348.958630] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2348.963573] rxrpc_call_jar 150KB 165KB [ 2348.970562] bridge_fdb_cache 16KB 27KB [ 2348.975982] fib6_nodes 237KB 308KB [ 2348.981345] ip6_dst_cache 734KB 746KB [ 2348.991414] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2349.003576] RAWv6 141KB 155KB [ 2349.003787] systemd[1]: Stopped Journal Service. [ 2349.008959] UDPv6 43KB 45KB [ 2349.043553] TCPv6 21KB 30KB [ 2349.048949] nf_conntrack 15KB 18KB [ 2349.063586] t10_alua_lu_gp_cache 0KB 3KB [ 2349.069236] systemd[1]: Starting Journal Service... [ 2349.069276] sd_ext_cdb 0KB 7KB [ 2349.088640] scsi_sense_cache 1056KB 1060KB [ 2349.094150] virtio_scsi_cmd 16KB 16KB [ 2349.099525] sgpool-128 8KB 8KB [ 2349.112357] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2349.119708] sgpool-64 4KB 12KB [ 2349.143525] sgpool-32 2KB 15KB [ 2349.148918] sgpool-16 1KB 7KB [ 2349.173544] sgpool-8 0KB 7KB [ 2349.183509] mqueue_inode_cache 15KB 30KB [ 2349.188984] bio_post_read_ctx 14KB 15KB [ 2349.214543] bio-2 14KB 15KB [ 2349.223504] jfs_mp 7KB 7KB [ 2349.228916] cifs_small_rq 15KB 16KB [ 2349.252396] cifs_request 67KB 67KB [ 2349.264173] cifs_mpx_ids 0KB 7KB [ 2349.283518] nfs_commit_data 3KB 14KB [ 2349.288912] nfs_write_data 34KB 44KB [ 2349.295627] ext4_system_zone 1KB 7KB [ 2349.299139] systemd-journald[27775]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2349.301025] bio-1 1KB 7KB [ 2349.353510] pid_namespace 3KB 11KB [ 2349.358918] rpc_buffers 17KB 25KB [ 2349.383475] rpc_tasks 2KB 7KB [ 2349.389005] UNIX 2041KB 2130KB [ 2349.400964] tcp_bind_bucket 1KB 8KB [ 2349.417015] ip_fib_trie 36KB 47KB [ 2349.422413] ip_fib_alias 167KB 213KB [ 2349.447416] ip_dst_cache 12KB 28KB [ 2349.452816] RAW 90KB 120KB [ 2349.473674] UDP 65KB 101KB [ 2349.479695] TCP 8KB 11KB [ 2349.485304] systemd-journald[27775]: /dev/kmsg buffer overrun, some messages lost. [ 2349.505942] hugetlbfs_inode_cache 3KB 15KB [ 2349.523440] fscache_cookie_jar 1KB 7KB [ 2349.528923] eventpoll_pwq 32KB 43KB [ 2349.543568] eventpoll_epi 59KB 63KB [ 2349.550536] inotify_inode_mark 5KB 7KB [ 2349.573451] request_queue 199KB 199KB [ 2349.578850] blkdev_requests 1KB 3KB [ 2349.593419] blkdev_ioc 31KB 42KB [ 2349.598948] bio-0 948KB 948KB [ 2349.604373] biovec-max 1683KB 1757KB [ 2349.609753] biovec-64 844KB 850KB [ 2349.623390] biovec-16 149KB 172KB [ 2349.628904] bio_integrity_payload 1KB 8KB [ 2349.678774] khugepaged_mm_slot 2KB 19KB [ 2349.698083] uid_cache 0KB 4KB [ 2349.703516] dmaengine-unmap-2 0KB 3KB [ 2349.708886] skbuff_fclone_cache 36KB 41KB [ 2349.743392] skbuff_head_cache 9727KB 9855KB [ 2349.749309] configfs_dir_cache 3KB 7KB [ 2349.777991] file_lock_ctx 9KB 11KB [ 2349.783472] fsnotify_mark_connector 2KB 3KB [ 2349.789357] net_namespace 113KB 131KB [ 2349.818172] shmem_inode_cache 7968KB 7991KB [ 2349.823622] task_delay_info 287KB 446KB [ 2349.828986] taskstats 19KB 38KB [ 2349.878007] proc_dir_entry 1106KB 1128KB [ 2349.883761] pde_opener 17KB 23KB [ 2349.889142] seq_file 272KB 354KB [ 2349.918029] sigqueue 43KB 82KB [ 2349.923609] kernfs_node_cache 17956KB 18116KB [ 2349.928979] mnt_cache 225KB 256KB [ 2349.952481] filp 7346KB 8283KB [ 2349.962839] names_cache 101885KB 101885KB [ 2349.978090] iint_cache 41KB 51KB [ 2349.998751] key_jar 4KB 7KB [ 2350.017947] uts_namespace 4KB 11KB [ 2350.023753] nsproxy 3KB 11KB [ 2350.029125] vm_area_struct 2822KB 3329KB [ 2350.053281] mm_struct 474KB 565KB [ 2350.059271] fs_cache 331KB 412KB [ 2350.074956] files_cache 1172KB 1458KB [ 2350.080339] signal_cache 2026KB 2652KB [ 2350.108115] sighand_cache 663KB 721KB [ 2350.113814] task_struct 7859KB 7947KB [ 2350.119185] cred_jar 2451KB 2944KB [ 2350.147990] anon_vma_chain 829KB 1425KB [ 2350.156939] anon_vma 140KB 231KB [ 2350.162319] pid 187KB 256KB [ 2350.188053] Acpi-Operand 156KB 198KB [ 2350.208016] Acpi-ParseExt 9KB 11KB [ 2350.221053] Acpi-Parse 41KB 47KB [ 2350.233440] Acpi-State 52KB 63KB [ 2350.238841] Acpi-Namespace 20KB 27KB [ 2350.288162] numa_policy 0KB 3KB [ 2350.294121] debug_objects_cache 2778KB 3129KB [ 2350.299673] trace_event_file 297KB 298KB [ 2350.313388] ftrace_event_field 398KB 401KB [ 2350.318949] pool_workqueue 151KB 160KB [ 2350.343238] page->ptl 411KB 1095KB [ 2350.348727] kmalloc-2097152 2050KB 2050KB [ 2350.378066] kmalloc-524288 2056KB 2056KB [ 2350.384287] kmalloc-262144 1290KB 1290KB [ 2350.389778] kmalloc-131072 650KB 650KB [ 2350.418030] kmalloc-65536 3432KB 3498KB [ 2350.423732] kmalloc-32768 2673KB 2673KB [ 2350.429113] kmalloc-16384 1468KB 1518KB [ 2350.458104] kmalloc-8192 5808KB 5890KB [ 2350.478057] kmalloc-4096 28823KB 28883KB [ 2350.483984] kmalloc-2048 19144KB 19864KB [ 2350.489357] kmalloc-1024 13267KB 14616KB [ 2350.517949] kmalloc-512 15527KB 18900KB [ 2350.538198] kmalloc-256 5812KB 6682KB [ 2350.544028] kmalloc-128 1437KB 1838KB [ 2350.549405] kmalloc-96 3529KB 5336KB [ 2350.578021] kmalloc-64 3159KB 5052KB [ 2350.597982] kmalloc-32 1996KB 3146KB [ 2350.620635] kmalloc-192 2544KB 3112KB [ 2350.639703] kmem_cache 177KB 180KB [ 2350.658092] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2350.683216] Killed process 26121 (syz-executor.2) total-vm:48512kB, anon-rss:432kB, file-rss:4kB, shmem-rss:0kB 06:43:23 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)="54441a9e855a08c1fe3b0cbdb6f2dfd77bbf9525926a5e16c3c29e014e") process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:43:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@userptr={0x7fff, 0x2, 0x4, 0x70000, 0x3ff, {0x0, 0x2710}, {0x2, 0x1, 0x20, 0x6, 0x8, 0x5, "86bc953c"}, 0x81, 0x2, {&(0x7f0000000180)}, 0x8000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000080}, 0x4806) 06:43:23 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 06:43:23 executing program 1: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) socket$inet_smc(0x2b, 0x1, 0x0) 06:43:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x600000000000000, 0x5000, 0x0, 0x8}) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x7, @pix_mp={0x0, 0x0, 0x3447504d}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x400, 0x2, 0x1, 0x0, 0x4}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) (async) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x600000000000000, 0x5000, 0x0, 0x8}) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x7, @pix_mp={0x0, 0x0, 0x3447504d}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x400, 0x2, 0x1, 0x0, 0x4}) (async) 06:43:23 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x105000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x1f, 0x0, 0x4, 0xe000, 0x0, {0x77359400}, {0x5, 0xc, 0x0, 0x3, 0x0, 0x2, '%\'YZ'}, 0x9, 0x1, {&(0x7f0000000080)=[{0x3, 0xfffffffc, {}, 0xfffffab8}, {0x3, 0x5, {0x2}, 0x2}]}, 0x0, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x105000) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x1f, 0x0, 0x4, 0xe000, 0x0, {0x77359400}, {0x5, 0xc, 0x0, 0x3, 0x0, 0x2, '%\'YZ'}, 0x9, 0x1, {&(0x7f0000000080)=[{0x3, 0xfffffffc, {}, 0xfffffab8}, {0x3, 0x5, {0x2}, 0x2}]}, 0x0, 0x0, r2}) (async) 06:43:23 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="54441a9e855a08c1fe3b0cbdb6f2dfd77bbf9525926a5e16c3c29e014e") process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:43:23 executing program 1: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) 06:43:23 executing program 1: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) 06:43:23 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="54441a9e855a08c1fe3b0cbdb6f2dfd77bbf9525926a5e16c3c29e014e") process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:43:23 executing program 1: clock_getres(0x2, &(0x7f00000000c0)) 06:43:24 executing program 1: clock_getres(0x0, &(0x7f00000000c0)) 06:43:24 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) [ 2356.067504] device hsr_slave_1 left promiscuous mode [ 2356.078541] device hsr_slave_0 left promiscuous mode [ 2356.099343] team0 (unregistering): Port device team_slave_1 removed [ 2356.111316] team0 (unregistering): Port device team_slave_0 removed [ 2356.125293] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2356.137695] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2356.180015] bond0 (unregistering): Released all slaves [ 2356.953476] IPVS: ftp: loaded support on port[0] = 21 [ 2356.975512] IPVS: ftp: loaded support on port[0] = 21 [ 2356.978410] IPVS: ftp: loaded support on port[0] = 21 [ 2357.536233] chnl_net:caif_netlink_parms(): no params data found [ 2357.564696] chnl_net:caif_netlink_parms(): no params data found [ 2357.597881] chnl_net:caif_netlink_parms(): no params data found [ 2357.774192] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.780968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.796532] device bridge_slave_0 entered promiscuous mode [ 2357.860847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2357.867871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2357.898849] device bridge_slave_1 entered promiscuous mode [ 2357.919739] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.926341] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.943122] device bridge_slave_0 entered promiscuous mode [ 2357.950288] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.964843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.977533] device bridge_slave_0 entered promiscuous mode [ 2357.999126] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.009295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.025061] device bridge_slave_1 entered promiscuous mode [ 2358.031536] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.037897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.055994] device bridge_slave_1 entered promiscuous mode [ 2358.109111] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2358.127646] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2358.159581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2358.177143] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2358.191134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2358.230162] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2358.290330] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2358.304894] team0: Port device team_slave_0 added [ 2358.310304] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2358.327211] team0: Port device team_slave_0 added [ 2358.334533] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2358.344600] team0: Port device team_slave_0 added [ 2358.354679] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2358.362525] team0: Port device team_slave_1 added [ 2358.368194] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2358.377553] team0: Port device team_slave_1 added [ 2358.399954] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2358.407627] team0: Port device team_slave_1 added [ 2358.426961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.434623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.463945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.506460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.521423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.586761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.616586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.624044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.698018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.713821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.720091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.745747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.757854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.767124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.800231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.819005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2358.827766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2358.867017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.879180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.912937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.939001] device hsr_slave_0 entered promiscuous mode [ 2358.951264] Bluetooth: hci3: command 0x0409 tx timeout [ 2358.954201] Bluetooth: hci5: command 0x0409 tx timeout [ 2358.956638] Bluetooth: hci4: command 0x0409 tx timeout [ 2358.978944] device hsr_slave_1 entered promiscuous mode [ 2358.990783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2359.010088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2359.021287] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2359.032923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2359.055152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2359.075154] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2359.137488] device hsr_slave_0 entered promiscuous mode [ 2359.144436] device hsr_slave_1 entered promiscuous mode [ 2359.155019] device hsr_slave_0 entered promiscuous mode [ 2359.170248] device hsr_slave_1 entered promiscuous mode [ 2359.190375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2360.008487] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2360.025146] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2360.060269] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2361.020541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2361.030790] Bluetooth: hci4: command 0x041b tx timeout [ 2361.040787] Bluetooth: hci5: command 0x041b tx timeout [ 2361.051924] Bluetooth: hci3: command 0x041b tx timeout [ 2361.114782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2361.177253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2361.186496] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2361.213708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2361.238897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2361.252170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2361.259405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2361.294189] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2361.300901] 8021q: adding VLAN 0 to HW filter on device team0 [ 2361.316434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2361.335659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2361.745246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2361.753717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2361.763648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2361.770098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2361.781628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2361.789965] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2361.803739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2361.812194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2361.820100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2361.829924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2361.836345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2362.057719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2362.073235] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2362.095273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2362.107804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2362.118095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2362.133429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2362.149047] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2362.383657] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2362.389766] 8021q: adding VLAN 0 to HW filter on device team0 [ 2362.400048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2362.413702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2362.421185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2362.429239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2362.440218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2362.452354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2362.464005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2362.474065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2362.772401] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2362.778501] 8021q: adding VLAN 0 to HW filter on device team0 [ 2362.785132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2362.793825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2362.802359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2362.808741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2362.816979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2362.826256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2362.835801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2362.842207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2362.849987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2362.859666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2362.878206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2362.889233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2362.902343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2362.913439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2363.110288] Bluetooth: hci3: command 0x040f tx timeout [ 2363.124454] Bluetooth: hci5: command 0x040f tx timeout [ 2363.146028] Bluetooth: hci4: command 0x040f tx timeout [ 2363.269516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2363.278785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2363.293571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2363.307115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2363.318424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2363.334390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2363.345420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2363.359977] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.366397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2363.381337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2363.389315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2363.404545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.410965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2363.428637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2363.440038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2363.456674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2363.882891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2363.899640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2363.907695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2363.926594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2363.935158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2364.361989] oom_reaper: reaped process 27796 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2364.450180] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2364.469921] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2364.474708] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2364.482151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2364.491500] Call Trace: [ 2364.494094] dump_stack+0x1fc/0x2ef [ 2364.497731] dump_header+0x15d/0xc3f [ 2364.501446] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2364.506549] ? ___ratelimit+0x319/0x590 [ 2364.510540] oom_kill_process.cold+0x10/0x692 [ 2364.515039] ? check_preemption_disabled+0x41/0x280 [ 2364.520064] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2364.525341] out_of_memory+0x1072/0x1390 [ 2364.529407] ? oom_killer_disable+0x270/0x270 [ 2364.533916] ? mutex_trylock+0x15f/0x1a0 [ 2364.537976] __alloc_pages_nodemask+0x23a2/0x2890 [ 2364.542826] ? find_get_entry+0x4cd/0x8a0 [ 2364.546982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2364.551850] alloc_pages_current+0x193/0x2a0 [ 2364.556256] filemap_fault+0x146e/0x2180 [ 2364.560338] ext4_filemap_fault+0x84/0xb0 [ 2364.564491] __do_fault+0x10b/0x4b0 [ 2364.568125] __handle_mm_fault+0x273b/0x41c0 [ 2364.572538] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2364.577641] ? vm_insert_page+0x9c0/0x9c0 [ 2364.581797] ? check_preemption_disabled+0x41/0x280 [ 2364.586815] handle_mm_fault+0x436/0xb10 [ 2364.590879] __do_page_fault+0x68e/0xd60 [ 2364.594939] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2364.599953] ? spurious_fault+0x840/0x840 [ 2364.604102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2364.608949] ? page_fault+0x8/0x30 [ 2364.612489] page_fault+0x1e/0x30 [ 2364.615939] RIP: 0033:0x46af7d [ 2364.619123] Code: Bad RIP value. [ 2364.622480] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2364.627835] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2364.635097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2364.642357] RBP: 000000c000067f20 R08: 000000000005f43a R09: 0000000000000000 [ 2364.649619] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 2364.656880] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2364.706520] Mem-Info: [ 2364.708988] active_anon:27753 inactive_anon:77889 isolated_anon:0 [ 2364.708988] active_file:14 inactive_file:12 isolated_file:0 [ 2364.708988] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2364.708988] slab_reclaimable:13185 slab_unreclaimable:117513 [ 2364.708988] mapped:22284 shmem:92015 pagetables:555 bounce:0 [ 2364.708988] free:13886 free_pcp:197 free_cma:0 [ 2364.744990] syz-executor.5: vmalloc: allocation failure, allocated 1053401088 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2364.759098] Node 0 active_anon:108556kB inactive_anon:159044kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87168kB dirty:0kB writeback:0kB shmem:214588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2364.770659] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2364.787552] Node 1 active_anon:2456kB inactive_anon:152512kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1968kB dirty:44kB writeback:0kB shmem:153472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2364.820406] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.846900] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2364.848422] CPU: 0 PID: 27796 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2364.859887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2364.869229] Call Trace: [ 2364.869947] Node 0 DMA32 free:18044kB min:35996kB low:44992kB high:53988kB active_anon:108484kB inactive_anon:155448kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2000kB bounce:0kB free_pcp:344kB local_pcp:16kB free_cma:0kB [ 2364.871812] dump_stack+0x1fc/0x2ef [ 2364.904404] warn_alloc.cold+0x7b/0x18f [ 2364.908378] ? zone_watermark_ok_safe+0x260/0x260 [ 2364.913215] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2364.917985] __vmalloc_area_node+0x4fd/0x780 [ 2364.922396] ? __vmalloc_node_range+0x180/0x180 [ 2364.927062] ? _raw_spin_unlock+0x29/0x40 [ 2364.929785] lowmem_reserve[]: 0 0 1 1 1 [ 2364.931203] ? __get_vm_area_node+0x2e2/0x3a0 [ 2364.935151] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.939633] __vmalloc_node_range+0xed/0x180 [ 2364.969851] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2364.974171] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2364.979529] vmalloc_user+0x70/0xe0 [ 2364.983151] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2364.987472] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2364.991624] __vb2_queue_alloc+0x472/0xe60 [ 2364.995868] vb2_core_create_bufs+0x273/0x7e0 [ 2364.999781] lowmem_reserve[]: 0 0 0 0 0 [ 2365.000377] ? __vb2_queue_free+0x870/0x870 [ 2365.004325] Node 1 Normal free:26720kB min:53876kB low:67344kB high:80812kB active_anon:2452kB inactive_anon:152512kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:220kB bounce:0kB free_pcp:484kB local_pcp:248kB free_cma:0kB [ 2365.008635] ? __schedule+0x88f/0x2040 [ 2365.041302] ? retint_kernel+0x2d/0x2d [ 2365.045196] ? mark_held_locks+0xa6/0xf0 [ 2365.049258] ? io_schedule_timeout+0x140/0x140 [ 2365.053844] vb2_create_bufs+0x332/0x620 [ 2365.057914] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2365.063025] ? retint_kernel+0x2d/0x2d [ 2365.066913] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2365.072109] v4l_create_bufs+0xb2/0x160 [ 2365.076082] __video_do_ioctl+0x49a/0xcd0 [ 2365.079752] lowmem_reserve[]: 0 0 0 0 0 [ 2365.080229] ? v4l_querycap+0x340/0x340 [ 2365.084178] Node 0 DMA: 5*4kB (M) 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2365.088141] ? __might_fault+0x192/0x1d0 [ 2365.105964] ? v4l_querycap+0x340/0x340 [ 2365.109939] video_usercopy+0x13f/0xfa0 [ 2365.113929] ? v4l_enumstd+0x60/0x60 [ 2365.117640] ? do_futex+0x171/0x1880 [ 2365.119753] Node 0 DMA32: 867*4kB (ME) 470*8kB (UMEH) 224*16kB (UMEH) 98*32kB (UME) 40*64kB (UME) 13*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 2365.121352] ? mark_held_locks+0xf0/0xf0 [ 2365.140203] ? debug_check_no_obj_freed+0x201/0x490 [ 2365.145221] ? video_usercopy+0xfa0/0xfa0 [ 2365.149360] v4l2_ioctl+0x147/0x1a0 [ 2365.149729] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2365.152979] ? video_devdata+0xa0/0xa0 [ 2365.167837] do_vfs_ioctl+0xcdb/0x12e0 [ 2365.171723] ? lock_downgrade+0x720/0x720 [ 2365.175870] ? check_preemption_disabled+0x41/0x280 [ 2365.179742] Node 1 Normal: 504*4kB (ME) 402*8kB (UME) 201*16kB (UME) 85*32kB (UME) 35*64kB (ME) 10*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26720kB [ 2365.180880] ? ioctl_preallocate+0x200/0x200 [ 2365.197514] net_ratelimit: 3 callbacks suppressed [ 2365.197519] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.201461] ? __fget+0x356/0x510 [ 2365.201477] ? do_dup2+0x450/0x450 [ 2365.201494] ? __se_sys_futex+0x298/0x3b0 [ 2365.223893] ksys_ioctl+0x9b/0xc0 [ 2365.227353] __x64_sys_ioctl+0x6f/0xb0 [ 2365.231261] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2365.235846] do_syscall_64+0xf9/0x620 [ 2365.239657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2365.239748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2365.244843] RIP: 0033:0x7f579755f0f9 [ 2365.257475] Code: Bad RIP value. [ 2365.260829] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.268530] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2365.269800] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.275794] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2365.282409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2365.289512] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2365.289522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2365.309687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2365.312666] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2365.315221] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.329682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2365.349740] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.362944] Bluetooth: hci4: command 0x0419 tx timeout [ 2365.386672] Bluetooth: hci5: command 0x0419 tx timeout [ 2365.395972] 92044 total pagecache pages [ 2365.400023] 0 pages in swap cache [ 2365.403152] Bluetooth: hci3: command 0x0419 tx timeout [ 2365.403471] Swap cache stats: add 0, delete 0, find 0/0 [ 2365.408814] Mem-Info: [ 2365.424697] Free swap = 0kB [ 2365.427717] Total swap = 0kB [ 2365.431029] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.431082] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.448029] active_anon:27734 inactive_anon:77889 isolated_anon:0 [ 2365.448029] active_file:15 inactive_file:14 isolated_file:0 [ 2365.448029] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2365.448029] slab_reclaimable:13184 slab_unreclaimable:117476 [ 2365.448029] mapped:22248 shmem:92015 pagetables:555 bounce:0 [ 2365.448029] free:13910 free_pcp:206 free_cma:0 [ 2365.448140] 2097051 pages RAM [ 2365.488112] 0 pages HighMem/MovableOnly [ 2365.492256] 369649 pages reserved [ 2365.495699] 0 pages cma reserved [ 2365.499049] Unreclaimable slab info: [ 2365.506540] Name Used Total [ 2365.507100] Node 0 active_anon:108484kB inactive_anon:159044kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:214588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2365.512157] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.512190] pid_2 12KB 32KB [ 2365.512259] batadv_tt_change_cache 4KB 11KB [ 2365.512273] batadv_tl_cache 8KB 16KB [ 2365.512299] TIPC 19KB 30KB [ 2365.512319] SCTPv6 33KB 49KB [ 2365.512337] DCCPv6 22KB 45KB [ 2365.512350] DCCP 21KB 42KB [ 2365.512392] RXRPC 22KB 39KB [ 2365.512401] rxrpc_call_jar 150KB 157KB [ 2365.512415] bridge_fdb_cache 24KB 27KB [ 2365.512430] fib6_nodes 248KB 308KB [ 2365.512439] ip6_dst_cache 783KB 783KB [ 2365.512459] RAWv6 162KB 175KB [ 2365.512470] UDPv6 43KB 45KB [ 2365.512483] TCPv6 24KB 30KB [ 2365.512503] nf_conntrack 8KB 18KB [ 2365.512568] t10_alua_lu_gp_cache 0KB 3KB [ 2365.512584] sd_ext_cdb 0KB 7KB [ 2365.512594] scsi_sense_cache 1056KB 1060KB [ 2365.512603] virtio_scsi_cmd 16KB 16KB [ 2365.512616] sgpool-128 8KB 8KB [ 2365.512626] sgpool-64 4KB 12KB [ 2365.512635] sgpool-32 2KB 15KB [ 2365.512645] sgpool-16 1KB 7KB [ 2365.512654] sgpool-8 0KB 7KB [ 2365.512671] mqueue_inode_cache 15KB 30KB [ 2365.512688] bio_post_read_ctx 14KB 15KB [ 2365.512760] bio-2 14KB 15KB [ 2365.512770] jfs_mp 7KB 7KB [ 2365.512809] cifs_small_rq 15KB 16KB [ 2365.512819] cifs_request 67KB 67KB [ 2365.512828] cifs_mpx_ids 0KB 7KB [ 2365.512856] nfs_commit_data 3KB 14KB [ 2365.512866] nfs_write_data 34KB 44KB [ 2365.512907] ext4_system_zone 1KB 7KB [ 2365.512938] bio-1 1KB 7KB [ 2365.512949] pid_namespace 3KB 11KB [ 2365.512968] rpc_buffers 17KB 25KB [ 2365.512977] rpc_tasks 2KB 7KB [ 2365.512987] UNIX 2302KB 2358KB [ 2365.513001] tcp_bind_bucket 2KB 8KB [ 2365.513018] ip_fib_trie 40KB 47KB [ 2365.513028] ip_fib_alias 180KB 213KB [ 2365.513037] ip_dst_cache 21KB 28KB [ 2365.513049] RAW 102KB 120KB [ 2365.513059] UDP 69KB 101KB [ 2365.513072] TCP 8KB 11KB [ 2365.513084] hugetlbfs_inode_cache 3KB 15KB [ 2365.513093] fscache_cookie_jar 1KB 7KB [ 2365.513103] eventpoll_pwq 20KB 43KB [ 2365.513112] eventpoll_epi 37KB 63KB [ 2365.513122] inotify_inode_mark 5KB 7KB [ 2365.513134] request_queue 199KB 199KB [ 2365.513143] blkdev_requests 1KB 3KB [ 2365.513152] blkdev_ioc 28KB 42KB [ 2365.513162] bio-0 665KB 746KB [ 2365.513171] biovec-max 1740KB 1798KB [ 2365.513183] biovec-64 684KB 716KB [ 2365.513193] biovec-16 117KB 157KB [ 2365.513202] bio_integrity_payload 1KB 8KB [ 2365.513211] khugepaged_mm_slot 3KB 19KB [ 2365.513229] uid_cache 0KB 4KB [ 2365.513238] dmaengine-unmap-2 0KB 3KB [ 2365.513251] skbuff_fclone_cache 26KB 41KB [ 2365.513260] skbuff_head_cache 9449KB 9716KB [ 2365.513270] configfs_dir_cache 3KB 7KB [ 2365.513282] file_lock_ctx 9KB 11KB [ 2365.513291] fsnotify_mark_connector 2KB 3KB [ 2365.513301] net_namespace 131KB 148KB [ 2365.513311] shmem_inode_cache 7943KB 7987KB [ 2365.513320] task_delay_info 321KB 446KB [ 2365.513330] taskstats 16KB 38KB [ 2365.513339] proc_dir_entry 1237KB 1241KB [ 2365.513348] pde_opener 16KB 23KB [ 2365.513358] seq_file 268KB 354KB [ 2365.513366] sigqueue 27KB 70KB [ 2365.513376] kernfs_node_cache 20466KB 20569KB [ 2365.513386] mnt_cache 226KB 240KB [ 2365.513395] filp 7330KB 8276KB [ 2365.513404] names_cache 94307KB 94345KB [ 2365.513413] iint_cache 30KB 51KB [ 2365.513421] key_jar 4KB 7KB [ 2365.513429] uts_namespace 4KB 11KB [ 2365.513438] nsproxy 3KB 11KB [ 2365.513451] vm_area_struct 2734KB 3298KB [ 2365.513461] mm_struct 500KB 565KB [ 2365.513471] fs_cache 367KB 412KB [ 2365.513480] files_cache 1367KB 1432KB [ 2365.513488] signal_cache 2427KB 2616KB [ 2365.513497] sighand_cache 728KB 756KB [ 2365.513506] task_struct 9759KB 9847KB [ 2365.513515] cred_jar 2475KB 2944KB [ 2365.513524] anon_vma_chain 821KB 1386KB [ 2365.513532] anon_vma 150KB 231KB [ 2365.513540] pid 208KB 256KB [ 2365.513548] Acpi-Operand 156KB 198KB [ 2365.513556] Acpi-ParseExt 9KB 11KB [ 2365.513563] Acpi-Parse 41KB 47KB [ 2365.513572] Acpi-State 52KB 63KB [ 2365.513581] Acpi-Namespace 20KB 27KB [ 2365.513593] numa_policy 0KB 3KB [ 2365.513602] debug_objects_cache 2936KB 3129KB [ 2365.513611] trace_event_file 297KB 298KB [ 2365.513621] ftrace_event_field 398KB 401KB [ 2365.513630] pool_workqueue 150KB 168KB [ 2365.513642] page->ptl 439KB 1091KB [ 2365.513688] kmalloc-2097152 2050KB 2050KB [ 2365.513698] kmalloc-524288 2056KB 2056KB [ 2365.513707] kmalloc-262144 1290KB 1290KB [ 2365.513715] kmalloc-131072 650KB 650KB [ 2365.513724] kmalloc-65536 4224KB 4290KB [ 2365.513733] kmalloc-32768 3036KB 3069KB [ 2365.513742] kmalloc-16384 1402KB 1501KB [ 2365.513752] kmalloc-8192 5997KB 6072KB [ 2365.513758] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.513763] kmalloc-4096 35292KB 35330KB [ 2365.513772] kmalloc-2048 21494KB 21528KB [ 2365.513782] kmalloc-1024 15293KB 15293KB [ 2365.513791] kmalloc-512 18375KB 18885KB [ 2365.513800] kmalloc-256 6372KB 6675KB [ 2365.513809] kmalloc-128 1592KB 1838KB [ 2365.513818] kmalloc-96 3619KB 5336KB [ 2365.513827] kmalloc-64 3369KB 5052KB [ 2365.513836] kmalloc-32 2180KB 3146KB [ 2365.513845] kmalloc-192 2793KB 3112KB [ 2365.513855] kmem_cache 177KB 180KB [ 2365.513866] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2365.513926] Killed process 27820 (syz-executor.2) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB [ 2365.718194] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.735898] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2365.769227] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2365.793783] Node 1 active_anon:2452kB inactive_anon:152512kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1924kB dirty:0kB writeback:0kB shmem:153472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2365.808090] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2365.824924] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.879489] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2365.883892] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2365.889198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2365.894766] Node 0 DMA32 free:18204kB min:35996kB low:44992kB high:53988kB active_anon:108444kB inactive_anon:155448kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:1948kB bounce:0kB free_pcp:448kB local_pcp:16kB free_cma:0kB [ 2365.900045] Call Trace: [ 2365.900067] dump_stack+0x1fc/0x2ef [ 2365.900084] dump_header+0x15d/0xc3f [ 2365.900101] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2365.905518] lowmem_reserve[]: 0 0 1 1 1 [ 2365.910865] ? ___ratelimit+0x319/0x590 [ 2365.910883] oom_kill_process.cold+0x10/0x692 [ 2365.910899] ? check_preemption_disabled+0x41/0x280 [ 2365.910924] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2365.916773] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.922123] out_of_memory+0x1072/0x1390 [ 2365.922143] ? oom_killer_disable+0x270/0x270 [ 2365.922158] ? mutex_trylock+0x15f/0x1a0 [ 2365.922175] __alloc_pages_nodemask+0x23a2/0x2890 [ 2365.927505] lowmem_reserve[]: 0 0 0 0 0 [ 2365.932857] ? find_get_entry+0x4cd/0x8a0 [ 2365.932880] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2365.932923] alloc_pages_current+0x193/0x2a0 [ 2365.938239] Node 1 Normal free:26720kB min:53876kB low:67344kB high:80812kB active_anon:2452kB inactive_anon:152512kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:220kB bounce:0kB free_pcp:484kB local_pcp:248kB free_cma:0kB [ 2365.943585] filemap_fault+0x146e/0x2180 [ 2365.943610] ext4_filemap_fault+0x84/0xb0 [ 2365.943626] __do_fault+0x10b/0x4b0 [ 2365.948955] lowmem_reserve[]: 0 0 0 0 0 [ 2365.954306] __handle_mm_fault+0x273b/0x41c0 [ 2365.954324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2365.954338] ? vm_insert_page+0x9c0/0x9c0 [ 2365.954365] ? check_preemption_disabled+0x41/0x280 [ 2365.959712] Node 0 DMA: 5*4kB (M) 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2365.965043] handle_mm_fault+0x436/0xb10 [ 2365.970408] Node 0 DMA32: 867*4kB (ME) 470*8kB (UMEH) 224*16kB (UMEH) 99*32kB (UME) 40*64kB (UME) 13*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18204kB [ 2365.975726] __do_page_fault+0x68e/0xd60 [ 2365.981087] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2365.986404] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2365.991771] Node 1 Normal: 504*4kB (ME) 402*8kB (UME) 201*16kB (UME) 85*32kB (UME) 35*64kB (ME) 10*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26720kB [ 2365.997087] ? spurious_fault+0x840/0x840 [ 2366.002454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.007772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2366.013148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.018454] ? page_fault+0x8/0x30 [ 2366.023822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.029132] page_fault+0x1e/0x30 [ 2366.034515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.039806] RIP: 0033:0x46af7d [ 2366.039819] Code: Bad RIP value. [ 2366.039825] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2366.039839] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2366.045182] 92044 total pagecache pages [ 2366.050528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2366.050536] RBP: 000000c000067f20 R08: 000000000005f43a R09: 0000000000000000 [ 2366.050543] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 2366.050549] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2366.113818] Mem-Info: [ 2366.115303] 0 pages in swap cache [ 2366.135100] active_anon:27724 inactive_anon:77889 isolated_anon:0 [ 2366.135100] active_file:14 inactive_file:15 isolated_file:0 [ 2366.135100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2366.135100] slab_reclaimable:13177 slab_unreclaimable:117443 [ 2366.135100] mapped:22248 shmem:92015 pagetables:542 bounce:0 [ 2366.135100] free:13950 free_pcp:233 free_cma:0 [ 2366.136787] Swap cache stats: add 0, delete 0, find 0/0 [ 2366.199237] Node 0 active_anon:108444kB inactive_anon:159044kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:214588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2366.202630] Free swap = 0kB [ 2366.202636] Total swap = 0kB [ 2366.202645] 2097051 pages RAM [ 2366.202650] 0 pages HighMem/MovableOnly [ 2366.202655] 369649 pages reserved [ 2366.202659] 0 pages cma reserved [ 2366.821383] Node 1 active_anon:2452kB inactive_anon:152512kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1924kB dirty:0kB writeback:0kB shmem:153472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2366.850873] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2366.887899] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2366.896619] Node 0 DMA32 free:18268kB min:35996kB low:44992kB high:53988kB active_anon:108444kB inactive_anon:155448kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:1948kB bounce:0kB free_pcp:456kB local_pcp:436kB free_cma:0kB [ 2366.936682] lowmem_reserve[]: 0 0 1 1 1 [ 2366.940841] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2366.978968] lowmem_reserve[]: 0 0 0 0 0 [ 2366.982997] Node 1 Normal free:26920kB min:53876kB low:67344kB high:80812kB active_anon:2452kB inactive_anon:152512kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:220kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 2367.022727] lowmem_reserve[]: 0 0 0 0 0 [ 2367.026733] Node 0 DMA: 5*4kB (M) 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2367.053363] Node 0 DMA32: 867*4kB (ME) 480*8kB (UMEH) 228*16kB (UMEH) 99*32kB (UME) 40*64kB (UME) 13*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18348kB [ 2367.068453] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2367.096790] Node 1 Normal: 504*4kB (ME) 401*8kB (ME) 201*16kB (UME) 85*32kB (UME) 35*64kB (ME) 10*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26968kB [ 2367.132142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2367.144944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2367.166662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2367.175569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2367.194885] 92044 total pagecache pages [ 2367.198868] 0 pages in swap cache [ 2367.206081] Swap cache stats: add 0, delete 0, find 0/0 [ 2367.218598] Free swap = 0kB [ 2367.225294] Total swap = 0kB [ 2367.228328] 2097051 pages RAM [ 2367.237957] 0 pages HighMem/MovableOnly [ 2367.245650] 369649 pages reserved [ 2367.249097] 0 pages cma reserved [ 2367.264585] Unreclaimable slab info: [ 2367.268303] Name Used Total [ 2367.277416] pid_2 12KB 32KB [ 2367.293843] batadv_tt_change_cache 4KB 11KB [ 2367.299710] batadv_tl_cache 8KB 16KB [ 2367.305089] TIPC 19KB 30KB [ 2367.321280] SCTPv6 33KB 49KB [ 2367.326664] DCCPv6 22KB 45KB [ 2367.332101] DCCP 21KB 42KB [ 2367.337494] RXRPC 22KB 39KB [ 2367.368074] rxrpc_call_jar 150KB 157KB [ 2367.397704] bridge_fdb_cache 22KB 27KB [ 2367.422494] fib6_nodes 242KB 308KB [ 2367.427877] ip6_dst_cache 787KB 787KB [ 2367.454656] RAWv6 162KB 175KB [ 2367.488856] UDPv6 43KB 45KB [ 2367.509294] TCPv6 24KB 30KB [ 2367.514688] nf_conntrack 8KB 18KB [ 2367.534584] t10_alua_lu_gp_cache 0KB 3KB [ 2367.540323] sd_ext_cdb 0KB 7KB [ 2367.545692] scsi_sense_cache 1056KB 1060KB [ 2367.567799] virtio_scsi_cmd 16KB 16KB [ 2367.573253] sgpool-128 8KB 8KB [ 2367.578611] sgpool-64 4KB 12KB [ 2367.597893] sgpool-32 2KB 15KB [ 2367.603622] sgpool-16 1KB 7KB [ 2367.608982] sgpool-8 0KB 7KB [ 2367.628598] mqueue_inode_cache 15KB 30KB [ 2367.634110] bio_post_read_ctx 14KB 15KB [ 2367.654057] bio-2 14KB 15KB [ 2367.663935] jfs_mp 7KB 7KB [ 2367.684119] cifs_small_rq 15KB 16KB [ 2367.696780] cifs_request 67KB 67KB [ 2367.716428] cifs_mpx_ids 0KB 7KB [ 2367.725507] nfs_commit_data 3KB 14KB [ 2367.749333] nfs_write_data 34KB 44KB [ 2367.754739] ext4_system_zone 1KB 7KB [ 2367.783892] bio-1 1KB 7KB [ 2367.812488] pid_namespace 3KB 11KB [ 2367.817861] rpc_buffers 17KB 25KB [ 2367.855844] rpc_tasks 2KB 7KB [ 2367.874067] UNIX 2283KB 2358KB [ 2367.879488] tcp_bind_bucket 1KB 8KB [ 2367.884849] ip_fib_trie 39KB 47KB [ 2367.901303] ip_fib_alias 179KB 213KB [ 2367.906666] ip_dst_cache 15KB 28KB [ 2367.912158] RAW 102KB 120KB [ 2367.917527] UDP 69KB 101KB [ 2367.933849] TCP 8KB 11KB [ 2367.939271] hugetlbfs_inode_cache 3KB 15KB [ 2367.944971] fscache_cookie_jar 1KB 7KB [ 2367.961405] eventpoll_pwq 19KB 43KB [ 2367.966769] eventpoll_epi 36KB 63KB [ 2367.974177] inotify_inode_mark 5KB 7KB [ 2367.990629] request_queue 199KB 199KB [ 2367.996000] blkdev_requests 1KB 3KB [ 2368.001436] blkdev_ioc 24KB 42KB [ 2368.006792] bio-0 658KB 746KB [ 2368.086788] biovec-max 1740KB 1798KB [ 2368.145957] biovec-64 718KB 724KB [ 2368.159069] biovec-16 120KB 157KB [ 2368.164449] bio_integrity_payload 1KB 8KB [ 2368.201353] khugepaged_mm_slot 3KB 19KB [ 2368.238230] uid_cache 0KB 4KB [ 2368.269776] dmaengine-unmap-2 0KB 3KB [ 2368.275253] skbuff_fclone_cache 25KB 41KB [ 2368.314735] skbuff_head_cache 9638KB 9757KB [ 2368.322361] configfs_dir_cache 3KB 7KB [ 2368.357608] file_lock_ctx 9KB 11KB [ 2368.385016] fsnotify_mark_connector 2KB 3KB [ 2368.395476] net_namespace 131KB 148KB [ 2368.429029] shmem_inode_cache 7940KB 7987KB [ 2368.430232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2368.434441] task_delay_info 313KB 446KB [ 2368.450743] taskstats 16KB 38KB [ 2368.456216] proc_dir_entry 1236KB 1241KB [ 2368.456823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2368.478994] pde_opener 15KB 23KB [ 2368.485685] seq_file 263KB 354KB [ 2368.498882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2368.508324] sigqueue 40KB 70KB [ 2368.514386] kernfs_node_cache 20377KB 20545KB [ 2368.522638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2368.529428] mnt_cache 225KB 240KB [ 2368.535133] filp 7400KB 8276KB [ 2368.549006] names_cache 100045KB 100045KB [ 2368.554415] iint_cache 34KB 51KB [ 2368.555165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2368.560524] key_jar 4KB 7KB [ 2368.576306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2368.584304] uts_namespace 4KB 11KB [ 2368.598948] nsproxy 3KB 11KB [ 2368.604434] vm_area_struct 2668KB 3290KB [ 2368.617742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2368.621389] mm_struct 484KB 565KB [ 2368.639701] fs_cache 355KB 412KB [ 2368.645073] files_cache 1347KB 1432KB [ 2368.649767] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2368.662252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2368.668939] signal_cache 2379KB 2616KB [ 2368.674306] sighand_cache 705KB 756KB [ 2368.680535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2368.694798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2368.698889] task_struct 9531KB 9595KB [ 2368.708148] cred_jar 2508KB 2944KB [ 2368.708484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2368.754497] anon_vma_chain 789KB 1382KB [ 2368.767157] anon_vma 153KB 231KB [ 2368.798735] pid 202KB 256KB [ 2368.828901] Acpi-Operand 156KB 198KB [ 2368.834286] Acpi-ParseExt 9KB 11KB [ 2368.848885] Acpi-Parse 41KB 47KB [ 2368.854263] Acpi-State 52KB 63KB [ 2368.869201] Acpi-Namespace 20KB 27KB [ 2368.874577] numa_policy 0KB 3KB [ 2368.893573] debug_objects_cache 2915KB 3129KB [ 2368.908865] trace_event_file 297KB 298KB [ 2368.914282] ftrace_event_field 398KB 401KB [ 2368.919915] pool_workqueue 149KB 168KB [ 2368.938959] page->ptl 437KB 1091KB [ 2368.944371] kmalloc-2097152 2050KB 2050KB [ 2368.954404] kmalloc-524288 2056KB 2056KB [ 2368.968851] kmalloc-262144 1290KB 1290KB [ 2368.974221] kmalloc-131072 650KB 650KB [ 2368.988905] kmalloc-65536 4224KB 4290KB [ 2368.994286] kmalloc-32768 2904KB 3069KB [ 2369.009023] kmalloc-16384 1402KB 1501KB [ 2369.014405] kmalloc-8192 5799KB 5874KB [ 2369.028929] kmalloc-4096 32053KB 32096KB [ 2369.034300] kmalloc-2048 19671KB 21260KB [ 2369.058828] kmalloc-1024 13564KB 15246KB [ 2369.064516] kmalloc-512 17170KB 18926KB [ 2369.070262] kmalloc-256 5727KB 6656KB [ 2369.075861] kmalloc-128 1538KB 1838KB [ 2369.081599] kmalloc-96 3627KB 5336KB [ 2369.089770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2369.103096] kmalloc-64 3234KB 5048KB [ 2369.108466] kmalloc-32 2063KB 3146KB [ 2369.114784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2369.128246] kmalloc-192 2691KB 3112KB [ 2369.139244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2369.146906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2369.161366] kmem_cache 177KB 180KB [ 2369.166740] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2369.184232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2369.194238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2369.226317] Killed process 27819 (syz-executor.4) total-vm:48512kB, anon-rss:436kB, file-rss:12292kB, shmem-rss:0kB [ 2369.238707] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2369.244876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2369.247635] oom_reaper: reaped process 27819 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2369.781078] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2369.796319] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2369.804235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2369.834282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2369.863322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2369.876750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2369.888142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2369.903044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2369.915502] device bridge_slave_1 left promiscuous mode [ 2369.925956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2369.936630] device bridge_slave_0 left promiscuous mode [ 2369.947039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2369.964280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2369.973662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2369.987892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2369.998416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2370.014068] device bridge_slave_1 left promiscuous mode [ 2370.023044] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.035149] device bridge_slave_0 left promiscuous mode [ 2370.044065] bridge0: port 1(bridge_slave_0) entered disabled state [ 2370.063659] device veth1_macvtap left promiscuous mode [ 2370.073699] device veth0_macvtap left promiscuous mode [ 2370.082772] device veth1_vlan left promiscuous mode [ 2370.087837] device veth0_vlan left promiscuous mode [ 2370.098381] device veth1_macvtap left promiscuous mode [ 2370.106642] device veth0_macvtap left promiscuous mode [ 2370.116676] device veth1_vlan left promiscuous mode [ 2370.125045] device veth0_vlan left promiscuous mode [ 2372.548008] Bluetooth: hci3: command 0x0409 tx timeout [ 2373.114860] Bluetooth: hci5: command 0x0409 tx timeout [ 2374.627705] Bluetooth: hci3: command 0x041b tx timeout [ 2375.187417] Bluetooth: hci5: command 0x041b tx timeout [ 2376.707176] Bluetooth: hci3: command 0x040f tx timeout [ 2377.267003] Bluetooth: hci5: command 0x040f tx timeout [ 2378.786701] Bluetooth: hci3: command 0x0419 tx timeout [ 2379.346436] Bluetooth: hci5: command 0x0419 tx timeout [ 2381.181753] device hsr_slave_1 left promiscuous mode [ 2381.190112] device hsr_slave_0 left promiscuous mode [ 2381.205671] team0 (unregistering): Port device team_slave_1 removed [ 2381.218063] team0 (unregistering): Port device team_slave_0 removed [ 2381.229558] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2381.240467] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2381.272102] bond0 (unregistering): Released all slaves [ 2381.312257] device hsr_slave_1 left promiscuous mode [ 2381.322219] device hsr_slave_0 left promiscuous mode [ 2381.335505] team0 (unregistering): Port device team_slave_1 removed [ 2381.347311] team0 (unregistering): Port device team_slave_0 removed [ 2381.358681] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2381.370107] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2381.400696] bond0 (unregistering): Released all slaves [ 2381.418434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2381.432703] IPVS: ftp: loaded support on port[0] = 21 [ 2381.435998] IPVS: ftp: loaded support on port[0] = 21 [ 2381.572527] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2381.633412] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2381.672047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2381.680341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2381.697291] chnl_net:caif_netlink_parms(): no params data found [ 2381.719550] chnl_net:caif_netlink_parms(): no params data found [ 2381.788878] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2381.800132] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2381.807139] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2381.818370] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2381.824968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2381.840214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2381.849449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2381.857434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2381.887858] device veth0_vlan entered promiscuous mode [ 2381.898445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2381.904851] bridge0: port 1(bridge_slave_0) entered disabled state [ 2381.915044] device bridge_slave_0 entered promiscuous mode [ 2381.931511] device veth1_vlan entered promiscuous mode [ 2381.938946] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2381.945468] bridge0: port 2(bridge_slave_1) entered blocking state [ 2381.954199] bridge0: port 2(bridge_slave_1) entered disabled state [ 2381.963293] device bridge_slave_1 entered promiscuous mode [ 2381.971718] bridge0: port 1(bridge_slave_0) entered blocking state [ 2381.979074] bridge0: port 1(bridge_slave_0) entered disabled state [ 2381.987562] device bridge_slave_0 entered promiscuous mode [ 2381.997503] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2382.012090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2382.021840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.032572] device bridge_slave_1 entered promiscuous mode [ 2382.060536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2382.077794] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2382.087181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2382.096494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2382.114485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2382.136528] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2382.143449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2382.154096] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2382.163015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2382.179234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2382.199992] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2382.208165] team0: Port device team_slave_0 added [ 2382.222064] device veth0_macvtap entered promiscuous mode [ 2382.230209] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2382.237847] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2382.245460] team0: Port device team_slave_1 added [ 2382.251514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2382.259831] team0: Port device team_slave_0 added [ 2382.268039] device veth1_macvtap entered promiscuous mode [ 2382.274530] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2382.288690] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2382.296832] team0: Port device team_slave_1 added [ 2382.331498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2382.338233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.364043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2382.377919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2382.384367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.410452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2382.422507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2382.436652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2382.442991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.469305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2382.489327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2382.496905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2382.507627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2382.515899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2382.522145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.557292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2382.576659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2382.585123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2382.598251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.613783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.624884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.641556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.651001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.661107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.671910] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2382.679327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2382.686717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2382.700513] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2382.708971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2382.720240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2382.730843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2382.741529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.751394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2382.761680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.771304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2382.781433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.792671] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2382.800259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2382.829447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2382.837683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2382.851487] device hsr_slave_0 entered promiscuous mode [ 2382.869556] device hsr_slave_1 entered promiscuous mode [ 2382.888456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2382.907711] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2382.918616] device hsr_slave_0 entered promiscuous mode [ 2382.924674] device hsr_slave_1 entered promiscuous mode [ 2382.944838] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2382.952272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2383.203284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2383.267764] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2383.351461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2383.388998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2383.403947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2383.417167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2383.424250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2383.444775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2383.467220] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2383.473306] 8021q: adding VLAN 0 to HW filter on device team0 [ 2383.489857] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2383.497855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2383.506707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.513821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.521996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2383.533731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2383.559659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2383.568834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2383.577502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2383.583939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2383.591105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2383.598612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2383.605611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2383.614786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2383.631634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2383.639527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2383.647837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2383.655529] bridge0: port 2(bridge_slave_1) entered blocking state [ 2383.661875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2383.678691] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2383.686451] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2383.692692] 8021q: adding VLAN 0 to HW filter on device team0 [ 2383.701773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2383.710106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.718547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.718567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2383.738778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2383.746642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2383.753727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2383.762881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2383.770963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2383.778897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2383.786875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2383.793210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2383.801087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2383.818496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2383.829032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2383.840542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2383.852578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2383.862474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2383.877107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2383.884786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2383.893343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2383.899737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2383.907160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2383.915680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2383.926003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2383.934742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2383.949231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2383.957249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2383.964904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2383.976513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2383.985472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2383.994361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2384.002490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2384.010875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2384.019002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2384.028155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2384.036686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2384.045971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2384.063072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2384.071565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2384.079030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2384.090242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2384.098299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2384.105989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2384.113511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2384.124547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2384.140952] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2384.147778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2384.154708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2384.166310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2384.175910] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2384.181971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2384.234620] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2384.250835] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2384.257857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2384.264548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2384.273779] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2384.294096] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2384.300663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2384.308336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2384.316940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2384.338467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2384.383675] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2384.394276] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2384.402390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2384.411969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2384.425113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2384.433699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2384.441742] device bridge_slave_1 left promiscuous mode [ 2384.447930] bridge0: port 2(bridge_slave_1) entered disabled state [ 2384.456329] device bridge_slave_0 left promiscuous mode [ 2384.461819] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.471871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2384.479843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2384.488456] device bridge_slave_1 left promiscuous mode [ 2384.493895] bridge0: port 2(bridge_slave_1) entered disabled state [ 2384.501250] device bridge_slave_0 left promiscuous mode [ 2384.507379] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.591508] device hsr_slave_1 left promiscuous mode [ 2384.600571] device hsr_slave_0 left promiscuous mode [ 2384.614823] team0 (unregistering): Port device team_slave_1 removed [ 2384.627661] team0 (unregistering): Port device team_slave_0 removed [ 2384.637488] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2384.649341] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2384.679206] bond0 (unregistering): Released all slaves [ 2384.719307] device hsr_slave_1 left promiscuous mode [ 2384.727838] device hsr_slave_0 left promiscuous mode [ 2384.740977] team0 (unregistering): Port device team_slave_1 removed [ 2384.750191] team0 (unregistering): Port device team_slave_0 removed [ 2384.762414] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2384.772649] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2384.803459] bond0 (unregistering): Released all slaves [ 2384.827587] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2384.846838] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2384.853871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2384.863364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2384.877454] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2384.884675] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2384.892544] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2384.903821] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2384.912766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2384.921104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2384.931521] device veth0_vlan entered promiscuous mode [ 2384.943709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2384.951502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2384.962947] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2384.971053] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2384.977934] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2384.989876] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2384.997019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2385.004549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2385.012656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2385.019781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2385.031248] device veth1_vlan entered promiscuous mode [ 2385.037768] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2385.050659] device veth0_vlan entered promiscuous mode [ 2385.059792] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2385.072085] device veth1_vlan entered promiscuous mode [ 2385.079814] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2385.092444] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2385.103222] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2385.113715] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2385.121698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2385.129649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2385.141135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2385.150397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2385.161921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2385.173055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2385.193760] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2385.203269] device veth0_macvtap entered promiscuous mode [ 2385.212697] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2385.224722] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2385.239093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2385.251138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2385.262609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2385.280777] device veth1_macvtap entered promiscuous mode [ 2385.288171] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2385.296220] device veth0_macvtap entered promiscuous mode [ 2385.302693] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2385.319455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2385.337051] device veth1_macvtap entered promiscuous mode [ 2385.343573] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2385.355512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2385.369301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2385.379596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2385.393979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.405023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.414123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.425338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.434450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.445333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.454443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.465244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.477173] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2385.484171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2385.492657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.508039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.522897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.538199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.548898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.563830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.574460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.589477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.601463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.617403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.631119] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2385.641430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2385.651471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2385.658889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2385.666866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2385.674142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2385.683696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2385.692099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2385.700619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2385.710692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.721213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.730600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.740835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.751084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.761089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.770445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.780631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.792747] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2385.804038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2385.813642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2385.828985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2385.842030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.852154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.861693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.871476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.880625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.890411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.899612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.910632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.919790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.929553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.939893] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2385.946892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2385.965716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2385.973409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2386.260622] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2386.319291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.339835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.350468] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2386.357526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2386.368183] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2386.374595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.383638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.403967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2386.416412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.418785] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2386.423536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.434494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.437707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2386.443627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.458315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:43:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:43:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0x3, 0x7}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:43:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5767, 0x2) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @raw_data="a39c23fe7d76c6e448865828df5836ffb5f37440a28a254c6a0d3b791c0d5d640c7dd0e9d26d1327e19443a6bdb66d7e991d9cdf9405a6adf417fc86ab17e2e7466d8cbf3e82b12e7731d6d39df717924644e96a134273cfc60ac85062a71d3690bddf0130b07c222d8ad64e6ad855c5fba871d5174eaf6f3ec2298b2d48ea8a9f693f464696837e729d82b33cf29f0f5d65fadf4a57cdb8dc310bff8f071644ff55f9d615fd1efb1e54cfc17a5db75453946ea550120b95adacb9016412b856aa207b380f1e1969"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:43:54 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 06:43:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@userptr={0x7fff, 0x2, 0x4, 0x70000, 0x3ff, {0x0, 0x2710}, {0x2, 0x1, 0x20, 0x6, 0x8, 0x5, "86bc953c"}, 0x81, 0x2, {&(0x7f0000000180)}, 0x8000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000080}, 0x4806) 06:43:54 executing program 1: clock_getres(0x0, &(0x7f00000000c0)) 06:43:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0x3, 0x7}) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:43:54 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 06:43:54 executing program 1: clock_getres(0x0, &(0x7f00000000c0)) 06:43:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:43:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5767, 0x2) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @raw_data="a39c23fe7d76c6e448865828df5836ffb5f37440a28a254c6a0d3b791c0d5d640c7dd0e9d26d1327e19443a6bdb66d7e991d9cdf9405a6adf417fc86ab17e2e7466d8cbf3e82b12e7731d6d39df717924644e96a134273cfc60ac85062a71d3690bddf0130b07c222d8ad64e6ad855c5fba871d5174eaf6f3ec2298b2d48ea8a9f693f464696837e729d82b33cf29f0f5d65fadf4a57cdb8dc310bff8f071644ff55f9d615fd1efb1e54cfc17a5db75453946ea550120b95adacb9016412b856aa207b380f1e1969"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:43:54 executing program 1: clock_getres(0x2, 0x0) 06:43:55 executing program 4: clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) sched_rr_get_interval(r1, &(0x7f0000000080)) sched_rr_get_interval(r0, &(0x7f0000000000)) 06:43:55 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) [ 2391.187241] oom_reaper: reaped process 29044 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2391.231754] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2391.250006] systemd-journal cpuset=/ mems_allowed=0-1 [ 2391.255343] CPU: 0 PID: 27775 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2391.263304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2391.272654] Call Trace: [ 2391.275245] dump_stack+0x1fc/0x2ef [ 2391.278873] dump_header+0x15d/0xc3f [ 2391.282589] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2391.287689] ? ___ratelimit+0x319/0x590 [ 2391.291662] oom_kill_process.cold+0x10/0x692 [ 2391.296159] ? check_preemption_disabled+0x41/0x280 [ 2391.301180] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2391.306455] out_of_memory+0x1072/0x1390 [ 2391.310509] ? oom_killer_disable+0x270/0x270 [ 2391.315002] ? mutex_trylock+0x15f/0x1a0 [ 2391.319070] __alloc_pages_nodemask+0x23a2/0x2890 [ 2391.323918] ? find_get_entry+0x4cd/0x8a0 [ 2391.328183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2391.333036] alloc_pages_current+0x193/0x2a0 [ 2391.337428] filemap_fault+0x146e/0x2180 [ 2391.341480] ext4_filemap_fault+0x84/0xb0 [ 2391.345611] __do_fault+0x10b/0x4b0 [ 2391.349223] __handle_mm_fault+0x273b/0x41c0 [ 2391.353620] ? vm_insert_page+0x9c0/0x9c0 [ 2391.357761] ? check_preemption_disabled+0x41/0x280 [ 2391.362764] handle_mm_fault+0x436/0xb10 [ 2391.366813] __do_page_fault+0x68e/0xd60 [ 2391.370860] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2391.375860] ? spurious_fault+0x840/0x840 [ 2391.380003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2391.384848] ? page_fault+0x8/0x30 [ 2391.388390] page_fault+0x1e/0x30 [ 2391.391854] RIP: 0033:0x7f8f079322e3 [ 2391.395547] Code: Bad RIP value. [ 2391.398887] RSP: 002b:00007ffd1a75d968 EFLAGS: 00010246 [ 2391.404314] RAX: 0000000000000001 RBX: 00005611eb94c1e0 RCX: 00007f8f079322e3 [ 2391.411562] RDX: 0000000000000013 RSI: 00007ffd1a75d970 RDI: 000000000000000b [ 2391.418815] RBP: 00007ffd1a75db60 R08: 00007ffd1a7d9000 R09: 00000264292496c0 [ 2391.426254] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1a75d970 [ 2391.433505] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d1093335cf [ 2391.445231] Mem-Info: [ 2391.447664] active_anon:27895 inactive_anon:77894 isolated_anon:0 [ 2391.447664] active_file:51 inactive_file:31 isolated_file:0 [ 2391.447664] unevictable:0 dirty:37 writeback:0 unstable:0 [ 2391.447664] slab_reclaimable:13098 slab_unreclaimable:118952 [ 2391.447664] mapped:22382 shmem:92020 pagetables:581 bounce:0 [ 2391.447664] free:13823 free_pcp:878 free_cma:0 [ 2391.451454] syz-executor.5: vmalloc: allocation failure, allocated 1044525056 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2391.484280] Node 0 active_anon:109112kB inactive_anon:159072kB active_file:92kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87124kB dirty:96kB writeback:0kB shmem:214624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2391.507184] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2391.528216] Node 1 active_anon:2468kB inactive_anon:152504kB active_file:112kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2404kB dirty:52kB writeback:0kB shmem:153456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2391.544639] CPU: 1 PID: 29044 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2391.558756] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.563430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2391.563436] Call Trace: [ 2391.563456] dump_stack+0x1fc/0x2ef [ 2391.563473] warn_alloc.cold+0x7b/0x18f [ 2391.563490] ? zone_watermark_ok_safe+0x260/0x260 [ 2391.563503] ? rcu_nmi_exit+0xb3/0x180 [ 2391.563535] __vmalloc_area_node+0x4fd/0x780 [ 2391.593052] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2391.599222] ? __vmalloc_node_range+0x180/0x180 [ 2391.599236] ? _raw_spin_unlock+0x29/0x40 [ 2391.599251] ? __get_vm_area_node+0x2e2/0x3a0 [ 2391.601806] Node 0 DMA32 free:17812kB min:35996kB low:44992kB high:53988kB active_anon:109112kB inactive_anon:155476kB active_file:32kB inactive_file:40kB unevictable:0kB writepending:196kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2100kB bounce:0kB free_pcp:1532kB local_pcp:1284kB free_cma:0kB [ 2391.605422] __vmalloc_node_range+0xed/0x180 [ 2391.605437] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2391.605451] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2391.605463] vmalloc_user+0x70/0xe0 [ 2391.605478] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2391.611657] lowmem_reserve[]: 0 0 1 1 1 [ 2391.614251] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2391.614265] __vb2_queue_alloc+0x472/0xe60 [ 2391.614290] vb2_core_create_bufs+0x273/0x7e0 [ 2391.619766] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.622539] ? __vb2_queue_free+0x870/0x870 [ 2391.628579] lowmem_reserve[]: 0 0 0 0 0 [ 2391.632203] ? __video_do_ioctl+0x632/0xcd0 [ 2391.636359] Node 1 Normal free:26600kB min:53876kB low:67344kB high:80812kB active_anon:2468kB inactive_anon:152504kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:52kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:224kB bounce:0kB free_pcp:1980kB local_pcp:264kB free_cma:0kB [ 2391.640803] ? pi_state_update_owner+0x450/0x450 [ 2391.675436] lowmem_reserve[]: 0 0 0 0 0 [ 2391.678877] ? __mutex_lock+0x368/0x1190 [ 2391.684281] Node 0 DMA: 6*4kB (UM) 6*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10888kB [ 2391.687823] vb2_create_bufs+0x332/0x620 [ 2391.692114] Node 0 DMA32: 938*4kB (UME) 408*8kB (UME) 201*16kB (UME) 70*32kB (UME) 38*64kB (UME) 19*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18104kB [ 2391.696074] ? mark_held_locks+0xf0/0xf0 [ 2391.696087] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2391.696099] ? futex_wait_queue_me+0x404/0x5e0 [ 2391.696112] ? pi_state_update_owner+0x450/0x450 [ 2391.696124] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2391.696138] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2391.696158] v4l_create_bufs+0xb2/0x160 [ 2391.703123] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2391.704499] __video_do_ioctl+0x49a/0xcd0 [ 2391.704519] ? v4l_querycap+0x340/0x340 [ 2391.704538] ? __might_fault+0x192/0x1d0 [ 2391.709002] Node 1 Normal: 532*4kB (ME) 383*8kB (UME) 184*16kB (ME) 53*32kB (ME) 32*64kB (ME) 11*128kB (M) 4*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 0*2048kB 2*4096kB (M) = 26600kB [ 2391.734836] ? v4l_querycap+0x340/0x340 [ 2391.734851] video_usercopy+0x13f/0xfa0 [ 2391.734871] ? v4l_enumstd+0x60/0x60 [ 2391.734884] ? do_futex+0x171/0x1880 [ 2391.734898] ? mark_held_locks+0xf0/0xf0 [ 2391.734913] ? debug_check_no_obj_freed+0x201/0x490 [ 2391.734935] ? video_usercopy+0xfa0/0xfa0 [ 2391.734947] v4l2_ioctl+0x147/0x1a0 [ 2391.734958] ? video_devdata+0xa0/0xa0 [ 2391.734973] do_vfs_ioctl+0xcdb/0x12e0 [ 2391.734988] ? lock_downgrade+0x720/0x720 [ 2391.735002] ? check_preemption_disabled+0x41/0x280 [ 2391.735013] ? ioctl_preallocate+0x200/0x200 [ 2391.735030] ? __fget+0x356/0x510 [ 2391.735046] ? do_dup2+0x450/0x450 [ 2391.735059] ? __se_sys_futex+0x298/0x3b0 [ 2391.735080] ksys_ioctl+0x9b/0xc0 [ 2391.735096] __x64_sys_ioctl+0x6f/0xb0 [ 2391.735110] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2391.735123] do_syscall_64+0xf9/0x620 [ 2391.735142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2391.735153] RIP: 0033:0x7f579755f0f9 [ 2391.735167] Code: Bad RIP value. [ 2391.735173] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2391.735186] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2391.735193] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2391.735200] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2391.735207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2391.735215] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2391.751732] Mem-Info: [ 2391.784704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2391.796475] active_anon:27895 inactive_anon:77894 isolated_anon:0 [ 2391.796475] active_file:51 inactive_file:31 isolated_file:0 [ 2391.796475] unevictable:0 dirty:37 writeback:0 unstable:0 [ 2391.796475] slab_reclaimable:13098 slab_unreclaimable:118952 [ 2391.796475] mapped:22382 shmem:92020 pagetables:581 bounce:0 [ 2391.796475] free:13823 free_pcp:878 free_cma:0 [ 2391.808330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2391.822671] Node 0 active_anon:109112kB inactive_anon:159072kB active_file:92kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87124kB dirty:96kB writeback:0kB shmem:214624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2391.830054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2391.851747] Node 1 active_anon:2472kB inactive_anon:152504kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2324kB dirty:0kB writeback:0kB shmem:153456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2391.856788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2391.870052] Node 0 DMA free:10888kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3596kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.872821] 92045 total pagecache pages [ 2391.887319] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2391.900682] 0 pages in swap cache [ 2391.915458] Node 0 DMA32 free:18104kB min:35996kB low:44992kB high:53988kB active_anon:109032kB inactive_anon:155476kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2100kB bounce:0kB free_pcp:1532kB local_pcp:248kB free_cma:0kB [ 2391.920076] Swap cache stats: add 0, delete 0, find 0/0 [ 2391.921910] lowmem_reserve[]: 0 0 1 1 1 [ 2391.927707] Free swap = 0kB [ 2391.944260] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.949923] Total swap = 0kB [ 2391.951167] lowmem_reserve[]: 0 0 0 0 0 [ 2391.954624] 2097051 pages RAM [ 2391.954629] 0 pages HighMem/MovableOnly [ 2391.954633] 369649 pages reserved [ 2391.954637] 0 pages cma reserved [ 2391.972284] Node 1 Normal free:26600kB min:53876kB low:67344kB high:80812kB active_anon:2472kB inactive_anon:152504kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:224kB bounce:0kB free_pcp:1980kB local_pcp:1716kB free_cma:0kB [ 2391.977805] Unreclaimable slab info: [ 2391.978432] lowmem_reserve[]: 0 0 0 0 0 [ 2391.983661] Name Used Total [ 2391.983674] pid_2 13KB 32KB [ 2391.983743] batadv_tt_change_cache 6KB 11KB [ 2391.983754] batadv_tl_cache 14KB 16KB [ 2391.983779] TIPC 28KB 37KB [ 2391.983798] SCTPv6 35KB 49KB [ 2391.983817] DCCPv6 27KB 52KB [ 2391.983830] DCCP 30KB 49KB [ 2391.983870] RXRPC 30KB 45KB [ 2392.002542] Node 0 DMA: 6*4kB (UM) 6*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10888kB [ 2392.009135] rxrpc_call_jar 155KB 173KB [ 2392.027223] Node 0 DMA32: 938*4kB (UME) 408*8kB (UME) 201*16kB (UME) 70*32kB (UME) 38*64kB (UME) 19*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18104kB [ 2392.032725] bridge_fdb_cache 18KB 27KB [ 2392.050595] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2392.088495] fib6_nodes 258KB 308KB [ 2392.098729] Node 1 Normal: 532*4kB (ME) 383*8kB (UME) 184*16kB (ME) 53*32kB (ME) 32*64kB (ME) 11*128kB (M) 4*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 0*2048kB 2*4096kB (M) = 26600kB [ 2392.125072] ip6_dst_cache 715KB 791KB [ 2392.135698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2392.165599] RAWv6 136KB 162KB [ 2392.198956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2392.210350] UDPv6 45KB 48KB [ 2392.244235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2392.250966] TCPv6 36KB 42KB [ 2392.284139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2392.290181] nf_conntrack 14KB 18KB [ 2392.292472] 92045 total pagecache pages [ 2392.337133] t10_alua_lu_gp_cache 0KB 3KB [ 2392.346537] 0 pages in swap cache [ 2392.363091] sd_ext_cdb 0KB 7KB [ 2392.374671] Swap cache stats: add 0, delete 0, find 0/0 [ 2392.388448] scsi_sense_cache 1056KB 1060KB [ 2392.403040] Free swap = 0kB [ 2392.423986] virtio_scsi_cmd 16KB 16KB [ 2392.439560] Total swap = 0kB [ 2392.471898] sgpool-128 8KB 8KB [ 2392.479617] 2097051 pages RAM [ 2392.479623] 0 pages HighMem/MovableOnly [ 2392.479628] 369649 pages reserved [ 2392.479632] 0 pages cma reserved [ 2392.583486] sgpool-64 4KB 12KB [ 2392.588846] sgpool-32 2KB 15KB [ 2392.598869] sgpool-16 1KB 7KB [ 2392.604337] sgpool-8 0KB 7KB [ 2392.609701] mqueue_inode_cache 16KB 30KB [ 2392.620457] bio_post_read_ctx 14KB 15KB [ 2392.626255] bio-2 14KB 15KB [ 2392.631619] jfs_mp 7KB 7KB [ 2392.644174] cifs_small_rq 15KB 16KB [ 2392.649544] cifs_request 67KB 67KB [ 2392.658820] cifs_mpx_ids 0KB 7KB [ 2392.665111] nfs_commit_data 3KB 14KB [ 2392.670473] nfs_write_data 34KB 44KB [ 2392.687618] ext4_system_zone 1KB 7KB [ 2392.693028] bio-1 1KB 7KB [ 2392.702410] pid_namespace 3KB 11KB [ 2392.719554] rpc_buffers 17KB 25KB [ 2392.725773] rpc_tasks 2KB 7KB [ 2392.731137] UNIX 2086KB 2178KB [ 2392.750569] tcp_bind_bucket 4KB 8KB [ 2392.762444] ip_fib_trie 41KB 47KB [ 2392.772750] ip_fib_alias 183KB 213KB [ 2392.790962] ip_dst_cache 18KB 20KB [ 2392.798759] RAW 100KB 120KB [ 2392.812922] UDP 67KB 101KB [ 2392.820689] TCP 16KB 16KB [ 2392.837540] hugetlbfs_inode_cache 3KB 15KB [ 2392.850547] fscache_cookie_jar 1KB 7KB [ 2392.862645] eventpoll_pwq 24KB 43KB [ 2392.881077] eventpoll_epi 45KB 63KB [ 2392.890635] inotify_inode_mark 5KB 7KB [ 2392.907643] request_queue 199KB 199KB [ 2392.913022] blkdev_requests 1KB 3KB [ 2392.922273] blkdev_ioc 21KB 42KB [ 2392.937921] bio-0 730KB 873KB [ 2392.946004] biovec-max 1551KB 1625KB [ 2392.961239] biovec-64 858KB 952KB [ 2392.967448] biovec-16 126KB 157KB [ 2392.972813] bio_integrity_payload 1KB 8KB [ 2392.986999] khugepaged_mm_slot 3KB 19KB [ 2392.992465] uid_cache 0KB 4KB [ 2393.000235] dmaengine-unmap-2 0KB 3KB [ 2393.011521] skbuff_fclone_cache 25KB 41KB [ 2393.019446] skbuff_head_cache 8482KB 9735KB [ 2393.027543] configfs_dir_cache 3KB 7KB [ 2393.040157] file_lock_ctx 9KB 11KB [ 2393.048046] fsnotify_mark_connector 2KB 3KB [ 2393.059312] net_namespace 148KB 166KB [ 2393.067526] shmem_inode_cache 7978KB 7987KB [ 2393.072991] task_delay_info 305KB 442KB [ 2393.081121] taskstats 22KB 38KB [ 2393.089662] proc_dir_entry 1085KB 1230KB [ 2393.097705] pde_opener 14KB 23KB [ 2393.106183] seq_file 258KB 354KB [ 2393.112282] sigqueue 33KB 70KB [ 2393.120887] kernfs_node_cache 18242KB 18671KB [ 2393.128772] mnt_cache 247KB 256KB [ 2393.136711] filp 7584KB 8276KB [ 2393.142186] names_cache 103870KB 103891KB [ 2393.150069] iint_cache 31KB 51KB [ 2393.160247] key_jar 4KB 7KB [ 2393.168247] uts_namespace 4KB 15KB [ 2393.176218] nsproxy 4KB 11KB [ 2393.182323] vm_area_struct 2816KB 3275KB [ 2393.200671] mm_struct 458KB 565KB [ 2393.208637] fs_cache 365KB 400KB [ 2393.217710] files_cache 1314KB 1361KB [ 2393.225855] signal_cache 2387KB 2551KB [ 2393.231244] sighand_cache 691KB 742KB [ 2393.239257] task_struct 9929KB 9999KB [ 2393.247565] cred_jar 2610KB 2944KB [ 2393.252939] anon_vma_chain 846KB 1378KB [ 2393.265567] anon_vma 125KB 231KB [ 2393.270944] pid 199KB 256KB [ 2393.278096] Acpi-Operand 156KB 198KB [ 2393.287064] Acpi-ParseExt 9KB 11KB [ 2393.292431] Acpi-Parse 41KB 47KB [ 2393.300189] Acpi-State 52KB 63KB [ 2393.309004] Acpi-Namespace 20KB 27KB [ 2393.316248] numa_policy 0KB 3KB [ 2393.321729] debug_objects_cache 2914KB 3129KB [ 2393.330850] trace_event_file 297KB 298KB [ 2393.338005] ftrace_event_field 398KB 401KB [ 2393.346782] pool_workqueue 156KB 168KB [ 2393.352157] page->ptl 416KB 1087KB [ 2393.360725] kmalloc-2097152 2050KB 2050KB [ 2393.369900] kmalloc-524288 2056KB 2056KB [ 2393.377156] kmalloc-262144 1290KB 1290KB [ 2393.382541] kmalloc-131072 650KB 650KB [ 2393.391508] kmalloc-65536 3300KB 3762KB [ 2393.398688] kmalloc-32768 2541KB 2838KB [ 2393.407513] kmalloc-16384 1402KB 1452KB [ 2393.412885] kmalloc-8192 5709KB 5799KB [ 2393.420230] kmalloc-4096 31747KB 31807KB [ 2393.429117] kmalloc-2048 19148KB 20610KB [ 2393.436246] kmalloc-1024 13667KB 15206KB [ 2393.441614] kmalloc-512 16613KB 18825KB [ 2393.450463] kmalloc-256 5961KB 6656KB [ 2393.457972] kmalloc-128 1444KB 1838KB [ 2393.469009] kmalloc-96 3537KB 5336KB [ 2393.476211] kmalloc-64 3215KB 5048KB [ 2393.481581] kmalloc-32 2004KB 3146KB [ 2393.490314] kmalloc-192 2583KB 3112KB [ 2393.497603] kmem_cache 177KB 180KB [ 2393.509102] Out of memory (oom_kill_allocating_task): Kill process 27775 (systemd-journal) score 0 or sacrifice child [ 2393.522374] Killed process 27775 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:4kB, shmem-rss:2228kB [ 2393.541249] oom_reaper: reaped process 27775 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2228kB [ 2393.606606] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2393.632446] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2393.662857] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2393.686275] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2393.705008] systemd[1]: Stopped Journal Service. [ 2393.725342] systemd[1]: Starting Journal Service... [ 2393.869643] systemd-journald[29082]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2394.159438] systemd[1]: Started Journal Service. 06:44:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5767, 0x2) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @raw_data="a39c23fe7d76c6e448865828df5836ffb5f37440a28a254c6a0d3b791c0d5d640c7dd0e9d26d1327e19443a6bdb66d7e991d9cdf9405a6adf417fc86ab17e2e7466d8cbf3e82b12e7731d6d39df717924644e96a134273cfc60ac85062a71d3690bddf0130b07c222d8ad64e6ad855c5fba871d5174eaf6f3ec2298b2d48ea8a9f693f464696837e729d82b33cf29f0f5d65fadf4a57cdb8dc310bff8f071644ff55f9d615fd1efb1e54cfc17a5db75453946ea550120b95adacb9016412b856aa207b380f1e1969"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x5767, 0x2) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @raw_data="a39c23fe7d76c6e448865828df5836ffb5f37440a28a254c6a0d3b791c0d5d640c7dd0e9d26d1327e19443a6bdb66d7e991d9cdf9405a6adf417fc86ab17e2e7466d8cbf3e82b12e7731d6d39df717924644e96a134273cfc60ac85062a71d3690bddf0130b07c222d8ad64e6ad855c5fba871d5174eaf6f3ec2298b2d48ea8a9f693f464696837e729d82b33cf29f0f5d65fadf4a57cdb8dc310bff8f071644ff55f9d615fd1efb1e54cfc17a5db75453946ea550120b95adacb9016412b856aa207b380f1e1969"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) 06:44:05 executing program 4: clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) sched_rr_get_interval(r1, &(0x7f0000000080)) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) 06:44:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:05 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0x3, 0x7}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0x3, 0x7}) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) 06:44:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_overlay={0xe94a, 0x1, 0x4, 0x2000, 0xffffffe1, {r2, r3/1000+10000}, {0x1, 0x0, 0x8, 0x3, 0x6, 0x4, "e44dce42"}, 0x4, 0x3, {&(0x7f0000000300)=[{0x0, 0x81, {0x10000}, 0x10001}, {0x400, 0x3c, {0x8000}, 0xfffff001}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:44:05 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xfffffffc, 0x1, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3031334d}) 06:44:05 executing program 4: clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) sched_rr_get_interval(r1, &(0x7f0000000080)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) 06:44:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:44:05 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xfffffffc, 0x1, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3031334d}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xfffffffc, 0x1, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3031334d}) (async) 06:44:05 executing program 4: clock_gettime(0x1, &(0x7f0000000080)) clock_gettime(0x7, &(0x7f0000000000)) 06:44:05 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:05 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xfffffffc, 0x1, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3031334d}) 06:44:05 executing program 4: clock_gettime(0x1, &(0x7f0000000080)) clock_gettime(0x7, &(0x7f0000000000)) 06:44:05 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) [ 2401.882320] oom_reaper: reaped process 29108 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2401.909831] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2401.936667] in:imklog cpuset=/ mems_allowed=0-1 [ 2401.941410] CPU: 0 PID: 27779 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2401.948851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2401.958199] Call Trace: [ 2401.960813] dump_stack+0x1fc/0x2ef [ 2401.964468] dump_header+0x15d/0xc3f [ 2401.968188] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2401.973309] ? ___ratelimit+0x319/0x590 [ 2401.977466] oom_kill_process.cold+0x10/0x692 [ 2401.981981] ? check_preemption_disabled+0x41/0x280 [ 2401.987286] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2401.992565] out_of_memory+0x1072/0x1390 [ 2401.996643] ? oom_killer_disable+0x270/0x270 [ 2402.001139] ? mutex_trylock+0x15f/0x1a0 [ 2402.005379] __alloc_pages_nodemask+0x23a2/0x2890 [ 2402.010223] ? find_get_entry+0x4cd/0x8a0 [ 2402.014552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2402.019968] alloc_pages_current+0x193/0x2a0 [ 2402.024669] filemap_fault+0x146e/0x2180 [ 2402.028735] ext4_filemap_fault+0x84/0xb0 [ 2402.032869] __do_fault+0x10b/0x4b0 [ 2402.036483] __handle_mm_fault+0x273b/0x41c0 [ 2402.041153] ? vm_insert_page+0x9c0/0x9c0 [ 2402.045294] ? lock_downgrade+0x720/0x720 [ 2402.049446] ? check_preemption_disabled+0x41/0x280 [ 2402.054451] handle_mm_fault+0x436/0xb10 [ 2402.058498] __do_page_fault+0x68e/0xd60 [ 2402.062646] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2402.068026] ? spurious_fault+0x840/0x840 [ 2402.072162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2402.076988] ? page_fault+0x8/0x30 [ 2402.080510] page_fault+0x1e/0x30 [ 2402.083944] RIP: 0033:0x7fa29cb9a22d [ 2402.087644] Code: Bad RIP value. [ 2402.091118] RSP: 002b:00007fa29a536580 EFLAGS: 00010293 [ 2402.096479] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fa29cb9a22d [ 2402.103732] RDX: 0000000000001fa0 RSI: 00007fa29a536da0 RDI: 0000000000000004 [ 2402.110988] RBP: 0000560d828519d0 R08: 00007fa29bd13940 R09: 0000000004000001 [ 2402.118240] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fa29a536da0 [ 2402.125493] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fa29a536dd8 [ 2402.133162] Mem-Info: [ 2402.135625] active_anon:27850 inactive_anon:79925 isolated_anon:0 [ 2402.135625] active_file:15 inactive_file:27 isolated_file:0 [ 2402.135625] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2402.135625] slab_reclaimable:13084 slab_unreclaimable:117960 [ 2402.135625] mapped:22126 shmem:94067 pagetables:555 bounce:0 [ 2402.135625] free:13813 free_pcp:148 free_cma:0 [ 2402.141853] syz-executor.5: vmalloc: allocation failure, allocated 1042845696 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2402.170749] Node 0 active_anon:109300kB inactive_anon:162772kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88468kB dirty:8kB writeback:0kB shmem:218324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2402.192293] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2402.210766] Node 1 active_anon:2100kB inactive_anon:156928kB active_file:84kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:72kB writeback:0kB shmem:157944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2402.210773] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.210802] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2402.210820] Node 0 DMA32 free:17576kB min:35996kB low:44992kB high:53988kB active_anon:109300kB inactive_anon:159156kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2096kB bounce:0kB free_pcp:340kB local_pcp:92kB free_cma:0kB [ 2402.210847] lowmem_reserve[]: 0 0 1 1 1 [ 2402.210862] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.210885] lowmem_reserve[]: 0 0 0 0 0 [ 2402.210903] Node 1 Normal free:26800kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:156928kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2402.224151] CPU: 1 PID: 29108 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2402.243369] lowmem_reserve[]: 0 0 0 0 0 [ 2402.269645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2402.269651] Call Trace: [ 2402.269672] dump_stack+0x1fc/0x2ef [ 2402.269691] warn_alloc.cold+0x7b/0x18f [ 2402.269714] ? zone_watermark_ok_safe+0x260/0x260 [ 2402.269726] ? rcu_nmi_exit+0xb3/0x180 [ 2402.269761] __vmalloc_area_node+0x4fd/0x780 [ 2402.269782] ? __vmalloc_node_range+0x180/0x180 [ 2402.269796] ? _raw_spin_unlock+0x29/0x40 [ 2402.269810] ? __get_vm_area_node+0x2e2/0x3a0 [ 2402.269831] __vmalloc_node_range+0xed/0x180 [ 2402.269845] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2402.269861] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2402.269874] vmalloc_user+0x70/0xe0 [ 2402.269889] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2402.269903] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2402.269919] __vb2_queue_alloc+0x472/0xe60 [ 2402.269947] vb2_core_create_bufs+0x273/0x7e0 [ 2402.269963] ? __vb2_queue_free+0x870/0x870 [ 2402.269979] ? __video_do_ioctl+0x632/0xcd0 [ 2402.269999] ? __mutex_lock+0x368/0x1190 [ 2402.270017] vb2_create_bufs+0x332/0x620 [ 2402.270035] ? mark_held_locks+0xf0/0xf0 [ 2402.270050] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2402.270068] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2402.270084] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2402.270105] v4l_create_bufs+0xb2/0x160 [ 2402.270123] __video_do_ioctl+0x49a/0xcd0 [ 2402.270144] ? v4l_querycap+0x340/0x340 [ 2402.270164] ? __might_fault+0x192/0x1d0 [ 2402.270181] ? v4l_querycap+0x340/0x340 [ 2402.270198] video_usercopy+0x13f/0xfa0 [ 2402.270220] ? v4l_enumstd+0x60/0x60 [ 2402.270234] ? do_futex+0x171/0x1880 [ 2402.270251] ? mark_held_locks+0xf0/0xf0 [ 2402.270271] ? mark_held_locks+0xf0/0xf0 [ 2402.270294] ? video_usercopy+0xfa0/0xfa0 [ 2402.270307] v4l2_ioctl+0x147/0x1a0 [ 2402.270319] ? video_devdata+0xa0/0xa0 [ 2402.270335] do_vfs_ioctl+0xcdb/0x12e0 [ 2402.270351] ? lock_downgrade+0x720/0x720 [ 2402.270368] ? check_preemption_disabled+0x41/0x280 [ 2402.270383] ? ioctl_preallocate+0x200/0x200 [ 2402.270402] ? __fget+0x356/0x510 [ 2402.270419] ? do_dup2+0x450/0x450 [ 2402.270434] ? __se_sys_futex+0x298/0x3b0 [ 2402.270456] ksys_ioctl+0x9b/0xc0 [ 2402.270473] __x64_sys_ioctl+0x6f/0xb0 [ 2402.270488] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2402.270503] do_syscall_64+0xf9/0x620 [ 2402.270521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2402.270533] RIP: 0033:0x7f579755f0f9 [ 2402.270547] Code: Bad RIP value. [ 2402.270554] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.270568] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2402.270576] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2402.270584] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2402.270592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2402.270600] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2402.277320] Mem-Info: [ 2402.308877] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2402.326732] active_anon:27850 inactive_anon:79925 isolated_anon:0 [ 2402.326732] active_file:15 inactive_file:27 isolated_file:0 [ 2402.326732] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2402.326732] slab_reclaimable:13084 slab_unreclaimable:117960 [ 2402.326732] mapped:22126 shmem:94067 pagetables:555 bounce:0 [ 2402.326732] free:13813 free_pcp:148 free_cma:0 [ 2402.338628] Node 0 DMA32: 600*4kB (ME) 352*8kB (ME) 162*16kB (UME) 82*32kB (ME) 39*64kB (ME) 18*128kB (M) 3*256kB (UM) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 18048kB [ 2402.349440] Node 0 active_anon:109300kB inactive_anon:162772kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88468kB dirty:8kB writeback:0kB shmem:218324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2402.373026] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2402.385890] Node 1 active_anon:2100kB inactive_anon:156928kB active_file:84kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:72kB writeback:0kB shmem:157944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2402.389541] Node 1 Normal: 546*4kB (ME) 390*8kB (ME) 182*16kB (ME) 30*32kB (ME) 6*64kB (ME) 8*128kB (M) 5*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 0*2048kB 3*4096kB (UM) = 27224kB [ 2402.391996] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.398853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2402.409352] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2402.416422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2402.421921] Node 0 DMA32 free:17576kB min:35996kB low:44992kB high:53988kB active_anon:109300kB inactive_anon:159156kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2096kB bounce:0kB free_pcp:340kB local_pcp:248kB free_cma:0kB [ 2402.422093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2402.432993] lowmem_reserve[]: 0 0 1 1 1 [ 2402.438506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2402.440633] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.444280] 94112 total pagecache pages [ 2402.444294] 0 pages in swap cache [ 2402.444302] Swap cache stats: add 0, delete 0, find 0/0 [ 2402.444307] Free swap = 0kB [ 2402.444311] Total swap = 0kB [ 2402.444319] 2097051 pages RAM [ 2402.444323] 0 pages HighMem/MovableOnly [ 2402.444328] 369649 pages reserved [ 2402.444333] 0 pages cma reserved [ 2402.444339] Unreclaimable slab info: [ 2402.444344] Name Used Total [ 2402.444356] pid_2 27KB 32KB [ 2402.444428] batadv_tt_change_cache 5KB 11KB [ 2402.444442] batadv_tl_cache 11KB 16KB [ 2402.444469] TIPC 18KB 37KB [ 2402.444490] SCTPv6 24KB 49KB [ 2402.444508] DCCPv6 20KB 52KB [ 2402.459198] lowmem_reserve[]: 0 0 0 0 0 [ 2402.462927] DCCP 16KB 42KB [ 2402.470243] Node 1 Normal free:26800kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:156928kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:124kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2402.470358] RXRPC 21KB 45KB [ 2402.474365] lowmem_reserve[]: 0 0 0 0 0 [ 2402.474386] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2402.474454] Node 0 DMA32: 600*4kB (ME) 352*8kB (ME) 162*16kB (UME) 82*32kB (ME) 39*64kB (ME) 18*128kB (M) 3*256kB (UM) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 18048kB [ 2402.474523] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2402.474576] Node 1 Normal: 546*4kB (ME) 390*8kB (ME) 182*16kB (ME) 30*32kB (ME) 6*64kB (ME) 8*128kB (M) 5*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 0*2048kB 3*4096kB (UM) = 27224kB [ 2402.474662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2402.474672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2402.474689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2402.474700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2402.474706] 94112 total pagecache pages [ 2402.474720] 0 pages in swap cache [ 2402.474728] Swap cache stats: add 0, delete 0, find 0/0 [ 2402.474733] Free swap = 0kB [ 2402.474738] Total swap = 0kB [ 2402.474746] 2097051 pages RAM [ 2402.474751] 0 pages HighMem/MovableOnly [ 2402.474755] 369649 pages reserved [ 2402.474760] 0 pages cma reserved [ 2403.183163] rxrpc_call_jar 140KB 173KB [ 2403.188530] bridge_fdb_cache 17KB 27KB [ 2403.195667] fib6_nodes 251KB 308KB [ 2403.201046] ip6_dst_cache 715KB 791KB [ 2403.206746] RAWv6 121KB 155KB [ 2403.212117] UDPv6 41KB 48KB [ 2403.217562] TCPv6 33KB 36KB [ 2403.223075] nf_conntrack 12KB 18KB [ 2403.228494] t10_alua_lu_gp_cache 0KB 3KB [ 2403.234307] sd_ext_cdb 0KB 7KB [ 2403.239765] scsi_sense_cache 1056KB 1060KB [ 2403.245198] virtio_scsi_cmd 16KB 16KB [ 2403.250563] sgpool-128 8KB 8KB [ 2403.256087] sgpool-64 4KB 12KB [ 2403.261716] sgpool-32 2KB 15KB [ 2403.267924] sgpool-16 1KB 7KB [ 2403.273843] sgpool-8 0KB 7KB [ 2403.279858] mqueue_inode_cache 15KB 30KB [ 2403.286003] bio_post_read_ctx 14KB 15KB [ 2403.295077] bio-2 14KB 15KB [ 2403.301118] jfs_mp 7KB 7KB [ 2403.307223] cifs_small_rq 15KB 16KB [ 2403.313361] cifs_request 67KB 67KB [ 2403.319343] cifs_mpx_ids 0KB 7KB [ 2403.325354] nfs_commit_data 3KB 14KB [ 2403.331313] nfs_write_data 34KB 44KB [ 2403.337205] ext4_system_zone 1KB 7KB [ 2403.343206] bio-1 1KB 7KB [ 2403.349033] pid_namespace 3KB 11KB [ 2403.355094] rpc_buffers 17KB 25KB [ 2403.361052] rpc_tasks 2KB 7KB [ 2403.366988] UNIX 1993KB 2118KB [ 2403.373458] tcp_bind_bucket 2KB 8KB [ 2403.379525] ip_fib_trie 39KB 47KB [ 2403.385482] ip_fib_alias 180KB 213KB [ 2403.403073] ip_dst_cache 12KB 20KB [ 2403.408557] RAW 82KB 120KB [ 2403.423085] UDP 62KB 101KB [ 2403.428579] TCP 19KB 22KB [ 2403.443100] hugetlbfs_inode_cache 3KB 15KB [ 2403.448832] fscache_cookie_jar 1KB 7KB [ 2403.473082] eventpoll_pwq 22KB 43KB [ 2403.478469] eventpoll_epi 41KB 63KB [ 2403.493352] inotify_inode_mark 5KB 7KB [ 2403.500561] request_queue 199KB 199KB [ 2403.513093] blkdev_requests 1KB 3KB [ 2403.518563] blkdev_ioc 22KB 42KB [ 2403.543323] bio-0 651KB 795KB [ 2403.548717] biovec-max 1567KB 1617KB [ 2403.563140] biovec-64 792KB 929KB [ 2403.568613] biovec-16 125KB 157KB [ 2403.578828] bio_integrity_payload 1KB 8KB [ 2403.585139] khugepaged_mm_slot 8KB 19KB [ 2403.590608] uid_cache 0KB 4KB [ 2403.597391] dmaengine-unmap-2 0KB 3KB [ 2403.605120] skbuff_fclone_cache 31KB 41KB [ 2403.610671] skbuff_head_cache 8786KB 9596KB [ 2403.617139] configfs_dir_cache 3KB 7KB [ 2403.622602] file_lock_ctx 9KB 11KB [ 2403.629123] fsnotify_mark_connector 2KB 3KB [ 2403.635556] net_namespace 113KB 148KB [ 2403.640925] shmem_inode_cache 7962KB 7987KB [ 2403.647240] task_delay_info 308KB 442KB [ 2403.652612] taskstats 34KB 38KB [ 2403.659005] proc_dir_entry 1049KB 1226KB [ 2403.664926] pde_opener 13KB 23KB [ 2403.670311] seq_file 258KB 350KB [ 2403.676717] sigqueue 41KB 70KB [ 2403.682091] kernfs_node_cache 18235KB 18671KB [ 2403.688422] mnt_cache 233KB 256KB [ 2403.694443] filp 7594KB 8272KB [ 2403.699811] names_cache 102195KB 102195KB [ 2403.707910] iint_cache 26KB 51KB [ 2403.714024] key_jar 4KB 7KB [ 2403.719398] uts_namespace 4KB 15KB [ 2403.725816] nsproxy 3KB 11KB [ 2403.731185] vm_area_struct 2859KB 3271KB [ 2403.737615] mm_struct 500KB 565KB [ 2403.742982] fs_cache 341KB 400KB [ 2403.749357] files_cache 1260KB 1312KB [ 2403.755309] signal_cache 2350KB 2530KB [ 2403.760676] sighand_cache 698KB 742KB [ 2403.766995] task_struct 10201KB 10232KB [ 2403.772367] cred_jar 2589KB 2944KB [ 2403.778850] anon_vma_chain 860KB 1366KB [ 2403.785976] anon_vma 154KB 231KB [ 2403.791528] pid 193KB 256KB [ 2403.797823] Acpi-Operand 156KB 198KB [ 2403.805413] Acpi-ParseExt 9KB 11KB [ 2403.810783] Acpi-Parse 41KB 47KB [ 2403.817175] Acpi-State 52KB 63KB [ 2403.822543] Acpi-Namespace 20KB 27KB [ 2403.828982] numa_policy 0KB 3KB [ 2403.835135] debug_objects_cache 2891KB 3129KB [ 2403.840677] trace_event_file 297KB 298KB [ 2403.847182] ftrace_event_field 398KB 401KB [ 2403.852642] pool_workqueue 145KB 168KB [ 2403.859089] page->ptl 443KB 1087KB [ 2403.865034] kmalloc-2097152 2050KB 2050KB [ 2403.870403] kmalloc-524288 2056KB 2056KB [ 2403.876781] kmalloc-262144 1290KB 1290KB [ 2403.882151] kmalloc-131072 650KB 650KB [ 2403.888523] kmalloc-65536 3168KB 3498KB [ 2403.894528] kmalloc-32768 2475KB 2706KB [ 2403.899894] kmalloc-16384 1369KB 1452KB [ 2403.908674] kmalloc-8192 5684KB 5766KB [ 2403.914663] kmalloc-4096 31441KB 31501KB [ 2403.920034] kmalloc-2048 19074KB 20591KB [ 2403.926361] kmalloc-1024 13505KB 15198KB [ 2403.931731] kmalloc-512 17221KB 18813KB [ 2403.938082] kmalloc-256 5883KB 6656KB [ 2403.943985] kmalloc-128 1419KB 1838KB [ 2403.949363] kmalloc-96 3582KB 5336KB [ 2403.955664] kmalloc-64 3218KB 5048KB [ 2403.961034] kmalloc-32 2019KB 3146KB [ 2403.967386] kmalloc-192 2523KB 3108KB [ 2403.972757] kmem_cache 177KB 180KB [ 2403.979135] Out of memory (oom_kill_allocating_task): Kill process 27779 (in:imklog) score 0 or sacrifice child [ 2403.989928] Killed process 27777 (rsyslogd) total-vm:254332kB, anon-rss:796kB, file-rss:0kB, shmem-rss:0kB [ 2404.002255] oom_reaper: reaped process 27777 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2407.025560] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.031147] ieee802154 phy1 wpan1: encryption failed: -22 06:44:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @win={{0x4, 0xffff, 0x100, 0xffff}, 0x5, 0x8, &(0x7f00000000c0)={{0x6, 0x0, 0x0, 0x7}, &(0x7f0000000080)={{0xfff, 0x4, 0x2, 0x7ff}, &(0x7f0000000040)={{0x5, 0xfa7, 0x100, 0x401}}}}, 0x2, &(0x7f0000000100)="4089f1b76eacffeac046902c449791987bb1f3d382efa0690cf574c0bee4e148c36e96c1386ae52ff86ba02483a77ccfbf90ae8ae7b214585eab5fb7a841769519cafe0f92f417ebacc6c06e41892555b315c9c850fca10521a4f330bcfcee3eb04c0d3a8647e5d58b630f1d9fca2cfe4ebd6a80582ceb472011b579c2f79d57eabd42352e7227f76e5b0c7b6a2e0db3900e3d0465b04b8580ab2afb15b76464a3e737bbaf5f0788566fe87ee541632004c66eb9cb1addafd4ca24dbaf047f4e99fc8b0dc5074628c06e7891daaa167a332080", 0xf8}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 06:44:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:15 executing program 4: clock_gettime(0x1, &(0x7f0000000080)) clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000080)) (async) clock_gettime(0x7, &(0x7f0000000000)) (async) 06:44:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:44:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_overlay={0xe94a, 0x1, 0x4, 0x2000, 0xffffffe1, {r2, r3/1000+10000}, {0x1, 0x0, 0x8, 0x3, 0x6, 0x4, "e44dce42"}, 0x4, 0x3, {&(0x7f0000000300)=[{0x0, 0x81, {0x10000}, 0x10001}, {0x400, 0x3c, {0x8000}, 0xfffff001}]}, 0x4}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:44:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @win={{0x4, 0xffff, 0x100, 0xffff}, 0x5, 0x8, &(0x7f00000000c0)={{0x6, 0x0, 0x0, 0x7}, &(0x7f0000000080)={{0xfff, 0x4, 0x2, 0x7ff}, &(0x7f0000000040)={{0x5, 0xfa7, 0x100, 0x401}}}}, 0x2, &(0x7f0000000100)="4089f1b76eacffeac046902c449791987bb1f3d382efa0690cf574c0bee4e148c36e96c1386ae52ff86ba02483a77ccfbf90ae8ae7b214585eab5fb7a841769519cafe0f92f417ebacc6c06e41892555b315c9c850fca10521a4f330bcfcee3eb04c0d3a8647e5d58b630f1d9fca2cfe4ebd6a80582ceb472011b579c2f79d57eabd42352e7227f76e5b0c7b6a2e0db3900e3d0465b04b8580ab2afb15b76464a3e737bbaf5f0788566fe87ee541632004c66eb9cb1addafd4ca24dbaf047f4e99fc8b0dc5074628c06e7891daaa167a332080", 0xf8}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 06:44:15 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x6, 0x1, 0x6, 0x3, 0x200, 0x3}, &(0x7f0000000040)={0x80, 0x7, 0x6, 0x1f, 0x3, 0x7f, 0x3, 0x2}, &(0x7f00000000c0)={0x6, 0xcf76, 0x1, 0xfa, 0x5, 0x9, 0xff, 0x8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffff]}, 0x8}) 06:44:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:44:15 executing program 1: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:15 executing program 1: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) [ 2411.727633] oom_reaper: reaped process 29171 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2411.763019] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2411.780956] systemd-journal cpuset=/ mems_allowed=0-1 [ 2411.786210] CPU: 0 PID: 29082 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2411.794174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2411.803521] Call Trace: [ 2411.806113] dump_stack+0x1fc/0x2ef [ 2411.809740] dump_header+0x15d/0xc3f [ 2411.813454] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2411.818566] ? ___ratelimit+0x319/0x590 [ 2411.822541] oom_kill_process.cold+0x10/0x692 [ 2411.827036] ? check_preemption_disabled+0x41/0x280 [ 2411.832069] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2411.837351] out_of_memory+0x1072/0x1390 [ 2411.841420] ? oom_killer_disable+0x270/0x270 [ 2411.845922] ? mutex_trylock+0x15f/0x1a0 [ 2411.849984] __alloc_pages_nodemask+0x23a2/0x2890 [ 2411.854827] ? find_get_entry+0x4cd/0x8a0 [ 2411.858961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2411.863795] alloc_pages_current+0x193/0x2a0 [ 2411.864469] syz-executor.5: vmalloc: allocation failure, allocated 1050243072 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2411.868188] filemap_fault+0x146e/0x2180 [ 2411.882029] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2411.886008] ext4_filemap_fault+0x84/0xb0 [ 2411.886023] __do_fault+0x10b/0x4b0 [ 2411.886041] __handle_mm_fault+0x273b/0x41c0 [ 2411.903276] ? vm_insert_page+0x9c0/0x9c0 [ 2411.907428] ? check_preemption_disabled+0x41/0x280 [ 2411.912437] handle_mm_fault+0x436/0xb10 [ 2411.916493] __do_page_fault+0x68e/0xd60 [ 2411.920549] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2411.925556] ? spurious_fault+0x840/0x840 [ 2411.929695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2411.934533] ? page_fault+0x8/0x30 [ 2411.938064] page_fault+0x1e/0x30 [ 2411.941504] RIP: 0033:0x7efdbc1752e3 [ 2411.945205] Code: Bad RIP value. [ 2411.948569] RSP: 002b:00007ffe3f1e5718 EFLAGS: 00010246 [ 2411.953942] RAX: 0000000000000001 RBX: 0000556dfe32b1e0 RCX: 00007efdbc1752e3 [ 2411.961200] RDX: 0000000000000012 RSI: 00007ffe3f1e5720 RDI: 000000000000000b [ 2411.968465] RBP: 00007ffe3f1e5900 R08: 0000000000989680 R09: 0000026979918287 [ 2411.975720] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3f1e5720 [ 2411.982977] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d10a6fcddf [ 2411.990252] CPU: 1 PID: 29171 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2411.998139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2412.007008] Mem-Info: [ 2412.007494] Call Trace: [ 2412.009914] active_anon:27817 inactive_anon:79925 isolated_anon:0 [ 2412.009914] active_file:13 inactive_file:12 isolated_file:0 [ 2412.009914] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2412.009914] slab_reclaimable:13213 slab_unreclaimable:115131 [ 2412.009914] mapped:22151 shmem:94067 pagetables:557 bounce:0 [ 2412.009914] free:14074 free_pcp:1033 free_cma:0 [ 2412.012491] dump_stack+0x1fc/0x2ef [ 2412.045853] Node 0 active_anon:110100kB inactive_anon:162776kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88604kB dirty:0kB writeback:0kB shmem:218328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2412.049414] warn_alloc.cold+0x7b/0x18f [ 2412.077217] Node 1 active_anon:1168kB inactive_anon:156924kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2412.081124] ? zone_watermark_ok_safe+0x260/0x260 [ 2412.108358] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.113165] ? rcu_nmi_exit+0xb3/0x180 [ 2412.139528] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2412.143394] __vmalloc_area_node+0x4fd/0x780 [ 2412.148387] Node 0 DMA32 free:18372kB min:35996kB low:44992kB high:53988kB active_anon:110100kB inactive_anon:159160kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2224kB bounce:0kB free_pcp:2416kB local_pcp:728kB free_cma:0kB [ 2412.152766] ? __vmalloc_node_range+0x180/0x180 [ 2412.181901] lowmem_reserve[]: 0 0 1 1 1 [ 2412.186551] ? _raw_spin_unlock+0x29/0x40 [ 2412.186566] ? __get_vm_area_node+0x2e2/0x3a0 [ 2412.186583] __vmalloc_node_range+0xed/0x180 [ 2412.186599] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.190548] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.194689] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2412.194702] vmalloc_user+0x70/0xe0 [ 2412.194722] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.199184] lowmem_reserve[]: 0 0 0 0 0 [ 2412.203586] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.207906] Node 1 Normal free:27048kB min:53876kB low:67344kB high:80812kB active_anon:1168kB inactive_anon:156924kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:4kB bounce:0kB free_pcp:1716kB local_pcp:1468kB free_cma:0kB [ 2412.233733] __vb2_queue_alloc+0x472/0xe60 [ 2412.233756] vb2_core_create_bufs+0x273/0x7e0 [ 2412.233770] ? __vb2_queue_free+0x870/0x870 [ 2412.239139] lowmem_reserve[]: 0 0 0 0 0 [ 2412.242737] ? __video_do_ioctl+0x632/0xcd0 [ 2412.247070] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2412.251023] ? __mutex_lock+0x368/0x1190 [ 2412.255165] Node 0 DMA32: 633*4kB (ME) 446*8kB (ME) 239*16kB (ME) 128*32kB (UME) 32*64kB (UME) 8*128kB (M) 3*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18372kB [ 2412.283936] vb2_create_bufs+0x332/0x620 [ 2412.283953] ? mark_held_locks+0xf0/0xf0 [ 2412.283967] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2412.288328] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2412.292793] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2412.297108] Node 1 Normal: 450*4kB (UME) 322*8kB (ME) 167*16kB (UME) 45*32kB (ME) 10*64kB (ME) 8*128kB (M) 4*256kB (M) 1*512kB (M) 3*1024kB (UME) 0*2048kB 3*4096kB (UM) = 27048kB [ 2412.301059] v4l_create_bufs+0xb2/0x160 [ 2412.305401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.319493] __video_do_ioctl+0x49a/0xcd0 [ 2412.319511] ? v4l_querycap+0x340/0x340 [ 2412.319529] ? __might_fault+0x192/0x1d0 [ 2412.323574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.338641] ? v4l_querycap+0x340/0x340 [ 2412.338655] video_usercopy+0x13f/0xfa0 [ 2412.338674] ? v4l_enumstd+0x60/0x60 [ 2412.342717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.346755] ? mark_held_locks+0xf0/0xf0 [ 2412.346770] ? __lock_acquire+0x6de/0x3ff0 [ 2412.346793] ? video_usercopy+0xfa0/0xfa0 [ 2412.351866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.362848] v4l2_ioctl+0x147/0x1a0 [ 2412.362861] ? video_devdata+0xa0/0xa0 [ 2412.362879] do_vfs_ioctl+0xcdb/0x12e0 [ 2412.368056] 94092 total pagecache pages [ 2412.384065] ? lock_downgrade+0x720/0x720 [ 2412.384079] ? check_preemption_disabled+0x41/0x280 [ 2412.384094] ? ioctl_preallocate+0x200/0x200 [ 2412.388092] 0 pages in swap cache [ 2412.396892] ? __fget+0x356/0x510 [ 2412.396913] ? do_dup2+0x450/0x450 [ 2412.401035] Swap cache stats: add 0, delete 0, find 0/0 [ 2412.404989] ? lock_acquire+0x170/0x3c0 [ 2412.405001] ? finish_task_switch+0x118/0x760 [ 2412.405019] ksys_ioctl+0x9b/0xc0 [ 2412.409049] Free swap = 0kB [ 2412.417608] __x64_sys_ioctl+0x6f/0xb0 [ 2412.417621] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2412.417636] do_syscall_64+0xf9/0x620 [ 2412.421581] Total swap = 0kB [ 2412.425541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2412.425553] RIP: 0033:0x7f579755f0f9 [ 2412.425567] Code: Bad RIP value. [ 2412.429251] 2097051 pages RAM [ 2412.438063] RSP: 002b:00007f5795a8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.438077] RAX: ffffffffffffffda RBX: 00007f579767f120 RCX: 00007f579755f0f9 [ 2412.438083] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2412.438094] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2412.442130] 0 pages HighMem/MovableOnly [ 2412.446341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2412.446349] R13: 00007ffd5ade33ef R14: 00007f5795a8f300 R15: 0000000000022000 [ 2412.482078] Mem-Info: [ 2412.486659] 369649 pages reserved [ 2412.503486] active_anon:27817 inactive_anon:79925 isolated_anon:0 [ 2412.503486] active_file:13 inactive_file:12 isolated_file:0 [ 2412.503486] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2412.503486] slab_reclaimable:13213 slab_unreclaimable:115131 [ 2412.503486] mapped:22151 shmem:94067 pagetables:557 bounce:0 [ 2412.503486] free:14074 free_pcp:1033 free_cma:0 [ 2412.506575] 0 pages cma reserved [ 2412.506583] Unreclaimable slab info: [ 2412.506588] Name Used Total [ 2412.506600] pid_2 27KB 32KB [ 2412.506672] batadv_tt_change_cache 3KB 11KB [ 2412.506686] batadv_tl_cache 7KB 16KB [ 2412.506712] TIPC 16KB 30KB [ 2412.506732] SCTPv6 24KB 49KB [ 2412.506751] DCCPv6 17KB 52KB [ 2412.506765] DCCP 16KB 42KB [ 2412.506806] RXRPC 19KB 45KB [ 2412.506815] rxrpc_call_jar 128KB 173KB [ 2412.506829] bridge_fdb_cache 15KB 27KB [ 2412.506844] fib6_nodes 246KB 308KB [ 2412.506853] ip6_dst_cache 715KB 791KB [ 2412.506867] RAWv6 121KB 155KB [ 2412.506879] UDPv6 37KB 48KB [ 2412.506892] TCPv6 36KB 48KB [ 2412.506912] nf_conntrack 12KB 18KB [ 2412.506979] t10_alua_lu_gp_cache 0KB 3KB [ 2412.506993] sd_ext_cdb 0KB 7KB [ 2412.507004] scsi_sense_cache 1056KB 1060KB [ 2412.507013] virtio_scsi_cmd 16KB 16KB [ 2412.507026] sgpool-128 8KB 8KB [ 2412.507036] sgpool-64 4KB 12KB [ 2412.507045] sgpool-32 2KB 15KB [ 2412.507054] sgpool-16 1KB 7KB [ 2412.507063] sgpool-8 0KB 7KB [ 2412.507080] mqueue_inode_cache 15KB 30KB [ 2412.507095] bio_post_read_ctx 14KB 15KB [ 2412.507167] bio-2 14KB 15KB [ 2412.507182] jfs_mp 7KB 7KB [ 2412.507221] cifs_small_rq 15KB 16KB [ 2412.507231] cifs_request 67KB 67KB [ 2412.507240] cifs_mpx_ids 0KB 7KB [ 2412.507270] nfs_commit_data 3KB 14KB [ 2412.507279] nfs_write_data 34KB 44KB [ 2412.507321] ext4_system_zone 1KB 7KB [ 2412.507351] bio-1 1KB 7KB [ 2412.507361] pid_namespace 3KB 11KB [ 2412.507381] rpc_buffers 17KB 25KB [ 2412.507390] rpc_tasks 2KB 7KB [ 2412.507400] UNIX 1996KB 2103KB [ 2412.507415] tcp_bind_bucket 1KB 8KB [ 2412.507432] ip_fib_trie 37KB 47KB [ 2412.507442] ip_fib_alias 175KB 213KB [ 2412.507452] ip_dst_cache 11KB 20KB [ 2412.507464] RAW 78KB 112KB [ 2412.507473] UDP 59KB 101KB [ 2412.507486] TCP 14KB 22KB [ 2412.507498] hugetlbfs_inode_cache 3KB 15KB [ 2412.507507] fscache_cookie_jar 1KB 7KB [ 2412.507517] eventpoll_pwq 21KB 43KB [ 2412.507527] eventpoll_epi 39KB 63KB [ 2412.526378] Node 0 active_anon:110100kB inactive_anon:162776kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88604kB dirty:0kB writeback:0kB shmem:218328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2412.526402] Node 1 active_anon:1168kB inactive_anon:156924kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2412.526406] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.526432] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2412.526449] Node 0 DMA32 free:18372kB min:35996kB low:44992kB high:53988kB active_anon:110100kB inactive_anon:159160kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2224kB bounce:0kB free_pcp:2416kB local_pcp:1688kB free_cma:0kB [ 2412.526478] lowmem_reserve[]: 0 0 1 1 1 [ 2412.526495] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.526522] lowmem_reserve[]: 0 0 0 0 0 [ 2412.526540] Node 1 Normal free:27048kB min:53876kB low:67344kB high:80812kB active_anon:1168kB inactive_anon:156924kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:4kB bounce:0kB free_pcp:1716kB local_pcp:248kB free_cma:0kB [ 2412.526570] lowmem_reserve[]: 0 0 0 0 0 [ 2412.526587] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2412.531295] inotify_inode_mark 5KB 7KB [ 2412.535082] Node 0 DMA32: 633*4kB (ME) 449*8kB (UME) 239*16kB (ME) 128*32kB (UME) 32*64kB (UME) 8*128kB (M) 3*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18396kB [ 2412.542427] request_queue 199KB 199KB [ 2412.543174] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2412.547755] blkdev_requests 1KB 3KB [ 2412.560119] Node 1 Normal: 450*4kB (UME) 322*8kB (ME) 167*16kB (UME) 45*32kB (ME) 10*64kB (ME) 8*128kB (M) 4*256kB (M) 1*512kB (M) 3*1024kB (UME) 0*2048kB 3*4096kB (UM) = 27048kB [ 2412.565878] blkdev_ioc 23KB 42KB [ 2412.568680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.580296] bio-0 822KB 851KB [ 2412.590763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.594434] biovec-max 1584KB 1625KB [ 2412.603727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.608600] biovec-64 909KB 960KB [ 2412.652305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.654590] biovec-16 128KB 157KB [ 2412.659819] 94092 total pagecache pages [ 2412.673021] bio_integrity_payload 1KB 8KB [ 2412.681943] 0 pages in swap cache [ 2412.694007] khugepaged_mm_slot 7KB 19KB [ 2412.703426] Swap cache stats: add 0, delete 0, find 0/0 [ 2412.717161] uid_cache 0KB 4KB [ 2412.727139] Free swap = 0kB [ 2412.736437] dmaengine-unmap-2 0KB 3KB [ 2412.739892] Total swap = 0kB [ 2412.742002] skbuff_fclone_cache 36KB 41KB [ 2412.750781] 2097051 pages RAM [ 2412.758950] skbuff_head_cache 9554KB 9596KB [ 2412.770445] 0 pages HighMem/MovableOnly [ 2412.779249] configfs_dir_cache 3KB 7KB [ 2412.780886] 369649 pages reserved [ 2412.790271] file_lock_ctx 9KB 11KB [ 2412.800492] 0 pages cma reserved [ 2412.804567] fsnotify_mark_connector 2KB 3KB [ 2413.331553] net_namespace 96KB 113KB [ 2413.336956] shmem_inode_cache 7948KB 7987KB [ 2413.342316] task_delay_info 304KB 442KB [ 2413.347745] taskstats 29KB 38KB [ 2413.353108] proc_dir_entry 1017KB 1222KB [ 2413.358504] pde_opener 12KB 23KB [ 2413.363869] seq_file 268KB 350KB [ 2413.369292] sigqueue 36KB 70KB [ 2413.374689] kernfs_node_cache 18229KB 18671KB [ 2413.380047] mnt_cache 226KB 256KB [ 2413.385468] filp 7441KB 8272KB [ 2413.390824] names_cache 96585KB 96623KB [ 2413.396343] iint_cache 29KB 51KB [ 2413.401704] key_jar 4KB 7KB [ 2413.407110] uts_namespace 4KB 15KB [ 2413.412470] nsproxy 3KB 11KB [ 2413.417862] vm_area_struct 3065KB 3271KB [ 2413.423219] mm_struct 516KB 565KB [ 2413.430345] fs_cache 337KB 400KB [ 2413.435771] files_cache 1250KB 1297KB [ 2413.441129] signal_cache 2337KB 2515KB [ 2413.446541] sighand_cache 652KB 721KB [ 2413.451900] task_struct 10459KB 10491KB [ 2413.457362] cred_jar 2466KB 2944KB [ 2413.462726] anon_vma_chain 919KB 1366KB [ 2413.468782] anon_vma 111KB 231KB [ 2413.474157] pid 184KB 256KB [ 2413.494463] Acpi-Operand 156KB 198KB [ 2413.521751] Acpi-ParseExt 9KB 11KB [ 2413.544683] Acpi-Parse 41KB 47KB [ 2413.550059] Acpi-State 52KB 63KB [ 2413.555485] Acpi-Namespace 20KB 27KB [ 2413.560847] numa_policy 0KB 3KB [ 2413.566281] debug_objects_cache 2876KB 3129KB [ 2413.571817] trace_event_file 297KB 298KB [ 2413.577219] ftrace_event_field 398KB 401KB [ 2413.582663] pool_workqueue 144KB 164KB [ 2413.588257] page->ptl 480KB 1087KB [ 2413.593656] kmalloc-2097152 2050KB 2050KB [ 2413.599069] kmalloc-524288 2056KB 2056KB [ 2413.604430] kmalloc-262144 1290KB 1290KB [ 2413.609861] kmalloc-131072 650KB 650KB [ 2413.615273] kmalloc-65536 3168KB 3234KB [ 2413.620630] kmalloc-32768 2442KB 2607KB [ 2413.626018] kmalloc-16384 1303KB 1386KB [ 2413.631375] kmalloc-8192 5634KB 5725KB [ 2413.636771] kmalloc-4096 31845KB 31900KB [ 2413.642131] kmalloc-2048 19122KB 20591KB [ 2413.647520] kmalloc-1024 13781KB 15198KB [ 2413.652880] kmalloc-512 18773KB 18813KB [ 2413.658294] kmalloc-256 5878KB 6656KB [ 2413.663654] kmalloc-128 1420KB 1838KB [ 2413.669339] kmalloc-96 3731KB 5336KB [ 2413.679911] kmalloc-64 3270KB 5048KB [ 2413.688561] kmalloc-32 2086KB 3146KB [ 2413.693932] kmalloc-192 2467KB 3108KB [ 2413.704123] kmem_cache 177KB 180KB [ 2413.712630] Out of memory (oom_kill_allocating_task): Kill process 29082 (systemd-journal) score 0 or sacrifice child [ 2413.731741] Killed process 29082 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1532kB [ 2413.743746] oom_reaper: reaped process 29082 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1532kB [ 2413.772901] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2413.805678] systemd cpuset=/ mems_allowed=0-1 [ 2413.817386] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 2413.824323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2413.833676] Call Trace: [ 2413.836271] dump_stack+0x1fc/0x2ef [ 2413.839905] dump_header+0x15d/0xc3f [ 2413.843627] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2413.848731] ? ___ratelimit+0x319/0x590 [ 2413.852711] oom_kill_process.cold+0x10/0x692 [ 2413.857207] ? oom_badness.part.0+0x135/0x6e0 [ 2413.861709] ? lock_downgrade+0x720/0x720 [ 2413.865860] ? check_preemption_disabled+0x41/0x280 [ 2413.870882] out_of_memory+0x34d/0x1390 [ 2413.874864] ? oom_killer_disable+0x270/0x270 [ 2413.879361] ? mutex_trylock+0x15f/0x1a0 [ 2413.883430] __alloc_pages_nodemask+0x23a2/0x2890 [ 2413.888281] ? find_get_entry+0x4cd/0x8a0 [ 2413.892438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2413.897311] alloc_pages_current+0x193/0x2a0 [ 2413.901721] filemap_fault+0x146e/0x2180 [ 2413.905801] ext4_filemap_fault+0x84/0xb0 [ 2413.910214] __do_fault+0x10b/0x4b0 [ 2413.913849] __handle_mm_fault+0x273b/0x41c0 [ 2413.918263] ? vm_insert_page+0x9c0/0x9c0 [ 2413.922424] ? check_preemption_disabled+0x41/0x280 [ 2413.927443] handle_mm_fault+0x436/0xb10 [ 2413.931515] __do_page_fault+0x68e/0xd60 [ 2413.935584] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2413.940609] ? spurious_fault+0x840/0x840 [ 2413.944778] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2413.949629] ? page_fault+0x8/0x30 [ 2413.953173] page_fault+0x1e/0x30 [ 2413.956622] RIP: 0033:0x7f81603f3303 [ 2413.960333] Code: Bad RIP value. [ 2413.963689] RSP: 002b:00007fff0eb18bf0 EFLAGS: 00010293 [ 2413.969048] RAX: 0000000000000001 RBX: 00005563ee201f50 RCX: 00007f81603f3303 [ 2413.976312] RDX: 0000000000000024 RSI: 00007fff0eb18c00 RDI: 0000000000000004 [ 2413.983578] RBP: 00007fff0eb18eb0 R08: 431bde82d7b634db R09: 0000000000006ea0 [ 2413.990841] R10: 00000000ffffffff R11: 0000000000000293 R12: 00007fff0eb18c00 [ 2413.998107] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000003 [ 2414.009071] Mem-Info: [ 2414.013138] active_anon:27699 inactive_anon:79924 isolated_anon:0 [ 2414.013138] active_file:37 inactive_file:380 isolated_file:0 [ 2414.013138] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2414.013138] slab_reclaimable:13213 slab_unreclaimable:115110 [ 2414.013138] mapped:21993 shmem:94067 pagetables:535 bounce:0 [ 2414.013138] free:74451 free_pcp:430 free_cma:0 [ 2414.048827] Node 0 active_anon:109644kB inactive_anon:162772kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:218328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2414.109021] Node 1 active_anon:1252kB inactive_anon:156924kB active_file:216kB inactive_file:3484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2108kB dirty:100kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2414.161704] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2414.189704] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2414.195133] Node 0 DMA32 free:21280kB min:35996kB low:44992kB high:53988kB active_anon:109644kB inactive_anon:159156kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2140kB bounce:0kB free_pcp:248kB local_pcp:44kB free_cma:0kB [ 2414.225663] lowmem_reserve[]: 0 0 1 1 1 [ 2414.230565] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2414.258298] lowmem_reserve[]: 0 0 0 0 0 [ 2414.262316] Node 1 Normal free:511824kB min:53876kB low:67344kB high:80812kB active_anon:1252kB inactive_anon:156924kB active_file:216kB inactive_file:4084kB unevictable:0kB writepending:148kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:0kB bounce:0kB free_pcp:1664kB local_pcp:264kB free_cma:0kB [ 2414.293545] lowmem_reserve[]: 0 0 0 0 0 [ 2414.298611] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2414.313941] Node 0 DMA32: 590*4kB (ME) 428*8kB (UME) 249*16kB (UME) 119*32kB (UME) 33*64kB (ME) 19*128kB (UM) 4*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 21192kB [ 2414.330201] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2414.342120] Node 1 Normal: 38*4kB (UME) 11*8kB (E) 175*16kB (UME) 56*32kB (UME) 23*64kB (UME) 19*128kB (UM) 9*256kB (UM) 7*512kB (UM) 10*1024kB (UME) 7*2048kB (U) 139*4096kB (UM) = 608544kB [ 2414.360366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2414.370185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2414.379750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2414.388931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2414.398393] 95303 total pagecache pages [ 2414.403041] 0 pages in swap cache [ 2414.407340] Swap cache stats: add 0, delete 0, find 0/0 [ 2414.413394] Free swap = 0kB [ 2414.417525] Total swap = 0kB [ 2414.422474] 2097051 pages RAM [ 2414.426001] 0 pages HighMem/MovableOnly [ 2414.429968] 369649 pages reserved [ 2414.433412] 0 pages cma reserved [ 2414.437082] Unreclaimable slab info: [ 2414.440789] Name Used Total [ 2414.446605] pid_2 27KB 32KB [ 2414.457290] batadv_tt_change_cache 3KB 11KB [ 2414.463526] batadv_tl_cache 7KB 16KB [ 2414.469221] TIPC 16KB 30KB [ 2414.474597] SCTPv6 24KB 49KB [ 2414.480262] DCCPv6 17KB 52KB [ 2414.485922] DCCP 16KB 42KB [ 2414.491317] RXRPC 19KB 45KB [ 2414.496998] rxrpc_call_jar 128KB 173KB [ 2414.502482] bridge_fdb_cache 15KB 27KB [ 2414.508877] fib6_nodes 246KB 308KB [ 2414.515317] ip6_dst_cache 732KB 791KB [ 2414.520699] RAWv6 121KB 155KB [ 2414.526357] UDPv6 37KB 48KB [ 2414.531728] TCPv6 33KB 48KB [ 2414.537650] nf_conntrack 12KB 18KB [ 2414.543083] t10_alua_lu_gp_cache 0KB 3KB [ 2414.549013] sd_ext_cdb 0KB 7KB [ 2414.554375] scsi_sense_cache 1056KB 1060KB [ 2414.560881] virtio_scsi_cmd 16KB 16KB [ 2414.567214] sgpool-128 8KB 8KB [ 2414.573273] sgpool-64 4KB 12KB [ 2414.579577] sgpool-32 2KB 15KB [ 2414.586067] sgpool-16 1KB 7KB [ 2414.592497] sgpool-8 0KB 7KB [ 2414.599067] mqueue_inode_cache 15KB 30KB [ 2414.605423] bio_post_read_ctx 14KB 15KB [ 2414.610856] bio-2 14KB 15KB [ 2414.616521] jfs_mp 7KB 7KB [ 2414.621917] cifs_small_rq 15KB 16KB [ 2414.628560] cifs_request 67KB 67KB [ 2414.634586] cifs_mpx_ids 0KB 7KB [ 2414.641381] nfs_commit_data 3KB 14KB [ 2414.647788] nfs_write_data 34KB 44KB [ 2414.653833] ext4_system_zone 1KB 7KB [ 2414.660178] bio-1 1KB 7KB [ 2414.666579] pid_namespace 3KB 11KB [ 2414.673482] rpc_buffers 17KB 25KB [ 2414.684386] rpc_tasks 2KB 7KB [ 2414.691571] UNIX 1996KB 2088KB [ 2414.704468] tcp_bind_bucket 1KB 8KB [ 2414.711825] ip_fib_trie 37KB 47KB [ 2414.723033] ip_fib_alias 175KB 213KB [ 2414.731535] ip_dst_cache 11KB 20KB [ 2414.746492] RAW 78KB 112KB [ 2414.751868] UDP 59KB 101KB [ 2414.761515] TCP 11KB 16KB [ 2414.767834] hugetlbfs_inode_cache 3KB 15KB [ 2414.778592] fscache_cookie_jar 1KB 7KB [ 2414.785194] eventpoll_pwq 21KB 43KB [ 2414.790566] eventpoll_epi 39KB 63KB [ 2414.796221] inotify_inode_mark 5KB 7KB [ 2414.801753] request_queue 199KB 199KB [ 2414.807415] blkdev_requests 1KB 3KB [ 2414.812787] blkdev_ioc 23KB 42KB [ 2414.819077] bio-0 901KB 903KB [ 2414.825542] biovec-max 1584KB 1625KB [ 2414.831407] biovec-64 972KB 976KB [ 2414.837811] biovec-16 136KB 157KB [ 2414.843841] bio_integrity_payload 1KB 8KB [ 2414.850090] khugepaged_mm_slot 7KB 19KB [ 2414.855814] uid_cache 0KB 4KB [ 2414.861174] dmaengine-unmap-2 0KB 3KB [ 2414.866834] skbuff_fclone_cache 35KB 41KB [ 2414.873121] skbuff_head_cache 9741KB 9742KB [ 2414.879805] configfs_dir_cache 3KB 7KB [ 2414.886512] file_lock_ctx 9KB 11KB [ 2414.892530] fsnotify_mark_connector 2KB 3KB [ 2414.902233] net_namespace 96KB 113KB [ 2414.907899] shmem_inode_cache 7947KB 7987KB [ 2414.913266] task_delay_info 303KB 442KB [ 2414.918952] taskstats 29KB 38KB [ 2414.924323] proc_dir_entry 1014KB 1222KB [ 2414.930286] pde_opener 15KB 23KB [ 2414.936008] seq_file 267KB 350KB [ 2414.941497] sigqueue 49KB 70KB [ 2414.947230] kernfs_node_cache 18229KB 18671KB [ 2414.952602] mnt_cache 226KB 256KB [ 2414.958461] filp 7356KB 8272KB [ 2414.963832] names_cache 95935KB 95935KB [ 2414.969568] iint_cache 36KB 51KB [ 2414.975261] key_jar 4KB 7KB [ 2414.980625] uts_namespace 4KB 15KB [ 2414.986269] nsproxy 3KB 11KB [ 2414.991634] vm_area_struct 3092KB 3271KB [ 2414.997309] mm_struct 536KB 565KB [ 2415.002787] fs_cache 337KB 400KB [ 2415.008507] files_cache 1249KB 1297KB [ 2415.013906] signal_cache 2337KB 2515KB [ 2415.019577] sighand_cache 640KB 721KB [ 2415.025207] task_struct 10466KB 10491KB [ 2415.030569] cred_jar 2436KB 2944KB [ 2415.036202] anon_vma_chain 927KB 1366KB [ 2415.041566] anon_vma 106KB 231KB [ 2415.047194] pid 185KB 256KB [ 2415.052558] Acpi-Operand 156KB 198KB [ 2415.058481] Acpi-ParseExt 9KB 11KB [ 2415.063847] Acpi-Parse 41KB 47KB [ 2415.069521] Acpi-State 52KB 63KB [ 2415.075304] Acpi-Namespace 20KB 27KB [ 2415.080686] numa_policy 0KB 3KB [ 2415.086336] debug_objects_cache 2871KB 3129KB [ 2415.091878] trace_event_file 297KB 298KB [ 2415.097843] ftrace_event_field 398KB 401KB [ 2415.103296] pool_workqueue 144KB 164KB [ 2415.108997] page->ptl 485KB 1087KB [ 2415.114408] kmalloc-2097152 2050KB 2050KB [ 2415.120066] kmalloc-524288 2056KB 2056KB [ 2415.128655] kmalloc-262144 1290KB 1290KB [ 2415.134023] kmalloc-131072 650KB 650KB [ 2415.139686] kmalloc-65536 3168KB 3234KB [ 2415.145341] kmalloc-32768 2442KB 2607KB [ 2415.150704] kmalloc-16384 1303KB 1353KB [ 2415.156354] kmalloc-8192 5634KB 5709KB [ 2415.161717] kmalloc-4096 31862KB 31892KB [ 2415.167351] kmalloc-2048 19112KB 20591KB [ 2415.172713] kmalloc-1024 13916KB 15198KB [ 2415.178393] kmalloc-512 18998KB 19001KB [ 2415.184086] kmalloc-256 5878KB 6656KB [ 2415.189710] kmalloc-128 1419KB 1838KB [ 2415.195395] kmalloc-96 3761KB 5336KB [ 2415.200766] kmalloc-64 3270KB 5048KB [ 2415.206447] kmalloc-32 2090KB 3146KB [ 2415.211817] kmalloc-192 2460KB 3108KB [ 2415.217489] kmem_cache 177KB 180KB [ 2415.222853] Out of memory: Kill process 8072 (syz-fuzzer) score 6 or sacrifice child [ 2415.231121] Killed process 28470 (syz-executor.4) total-vm:48512kB, anon-rss:440kB, file-rss:4kB, shmem-rss:0kB [ 2415.325405] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2415.348384] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2415.389582] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2415.417047] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2415.424061] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2415.431649] systemd[1]: Stopped Journal Service. [ 2415.447878] systemd[1]: Starting Journal Service... [ 2415.535962] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2415.637896] systemd-journald[29197]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2416.413057] systemd[1]: Started Journal Service. [ 2418.890177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2418.909115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2418.922497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2418.930311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2418.943953] device bridge_slave_1 left promiscuous mode [ 2418.951253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2418.964641] device bridge_slave_0 left promiscuous mode [ 2418.970947] bridge0: port 1(bridge_slave_0) entered disabled state [ 2418.987056] device veth1_macvtap left promiscuous mode [ 2418.992380] device veth0_macvtap left promiscuous mode [ 2419.003305] device veth1_vlan left promiscuous mode [ 2419.009253] device veth0_vlan left promiscuous mode 06:44:28 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @win={{0x4, 0xffff, 0x100, 0xffff}, 0x5, 0x8, &(0x7f00000000c0)={{0x6, 0x0, 0x0, 0x7}, &(0x7f0000000080)={{0xfff, 0x4, 0x2, 0x7ff}, &(0x7f0000000040)={{0x5, 0xfa7, 0x100, 0x401}}}}, 0x2, &(0x7f0000000100)="4089f1b76eacffeac046902c449791987bb1f3d382efa0690cf574c0bee4e148c36e96c1386ae52ff86ba02483a77ccfbf90ae8ae7b214585eab5fb7a841769519cafe0f92f417ebacc6c06e41892555b315c9c850fca10521a4f330bcfcee3eb04c0d3a8647e5d58b630f1d9fca2cfe4ebd6a80582ceb472011b579c2f79d57eabd42352e7227f76e5b0c7b6a2e0db3900e3d0465b04b8580ab2afb15b76464a3e737bbaf5f0788566fe87ee541632004c66eb9cb1addafd4ca24dbaf047f4e99fc8b0dc5074628c06e7891daaa167a332080", 0xf8}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @win={{0x4, 0xffff, 0x100, 0xffff}, 0x5, 0x8, &(0x7f00000000c0)={{0x6, 0x0, 0x0, 0x7}, &(0x7f0000000080)={{0xfff, 0x4, 0x2, 0x7ff}, &(0x7f0000000040)={{0x5, 0xfa7, 0x100, 0x401}}}}, 0x2, &(0x7f0000000100)="4089f1b76eacffeac046902c449791987bb1f3d382efa0690cf574c0bee4e148c36e96c1386ae52ff86ba02483a77ccfbf90ae8ae7b214585eab5fb7a841769519cafe0f92f417ebacc6c06e41892555b315c9c850fca10521a4f330bcfcee3eb04c0d3a8647e5d58b630f1d9fca2cfe4ebd6a80582ceb472011b579c2f79d57eabd42352e7227f76e5b0c7b6a2e0db3900e3d0465b04b8580ab2afb15b76464a3e737bbaf5f0788566fe87ee541632004c66eb9cb1addafd4ca24dbaf047f4e99fc8b0dc5074628c06e7891daaa167a332080", 0xf8}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) 06:44:28 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async) pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x6, 0x1, 0x6, 0x3, 0x200, 0x3}, &(0x7f0000000040)={0x80, 0x7, 0x6, 0x1f, 0x3, 0x7f, 0x3, 0x2}, &(0x7f00000000c0)={0x6, 0xcf76, 0x1, 0xfa, 0x5, 0x9, 0xff, 0x8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffff]}, 0x8}) 06:44:28 executing program 1: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:28 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:44:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_overlay={0xe94a, 0x1, 0x4, 0x2000, 0xffffffe1, {r2, r3/1000+10000}, {0x1, 0x0, 0x8, 0x3, 0x6, 0x4, "e44dce42"}, 0x4, 0x3, {&(0x7f0000000300)=[{0x0, 0x81, {0x10000}, 0x10001}, {0x400, 0x3c, {0x8000}, 0xfffff001}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:44:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e05422cf4"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) 06:44:28 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:28 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e05422cf4"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) 06:44:28 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e05422cf4"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e05422cf4"}) (async) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) (async) [ 2423.435666] Bluetooth: hci5: command 0x0409 tx timeout [ 2424.466206] Bluetooth: hci2: command 0x0406 tx timeout [ 2425.506323] Bluetooth: hci5: command 0x041b tx timeout [ 2427.294487] oom_reaper: reaped process 29219 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2427.307846] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2427.319797] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2427.331211] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2427.338688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2427.348052] Call Trace: [ 2427.350644] dump_stack+0x1fc/0x2ef [ 2427.354279] dump_header+0x15d/0xc3f [ 2427.357998] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2427.363147] ? ___ratelimit+0x319/0x590 [ 2427.367133] oom_kill_process.cold+0x10/0x692 [ 2427.371636] ? check_preemption_disabled+0x41/0x280 [ 2427.376754] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2427.382039] out_of_memory+0x1072/0x1390 [ 2427.386113] ? oom_killer_disable+0x270/0x270 [ 2427.391217] ? mutex_trylock+0x15f/0x1a0 [ 2427.395387] __alloc_pages_nodemask+0x23a2/0x2890 [ 2427.400512] ? find_get_entry+0x4cd/0x8a0 [ 2427.404674] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2427.409548] alloc_pages_current+0x193/0x2a0 [ 2427.413964] filemap_fault+0x146e/0x2180 [ 2427.418039] ext4_filemap_fault+0x84/0xb0 [ 2427.422186] __do_fault+0x10b/0x4b0 [ 2427.425808] ? do_raw_spin_unlock+0x171/0x230 [ 2427.430309] __handle_mm_fault+0x273b/0x41c0 [ 2427.434721] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2427.439823] ? vm_insert_page+0x9c0/0x9c0 [ 2427.443983] ? sync_mm_rss+0x97/0x1a0 [ 2427.447788] handle_mm_fault+0x436/0xb10 [ 2427.452035] __do_page_fault+0x68e/0xd60 [ 2427.456262] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2427.461281] ? spurious_fault+0x840/0x840 [ 2427.465435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2427.470264] ? page_fault+0x8/0x30 [ 2427.473792] page_fault+0x1e/0x30 [ 2427.477227] RIP: 0033:0x432380 [ 2427.480405] Code: Bad RIP value. [ 2427.483750] RSP: 002b:000000c000067f28 EFLAGS: 00010246 [ 2427.489093] RAX: 0000000000000000 RBX: 0000000001ec3748 RCX: 0000023528356401 [ 2427.496350] RDX: 000002352af80366 RSI: 000000c000067f00 RDI: 000000c000067edc [ 2427.503678] RBP: 000000c000067f90 R08: 00007ffe2f573000 R09: 0000026e8c08ee17 [ 2427.510945] R10: 000b3f7ab3525704 R11: 0000000000000001 R12: 000000c000067f10 [ 2427.518200] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2427.527815] Mem-Info: [ 2427.530256] active_anon:27801 inactive_anon:81955 isolated_anon:0 [ 2427.530256] active_file:38 inactive_file:0 isolated_file:0 [ 2427.530256] unevictable:0 dirty:32 writeback:0 unstable:0 [ 2427.530256] slab_reclaimable:13316 slab_unreclaimable:115228 [ 2427.530256] mapped:22162 shmem:96111 pagetables:557 bounce:0 [ 2427.530256] free:13924 free_pcp:186 free_cma:0 [ 2427.545505] syz-executor.5: vmalloc: allocation failure, allocated 1045159936 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2427.564927] Node 0 active_anon:110092kB inactive_anon:170896kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88636kB dirty:52kB writeback:0kB shmem:226504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2427.596965] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2427.605630] Node 1 active_anon:1112kB inactive_anon:156924kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:76kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2427.616591] Bluetooth: hci5: command 0x040f tx timeout [ 2427.637650] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2427.659604] CPU: 1 PID: 29219 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2427.670719] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2427.677197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2427.677202] Call Trace: [ 2427.677223] dump_stack+0x1fc/0x2ef [ 2427.677239] warn_alloc.cold+0x7b/0x18f [ 2427.677257] ? zone_watermark_ok_safe+0x260/0x260 [ 2427.682267] Node 0 DMA32 free:17928kB min:35996kB low:44992kB high:53988kB active_anon:110092kB inactive_anon:167280kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:152kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2228kB bounce:0kB free_pcp:532kB local_pcp:248kB free_cma:0kB [ 2427.691613] ? retint_kernel+0x2d/0x2d [ 2427.691645] __vmalloc_area_node+0x4fd/0x780 [ 2427.691667] ? __vmalloc_node_range+0x180/0x180 [ 2427.694224] lowmem_reserve[]: 0 0 1 1 1 [ 2427.697863] ? _raw_spin_unlock+0x29/0x40 [ 2427.697877] ? __get_vm_area_node+0x2e2/0x3a0 [ 2427.697897] __vmalloc_node_range+0xed/0x180 [ 2427.701844] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2427.706671] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2427.706687] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2427.706699] vmalloc_user+0x70/0xe0 [ 2427.706714] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2427.735931] lowmem_reserve[]: 0 0 0 0 0 [ 2427.739713] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2427.739728] __vb2_queue_alloc+0x472/0xe60 [ 2427.739749] vb2_core_create_bufs+0x273/0x7e0 [ 2427.739762] ? __vb2_queue_free+0x870/0x870 [ 2427.739779] ? __video_do_ioctl+0x632/0xcd0 [ 2427.744760] Node 1 Normal free:26892kB min:53876kB low:67344kB high:80812kB active_anon:1112kB inactive_anon:156924kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:176kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:0kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2427.748823] ? __mutex_lock+0x368/0x1190 [ 2427.748840] vb2_create_bufs+0x332/0x620 [ 2427.748856] ? mark_held_locks+0xf0/0xf0 [ 2427.748869] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2427.752833] lowmem_reserve[]: 0 0 0 0 0 [ 2427.756975] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2427.756992] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2427.757011] v4l_create_bufs+0xb2/0x160 [ 2427.757028] __video_do_ioctl+0x49a/0xcd0 [ 2427.761519] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2427.765895] ? v4l_querycap+0x340/0x340 [ 2427.793638] Node 0 DMA32: 533*4kB (UME) 499*8kB (ME) 264*16kB (ME) 123*32kB (UME) 33*64kB (UME) 6*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17676kB [ 2427.796024] ? __might_fault+0x192/0x1d0 [ 2427.801394] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2427.804976] ? v4l_querycap+0x340/0x340 [ 2427.809371] Node 1 Normal: 485*4kB (UME) 346*8kB (UME) 170*16kB (UME) 52*32kB (UME) 18*64kB (ME) 12*128kB (UM) 4*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (M) = 27140kB [ 2427.813228] video_usercopy+0x13f/0xfa0 [ 2427.817410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2427.821594] ? v4l_enumstd+0x60/0x60 [ 2427.826065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2427.830384] ? do_futex+0x171/0x1880 [ 2427.830400] ? mark_held_locks+0xf0/0xf0 [ 2427.830417] ? debug_check_no_obj_freed+0x201/0x490 [ 2427.830438] ? video_usercopy+0xfa0/0xfa0 [ 2427.830449] v4l2_ioctl+0x147/0x1a0 [ 2427.830468] ? video_devdata+0xa0/0xa0 [ 2427.830483] do_vfs_ioctl+0xcdb/0x12e0 [ 2427.830496] ? lock_downgrade+0x720/0x720 [ 2427.830513] ? check_preemption_disabled+0x41/0x280 [ 2427.834868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2427.863327] ? ioctl_preallocate+0x200/0x200 [ 2427.863344] ? __fget+0x356/0x510 [ 2427.863358] ? do_dup2+0x450/0x450 [ 2427.863372] ? __se_sys_futex+0x298/0x3b0 [ 2427.863392] ksys_ioctl+0x9b/0xc0 [ 2427.863407] __x64_sys_ioctl+0x6f/0xb0 [ 2427.867515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2427.871511] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2427.871525] do_syscall_64+0xf9/0x620 [ 2427.871542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2427.871552] RIP: 0033:0x7f579755f0f9 [ 2427.871566] Code: Bad RIP value. [ 2427.871572] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2427.871584] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2427.871592] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 2427.871598] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2427.871604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2427.871612] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2427.878643] Mem-Info: [ 2427.894124] 96144 total pagecache pages [ 2427.899656] active_anon:27782 inactive_anon:81955 isolated_anon:0 [ 2427.899656] active_file:17 inactive_file:16 isolated_file:0 [ 2427.899656] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2427.899656] slab_reclaimable:13315 slab_unreclaimable:115251 [ 2427.899656] mapped:22141 shmem:96111 pagetables:557 bounce:0 [ 2427.899656] free:13923 free_pcp:192 free_cma:0 [ 2427.900615] 0 pages in swap cache [ 2427.904564] Node 0 active_anon:110020kB inactive_anon:170896kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88564kB dirty:0kB writeback:0kB shmem:226504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2427.925353] Swap cache stats: add 0, delete 0, find 0/0 [ 2427.948234] Node 1 active_anon:1108kB inactive_anon:156924kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2427.959033] Free swap = 0kB [ 2427.984814] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2427.997511] Total swap = 0kB [ 2428.009721] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2428.021952] 2097051 pages RAM [ 2428.029762] Node 0 DMA32 free:17676kB min:35996kB low:44992kB high:53988kB active_anon:110020kB inactive_anon:167280kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2228kB bounce:0kB free_pcp:508kB local_pcp:284kB free_cma:0kB [ 2428.032952] 0 pages HighMem/MovableOnly [ 2428.039737] lowmem_reserve[]: 0 0 1 1 1 [ 2428.058130] 369649 pages reserved [ 2428.064946] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2428.066207] 0 pages cma reserved [ 2428.070170] lowmem_reserve[]: 0 0 0 0 0 [ 2428.094033] Unreclaimable slab info: [ 2428.106104] Node 1 Normal free:27140kB min:53876kB low:67344kB high:80812kB active_anon:1108kB inactive_anon:156924kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:0kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2428.114254] Name Used Total [ 2428.118141] lowmem_reserve[]: 0 0 0 0 0 [ 2428.122821] pid_2 31KB 32KB [ 2428.139771] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2428.152035] batadv_tt_change_cache 3KB 11KB [ 2428.196904] Node 0 DMA32: 533*4kB (UME) 499*8kB (ME) 264*16kB (ME) 123*32kB (UME) 33*64kB (UME) 6*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17676kB [ 2428.228656] batadv_tl_cache 6KB 16KB [ 2428.260933] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2428.288966] TIPC 16KB 30KB [ 2428.300326] Node 1 Normal: 485*4kB (UME) 346*8kB (UME) 170*16kB (UME) 52*32kB (UME) 18*64kB (ME) 12*128kB (UM) 4*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (M) = 27140kB [ 2428.323370] SCTPv6 22KB 49KB [ 2428.335914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2428.365527] DCCPv6 17KB 52KB [ 2428.378728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2428.407929] DCCP 16KB 42KB [ 2428.422189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2428.437978] RXRPC 19KB 45KB [ 2428.453896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2428.479586] rxrpc_call_jar 128KB 173KB [ 2428.493035] 96144 total pagecache pages [ 2428.511972] bridge_fdb_cache 15KB 27KB [ 2428.521287] 0 pages in swap cache [ 2428.540343] fib6_nodes 234KB 308KB [ 2428.549483] Swap cache stats: add 0, delete 0, find 0/0 [ 2428.562922] ip6_dst_cache 734KB 791KB [ 2428.573044] Free swap = 0kB [ 2428.580690] Total swap = 0kB [ 2428.583700] 2097051 pages RAM [ 2428.590866] RAWv6 121KB 155KB [ 2428.593675] 0 pages HighMem/MovableOnly [ 2428.596260] UDPv6 37KB 48KB [ 2428.600272] 369649 pages reserved [ 2428.600277] 0 pages cma reserved [ 2428.624797] TCPv6 33KB 36KB [ 2428.633335] nf_conntrack 14KB 18KB [ 2428.651095] t10_alua_lu_gp_cache 0KB 3KB [ 2428.661529] sd_ext_cdb 0KB 7KB [ 2428.673588] scsi_sense_cache 1056KB 1060KB [ 2428.684234] virtio_scsi_cmd 16KB 16KB [ 2428.703662] sgpool-128 8KB 8KB [ 2428.709103] sgpool-64 4KB 12KB [ 2428.714473] sgpool-32 2KB 15KB [ 2428.727013] sgpool-16 1KB 7KB [ 2428.732400] sgpool-8 0KB 7KB [ 2428.741499] mqueue_inode_cache 30KB 30KB [ 2428.750526] bio_post_read_ctx 14KB 15KB [ 2428.755984] bio-2 14KB 15KB [ 2428.764915] jfs_mp 7KB 7KB [ 2428.773610] cifs_small_rq 15KB 16KB [ 2428.782591] cifs_request 67KB 67KB [ 2428.791436] cifs_mpx_ids 0KB 7KB [ 2428.800606] nfs_commit_data 3KB 14KB [ 2428.805973] nfs_write_data 34KB 44KB [ 2428.814776] ext4_system_zone 1KB 7KB [ 2428.823783] bio-1 1KB 7KB [ 2428.832549] pid_namespace 3KB 11KB [ 2428.841689] rpc_buffers 17KB 25KB [ 2428.850610] rpc_tasks 2KB 7KB [ 2428.855979] UNIX 1995KB 2085KB [ 2428.864907] tcp_bind_bucket 1KB 8KB [ 2428.873532] ip_fib_trie 34KB 47KB [ 2428.882653] ip_fib_alias 166KB 213KB [ 2428.891463] ip_dst_cache 10KB 20KB [ 2428.903984] RAW 78KB 112KB [ 2428.912635] UDP 59KB 101KB [ 2428.924956] TCP 14KB 16KB [ 2428.933597] hugetlbfs_inode_cache 3KB 15KB [ 2428.945992] fscache_cookie_jar 1KB 7KB [ 2428.954889] eventpoll_pwq 30KB 43KB [ 2428.967110] eventpoll_epi 53KB 63KB [ 2428.972490] inotify_inode_mark 5KB 7KB [ 2428.981613] request_queue 199KB 199KB [ 2428.990560] blkdev_requests 1KB 3KB [ 2428.995927] blkdev_ioc 28KB 42KB [ 2429.004667] bio-0 1013KB 1016KB [ 2429.013722] biovec-max 1641KB 1658KB [ 2429.022767] biovec-64 1066KB 1071KB [ 2429.031768] biovec-16 149KB 157KB [ 2429.040866] bio_integrity_payload 1KB 8KB [ 2429.046591] khugepaged_mm_slot 9KB 19KB [ 2429.055747] uid_cache 0KB 4KB [ 2429.064460] dmaengine-unmap-2 0KB 3KB [ 2429.073316] skbuff_fclone_cache 40KB 45KB [ 2429.082642] skbuff_head_cache 9933KB 9933KB [ 2429.091760] configfs_dir_cache 3KB 7KB [ 2429.102448] file_lock_ctx 9KB 11KB [ 2429.122201] fsnotify_mark_connector 2KB 3KB [ 2429.128183] net_namespace 96KB 113KB [ 2429.133547] shmem_inode_cache 7956KB 7987KB [ 2429.150454] task_delay_info 281KB 442KB [ 2429.155844] taskstats 32KB 38KB [ 2429.171518] proc_dir_entry 995KB 1222KB [ 2429.177914] pde_opener 15KB 23KB [ 2429.183285] seq_file 288KB 350KB [ 2429.197782] sigqueue 57KB 70KB [ 2429.203165] kernfs_node_cache 17920KB 18581KB [ 2429.212760] mnt_cache 237KB 256KB [ 2429.222413] filp 7424KB 8272KB [ 2429.231976] names_cache 100474KB 100512KB [ 2429.241764] iint_cache 32KB 51KB [ 2429.251461] key_jar 4KB 7KB [ 2429.261292] uts_namespace 11KB 15KB [ 2429.270876] nsproxy 7KB 11KB [ 2429.276251] vm_area_struct 3162KB 3271KB [ 2429.285650] mm_struct 529KB 565KB [ 2429.295027] fs_cache 307KB 396KB [ 2429.304658] files_cache 1198KB 1293KB [ 2429.314102] signal_cache 2100KB 2515KB [ 2429.323941] sighand_cache 656KB 714KB [ 2429.333431] task_struct 8824KB 8894KB [ 2429.342997] cred_jar 2376KB 2944KB [ 2429.353462] anon_vma_chain 951KB 1366KB [ 2429.359932] anon_vma 135KB 231KB [ 2429.365871] pid 170KB 256KB [ 2429.371995] Acpi-Operand 156KB 198KB [ 2429.378029] Acpi-ParseExt 9KB 11KB [ 2429.383866] Acpi-Parse 41KB 47KB [ 2429.395212] Acpi-State 52KB 63KB [ 2429.400663] Acpi-Namespace 20KB 27KB [ 2429.406032] numa_policy 0KB 3KB [ 2429.411935] debug_objects_cache 2841KB 3129KB [ 2429.417966] trace_event_file 297KB 298KB [ 2429.423335] ftrace_event_field 398KB 401KB [ 2429.429020] pool_workqueue 157KB 164KB [ 2429.434423] page->ptl 500KB 1087KB [ 2429.439849] device hsr_slave_1 left promiscuous mode [ 2429.445031] kmalloc-2097152 2050KB 2050KB [ 2429.450458] kmalloc-524288 2056KB 2056KB [ 2429.455850] kmalloc-262144 1290KB 1290KB [ 2429.455874] device hsr_slave_0 left promiscuous mode [ 2429.461330] kmalloc-131072 650KB 650KB [ 2429.461340] kmalloc-65536 2904KB 2970KB [ 2429.461350] kmalloc-32768 2343KB 2508KB [ 2429.461359] kmalloc-16384 1320KB 1369KB [ 2429.461368] kmalloc-8192 5502KB 5593KB [ 2429.461376] kmalloc-4096 29342KB 29401KB [ 2429.461385] kmalloc-2048 18691KB 20502KB [ 2429.461394] kmalloc-1024 13578KB 15190KB [ 2429.461404] kmalloc-512 19180KB 19181KB [ 2429.461413] kmalloc-256 5687KB 6652KB [ 2429.461423] kmalloc-128 1407KB 1838KB [ 2429.461432] kmalloc-96 3851KB 5336KB [ 2429.461441] kmalloc-64 3235KB 5048KB [ 2429.461448] kmalloc-32 2060KB 3146KB [ 2429.461458] kmalloc-192 2394KB 3108KB [ 2429.461467] kmem_cache 177KB 180KB [ 2429.461478] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2429.461541] Killed process 26858 (syz-executor.1) total-vm:48512kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 2429.544100] team0 (unregistering): Port device team_slave_1 removed [ 2429.647390] team0 (unregistering): Port device team_slave_0 removed [ 2429.677383] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2429.717526] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2429.838766] bond0 (unregistering): Released all slaves [ 2429.906932] Bluetooth: hci5: command 0x0419 tx timeout [ 2430.241673] IPVS: ftp: loaded support on port[0] = 21 [ 2430.503357] chnl_net:caif_netlink_parms(): no params data found [ 2430.656170] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.687142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2430.694582] device bridge_slave_0 entered promiscuous mode [ 2430.718663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.725082] bridge0: port 2(bridge_slave_1) entered disabled state [ 2430.733615] device bridge_slave_1 entered promiscuous mode [ 2430.783496] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2430.809028] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2430.868824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2430.876250] team0: Port device team_slave_0 added [ 2430.897991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2430.905432] team0: Port device team_slave_1 added [ 2430.941811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2430.966865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2431.027016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2431.063748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2431.081624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2431.156918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2431.182112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2431.197719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2431.245288] device hsr_slave_0 entered promiscuous mode [ 2431.268490] device hsr_slave_1 entered promiscuous mode [ 2431.288822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2431.303391] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2431.518419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2431.632074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2431.642025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2431.664533] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2431.692668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2431.700137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2431.720026] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2431.726096] 8021q: adding VLAN 0 to HW filter on device team0 [ 2431.750750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2431.764749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2431.774039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2431.788254] bridge0: port 1(bridge_slave_0) entered blocking state [ 2431.794664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2431.811007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2431.822858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2431.832684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2431.845532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2431.854899] bridge0: port 2(bridge_slave_1) entered blocking state [ 2431.861353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2431.880284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2431.892670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2431.905074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2431.921520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2431.933280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2431.944906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2431.957294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2431.968267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2431.985882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2431.993542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2432.006081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2432.015595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2432.030453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2432.041572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2432.054852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2432.065233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2432.077597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2432.088029] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2432.094069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2432.449965] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2432.464566] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2432.472182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2432.485592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2432.654598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2432.922085] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2433.122252] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2433.129621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2433.144082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2433.366814] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2433.380007] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2433.386924] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2433.552769] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2433.561130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2433.570087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2433.578583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2433.585570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2433.595362] device veth0_vlan entered promiscuous mode [ 2433.809925] device veth1_vlan entered promiscuous mode [ 2433.823844] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2433.834726] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2434.051549] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2434.063494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2434.072407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2434.090239] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2434.305002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2434.313146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2434.334579] device veth0_macvtap entered promiscuous mode [ 2434.342379] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2434.557399] device veth1_macvtap entered promiscuous mode [ 2434.563794] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2434.580289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2434.595228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2434.606194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.622509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.634394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.649765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.662085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.675265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.689939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.701940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.715759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.730734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.744446] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2434.756378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2434.765525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2434.778932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2434.786216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2434.802584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2434.815478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.832028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.844621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.859768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.872144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.885637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.896959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.912040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.921740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2434.936726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.954411] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2434.962223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2435.177267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2435.185976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2435.564324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2435.572291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2435.583223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2435.592011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2435.603204] device bridge_slave_1 left promiscuous mode [ 2435.608751] bridge0: port 2(bridge_slave_1) entered disabled state [ 2435.615764] device bridge_slave_0 left promiscuous mode [ 2435.624201] bridge0: port 1(bridge_slave_0) entered disabled state [ 2435.633130] device veth1_macvtap left promiscuous mode [ 2435.638665] device veth0_macvtap left promiscuous mode [ 2435.643965] device veth1_vlan left promiscuous mode [ 2435.649113] device veth0_vlan left promiscuous mode [ 2439.840986] device hsr_slave_1 left promiscuous mode [ 2439.849034] device hsr_slave_0 left promiscuous mode [ 2439.864596] team0 (unregistering): Port device team_slave_1 removed [ 2439.873856] team0 (unregistering): Port device team_slave_0 removed [ 2439.884615] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2439.894689] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2439.926066] bond0 (unregistering): Released all slaves [ 2440.005070] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2440.013402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2440.026038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.047766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2440.058670] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2440.065768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2440.073218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.083326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:44:48 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x6, 0x1, 0x6, 0x3, 0x200, 0x3}, &(0x7f0000000040)={0x80, 0x7, 0x6, 0x1f, 0x3, 0x7f, 0x3, 0x2}, &(0x7f00000000c0)={0x6, 0xcf76, 0x1, 0xfa, 0x5, 0x9, 0xff, 0x8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffff]}, 0x8}) clock_gettime(0x4, &(0x7f0000000080)) (async) pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x6, 0x1, 0x6, 0x3, 0x200, 0x3}, &(0x7f0000000040)={0x80, 0x7, 0x6, 0x1f, 0x3, 0x7f, 0x3, 0x2}, &(0x7f00000000c0)={0x6, 0xcf76, 0x1, 0xfa, 0x5, 0x9, 0xff, 0x8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffff]}, 0x8}) (async) 06:44:48 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:48 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:48 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (rerun: 64) 06:44:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x1b7, 0x83f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:44:48 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "af8c1b22d5720cbd186c8e00379c2923dd66fc2e8154acf40000004000"}) 06:44:48 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:44:48 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "af8c1b22d5720cbd186c8e00379c2923dd66fc2e8154acf40000004000"}) (rerun: 64) 06:44:48 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:44:48 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "af8c1b22d5720cbd186c8e00379c2923dd66fc2e8154acf40000004000"}) 06:44:48 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="4cc510ad9c09628fcb4e421d7b649746f99952ca3c8249148369539814d5b30286f5581c16af6d14b8021c9168f56db6537ee529", &(0x7f0000000280)=""/171, &(0x7f0000000340)="33996f64948123c07a483b080707209e9a7c69598e57037c2ef2bbe7555331c21bae072fd57447c41d5a7982e8f416df78e58687dfbc000005b3e58c5530e333ed8fa30300000000000000128fa85b3247ee43d1a38c06d3856efe625a7514106f30fbce9690689162bd47941914297d1d71c3b908d9624b479980740c020b5a7ff99f1a9009789787443dc3cc806ff5ef1a60f181ec8cdbe218289079483283cd43ad3bf2883b38840345207bbc8609d14e30862858c9a5f6a12e50bb99cfe6f3e74684fb82eb776798b202311cbb78cffffdf7640709138dcb", &(0x7f0000000040)="b9ba460f1a7f00552d790f42a76cf9205a8f306329c6406fbae1e027eee8d74b3646a88e08d359593117174b40cf90a4", 0x0, r0, 0x4}, 0x38) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) 06:44:48 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="4cc510ad9c09628fcb4e421d7b649746f99952ca3c8249148369539814d5b30286f5581c16af6d14b8021c9168f56db6537ee529", &(0x7f0000000280)=""/171, &(0x7f0000000340)="33996f64948123c07a483b080707209e9a7c69598e57037c2ef2bbe7555331c21bae072fd57447c41d5a7982e8f416df78e58687dfbc000005b3e58c5530e333ed8fa30300000000000000128fa85b3247ee43d1a38c06d3856efe625a7514106f30fbce9690689162bd47941914297d1d71c3b908d9624b479980740c020b5a7ff99f1a9009789787443dc3cc806ff5ef1a60f181ec8cdbe218289079483283cd43ad3bf2883b38840345207bbc8609d14e30862858c9a5f6a12e50bb99cfe6f3e74684fb82eb776798b202311cbb78cffffdf7640709138dcb", &(0x7f0000000040)="b9ba460f1a7f00552d790f42a76cf9205a8f306329c6406fbae1e027eee8d74b3646a88e08d359593117174b40cf90a4", 0x0, r0, 0x4}, 0x38) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) clock_gettime(0x4, &(0x7f0000000080)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) (async) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="4cc510ad9c09628fcb4e421d7b649746f99952ca3c8249148369539814d5b30286f5581c16af6d14b8021c9168f56db6537ee529", &(0x7f0000000280)=""/171, &(0x7f0000000340)="33996f64948123c07a483b080707209e9a7c69598e57037c2ef2bbe7555331c21bae072fd57447c41d5a7982e8f416df78e58687dfbc000005b3e58c5530e333ed8fa30300000000000000128fa85b3247ee43d1a38c06d3856efe625a7514106f30fbce9690689162bd47941914297d1d71c3b908d9624b479980740c020b5a7ff99f1a9009789787443dc3cc806ff5ef1a60f181ec8cdbe218289079483283cd43ad3bf2883b38840345207bbc8609d14e30862858c9a5f6a12e50bb99cfe6f3e74684fb82eb776798b202311cbb78cffffdf7640709138dcb", &(0x7f0000000040)="b9ba460f1a7f00552d790f42a76cf9205a8f306329c6406fbae1e027eee8d74b3646a88e08d359593117174b40cf90a4", 0x0, r0, 0x4}, 0x38) (async) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) (async) 06:44:48 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:44:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x121481) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x6, 0x2, 0x4, 0x4, 0x8, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x5, 0xff, 0xff, "96f11d07"}, 0x0, 0x4, {&(0x7f0000000140)=[{0x81, 0x6, {}, 0xfff}, {0x1f, 0x20, {r2}}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffffd, 0x400, 0x2, {0x2, @pix={0x4, 0x8, 0x3136564e, 0x9, 0x2, 0x4, 0xb, 0x3, 0x0, 0x3, 0x2, 0x3}}, 0x1}) [ 2441.703639] IPVS: ftp: loaded support on port[0] = 21 [ 2441.843956] chnl_net:caif_netlink_parms(): no params data found [ 2441.918643] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.925501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.939454] device bridge_slave_0 entered promiscuous mode [ 2441.947058] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.959605] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.967160] device bridge_slave_1 entered promiscuous mode [ 2442.001991] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2442.017602] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2442.049762] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2442.057753] team0: Port device team_slave_0 added [ 2442.069883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2442.077577] team0: Port device team_slave_1 added [ 2442.111895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2442.122421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2442.154647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2442.173058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2442.179448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2442.211431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2442.229692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2442.237739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2442.274279] device hsr_slave_0 entered promiscuous mode [ 2442.285200] device hsr_slave_1 entered promiscuous mode [ 2442.293163] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2442.306079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2442.437423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2442.443847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2442.450569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2442.456934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2442.527526] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2442.534252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2442.551279] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2442.561669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2442.574338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.582577] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.595660] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2442.613662] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2442.620622] 8021q: adding VLAN 0 to HW filter on device team0 [ 2442.633166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2442.650370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2442.656765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2442.683346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2442.694471] bridge0: port 2(bridge_slave_1) entered blocking state [ 2442.700894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2442.734146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2442.742661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2442.756219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2442.774437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2442.785382] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2442.798617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2442.806524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2442.820094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2442.888992] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2442.897419] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2442.910374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2442.917524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2442.936086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2443.005153] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2443.016366] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2443.031226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2443.043749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2443.106192] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2443.120314] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2443.127306] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2443.145568] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2443.156779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2443.167396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2443.183432] device veth0_vlan entered promiscuous mode [ 2443.194677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2443.205169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2443.221107] device veth1_vlan entered promiscuous mode [ 2443.227228] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2443.245663] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2443.262783] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2443.282097] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2443.294169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2443.303566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2443.317105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2443.326156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2443.342962] device veth0_macvtap entered promiscuous mode [ 2443.353603] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2443.367029] device veth1_macvtap entered promiscuous mode [ 2443.376994] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2443.390777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2443.409883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2443.424153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.434470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.449655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.463097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.474168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.487265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.498308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.515009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.525216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.540957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.554214] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2443.564173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2443.573764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2443.584500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2443.601045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2443.611948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2443.624226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.637269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.649961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.662717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.668010] Bluetooth: hci2: command 0x0409 tx timeout [ 2443.678392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.692912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.702336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.716850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.726424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.741220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.755154] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2443.765482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2443.774295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2443.786608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2443.967291] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2443.974122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2443.991100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.027744] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2444.042975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2444.050802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2444.065535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.073225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:44:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:44:52 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}], 0x9, 0x0) [ 2445.748220] Bluetooth: hci2: command 0x041b tx timeout [ 2446.321477] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2446.333121] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2446.337889] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2446.345318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2446.354676] Call Trace: [ 2446.357256] dump_stack+0x1fc/0x2ef [ 2446.360883] dump_header+0x15d/0xc3f [ 2446.364605] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2446.369702] ? ___ratelimit+0x319/0x590 [ 2446.373668] oom_kill_process.cold+0x10/0x692 [ 2446.378163] ? check_preemption_disabled+0x41/0x280 [ 2446.383175] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2446.388453] out_of_memory+0x1072/0x1390 [ 2446.392522] ? oom_killer_disable+0x270/0x270 [ 2446.397009] ? mutex_trylock+0x15f/0x1a0 [ 2446.401065] __alloc_pages_nodemask+0x23a2/0x2890 [ 2446.405903] ? find_get_entry+0x4cd/0x8a0 [ 2446.410054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2446.414986] alloc_pages_current+0x193/0x2a0 [ 2446.419390] filemap_fault+0x146e/0x2180 [ 2446.423449] ext4_filemap_fault+0x84/0xb0 [ 2446.427581] __do_fault+0x10b/0x4b0 [ 2446.431206] __handle_mm_fault+0x273b/0x41c0 [ 2446.435605] ? vm_insert_page+0x9c0/0x9c0 [ 2446.439757] ? check_preemption_disabled+0x41/0x280 [ 2446.444767] handle_mm_fault+0x436/0xb10 [ 2446.448824] __do_page_fault+0x68e/0xd60 [ 2446.452877] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2446.457961] ? spurious_fault+0x840/0x840 [ 2446.462098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2446.467009] ? page_fault+0x8/0x30 [ 2446.470540] page_fault+0x1e/0x30 [ 2446.473999] RIP: 0033:0x46b583 [ 2446.477174] Code: Bad RIP value. [ 2446.480548] RSP: 002b:000000c000067e78 EFLAGS: 00010202 [ 2446.485903] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2446.493341] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2446.500601] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.507859] R10: 000000c000067eb0 R11: 0000000000000202 R12: 000000c000067eb0 [ 2446.515109] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2446.540732] Mem-Info: [ 2446.543272] active_anon:27934 inactive_anon:81958 isolated_anon:0 [ 2446.543272] active_file:31 inactive_file:15 isolated_file:0 [ 2446.543272] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2446.543272] slab_reclaimable:13439 slab_unreclaimable:115772 [ 2446.543272] mapped:22231 shmem:96116 pagetables:582 bounce:0 [ 2446.543272] free:25156 free_pcp:124 free_cma:0 [ 2446.578823] Node 0 active_anon:110392kB inactive_anon:170900kB active_file:84kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88924kB dirty:0kB writeback:0kB shmem:226508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2446.608828] Node 1 active_anon:1344kB inactive_anon:156932kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2446.640393] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2446.669758] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2446.674793] Node 0 DMA32 free:35952kB min:35996kB low:44992kB high:53988kB active_anon:110392kB inactive_anon:167284kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2324kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2446.705910] lowmem_reserve[]: 0 0 1 1 1 [ 2446.715588] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2446.746413] lowmem_reserve[]: 0 0 0 0 0 [ 2446.752331] Node 1 Normal free:53680kB min:53876kB low:67344kB high:80812kB active_anon:1344kB inactive_anon:156932kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:4kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2446.786423] lowmem_reserve[]: 0 0 0 0 0 [ 2446.791058] Node 0 DMA: 0*4kB 5*8kB (UM) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10984kB [ 2446.825503] Node 0 DMA32: 417*4kB (ME) 558*8kB (UME) 254*16kB (ME) 153*32kB (UME) 50*64kB (ME) 21*128kB (M) 5*256kB (M) 25*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36084kB [ 2446.865389] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2446.891041] Node 1 Normal: 532*4kB (UME) 380*8kB (UME) 192*16kB (UME) 50*32kB (UME) 18*64kB (UME) 11*128kB (UM) 2*256kB (M) 2*512kB (UM) 3*1024kB (UME) 0*2048kB 9*4096kB (UM) = 53872kB [ 2446.925371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2446.964548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2446.985921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2447.013327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2447.027318] 96145 total pagecache pages [ 2447.048119] 0 pages in swap cache [ 2447.055520] Swap cache stats: add 0, delete 0, find 0/0 [ 2447.070443] Free swap = 0kB [ 2447.076607] Total swap = 0kB [ 2447.092056] 2097051 pages RAM [ 2447.095169] 0 pages HighMem/MovableOnly [ 2447.116477] 369649 pages reserved [ 2447.131959] 0 pages cma reserved [ 2447.135343] Unreclaimable slab info: [ 2447.153549] Name Used Total [ 2447.170571] pid_2 33KB 36KB [ 2447.176000] batadv_tt_change_cache 4KB 11KB [ 2447.194103] batadv_tl_cache 8KB 16KB [ 2447.203115] TIPC 19KB 30KB [ 2447.208537] SCTPv6 26KB 49KB [ 2447.213916] DCCPv6 20KB 45KB [ 2447.220870] DCCP 19KB 42KB [ 2447.226271] RXRPC 21KB 45KB [ 2447.231732] rxrpc_call_jar 128KB 173KB [ 2447.237098] bridge_fdb_cache 16KB 27KB [ 2447.248944] fib6_nodes 255KB 308KB [ 2447.262099] ip6_dst_cache 788KB 791KB [ 2447.267497] RAWv6 131KB 155KB [ 2447.284920] UDPv6 41KB 48KB [ 2447.301343] TCPv6 24KB 42KB [ 2447.306731] nf_conntrack 16KB 18KB [ 2447.334759] t10_alua_lu_gp_cache 0KB 3KB [ 2447.354799] sd_ext_cdb 0KB 7KB [ 2447.373536] scsi_sense_cache 1056KB 1060KB [ 2447.380740] virtio_scsi_cmd 16KB 16KB [ 2447.386111] sgpool-128 8KB 8KB [ 2447.393003] sgpool-64 4KB 12KB [ 2447.398418] sgpool-32 2KB 15KB [ 2447.403782] sgpool-16 1KB 7KB [ 2447.415626] sgpool-8 0KB 7KB [ 2447.421073] mqueue_inode_cache 15KB 30KB [ 2447.426525] bio_post_read_ctx 14KB 15KB [ 2447.449537] bio-2 14KB 15KB [ 2447.454930] jfs_mp 7KB 7KB [ 2447.471277] cifs_small_rq 15KB 16KB [ 2447.487609] cifs_request 67KB 67KB [ 2447.500966] cifs_mpx_ids 0KB 7KB [ 2447.506363] nfs_commit_data 3KB 14KB [ 2447.533419] nfs_write_data 34KB 44KB [ 2447.548375] ext4_system_zone 1KB 7KB [ 2447.553770] bio-1 1KB 7KB [ 2447.566095] pid_namespace 3KB 11KB [ 2447.591091] rpc_buffers 17KB 25KB [ 2447.596457] rpc_tasks 2KB 7KB [ 2447.623521] UNIX 2126KB 2201KB [ 2447.638997] tcp_bind_bucket 2KB 8KB [ 2447.644380] ip_fib_trie 39KB 47KB [ 2447.660659] ip_fib_alias 175KB 213KB [ 2447.672369] ip_dst_cache 18KB 24KB [ 2447.677741] RAW 85KB 112KB [ 2447.693967] UDP 70KB 101KB [ 2447.699380] TCP 11KB 16KB [ 2447.704747] hugetlbfs_inode_cache 3KB 15KB [ 2447.715443] fscache_cookie_jar 1KB 7KB [ 2447.720933] eventpoll_pwq 25KB 43KB [ 2447.726291] eventpoll_epi 46KB 63KB [ 2447.737873] inotify_inode_mark 5KB 7KB [ 2447.743384] request_queue 199KB 199KB [ 2447.768291] blkdev_requests 1KB 3KB [ 2447.773707] blkdev_ioc 26KB 42KB [ 2447.793039] bio-0 1042KB 1087KB [ 2447.810577] biovec-max 1600KB 1600KB [ 2447.815953] biovec-64 1038KB 1094KB [ 2447.831463] Bluetooth: hci2: command 0x040f tx timeout [ 2447.854839] biovec-16 149KB 157KB [ 2447.861301] bio_integrity_payload 1KB 8KB [ 2447.867014] khugepaged_mm_slot 7KB 19KB [ 2447.896775] uid_cache 0KB 4KB [ 2447.908098] dmaengine-unmap-2 0KB 3KB [ 2447.930318] skbuff_fclone_cache 43KB 48KB [ 2447.935872] skbuff_head_cache 9914KB 9930KB [ 2447.956806] configfs_dir_cache 3KB 7KB [ 2447.966967] file_lock_ctx 9KB 11KB [ 2447.985638] fsnotify_mark_connector 2KB 3KB [ 2448.001086] net_namespace 105KB 122KB [ 2448.006465] shmem_inode_cache 7958KB 7987KB [ 2448.022980] task_delay_info 283KB 442KB [ 2448.035545] taskstats 36KB 42KB [ 2448.041327] proc_dir_entry 1061KB 1218KB [ 2448.046691] pde_opener 15KB 23KB [ 2448.067252] seq_file 300KB 350KB [ 2448.084502] sigqueue 57KB 70KB [ 2448.094739] kernfs_node_cache 18235KB 18250KB [ 2448.100258] mnt_cache 209KB 256KB [ 2448.105616] filp 7562KB 8272KB [ 2448.118968] names_cache 101885KB 101923KB [ 2448.124347] iint_cache 29KB 51KB [ 2448.154998] key_jar 4KB 7KB [ 2448.179022] uts_namespace 4KB 11KB [ 2448.184421] nsproxy 2KB 11KB [ 2448.217550] vm_area_struct 3489KB 3495KB [ 2448.242383] mm_struct 620KB 637KB [ 2448.247766] fs_cache 298KB 392KB [ 2448.276626] files_cache 1097KB 1275KB [ 2448.296477] signal_cache 2051KB 2486KB [ 2448.314117] sighand_cache 707KB 735KB [ 2448.329324] task_struct 8660KB 8742KB [ 2448.334733] cred_jar 2304KB 2944KB [ 2448.349579] anon_vma_chain 1015KB 1366KB [ 2448.357399] anon_vma 146KB 231KB [ 2448.367024] pid 164KB 256KB [ 2448.383886] Acpi-Operand 156KB 198KB [ 2448.402420] Acpi-ParseExt 9KB 11KB [ 2448.407811] Acpi-Parse 41KB 47KB [ 2448.445058] Acpi-State 52KB 63KB [ 2448.469118] Acpi-Namespace 20KB 27KB [ 2448.474516] numa_policy 0KB 3KB [ 2448.511353] debug_objects_cache 2836KB 3129KB [ 2448.516922] trace_event_file 297KB 298KB [ 2448.549164] ftrace_event_field 398KB 401KB [ 2448.554639] pool_workqueue 147KB 164KB [ 2448.573869] page->ptl 575KB 1083KB [ 2448.597376] kmalloc-2097152 2050KB 2050KB [ 2448.625090] kmalloc-524288 2056KB 2056KB [ 2448.636934] kmalloc-262144 1290KB 1290KB [ 2448.656570] kmalloc-131072 650KB 650KB [ 2448.675645] kmalloc-65536 3036KB 3366KB [ 2448.689889] kmalloc-32768 2442KB 2673KB [ 2448.701857] kmalloc-16384 1353KB 1435KB [ 2448.707224] kmalloc-8192 5535KB 5610KB [ 2448.724359] kmalloc-4096 28674KB 28734KB [ 2448.735984] kmalloc-2048 18884KB 20145KB [ 2448.746450] kmalloc-1024 13504KB 15072KB [ 2448.758112] kmalloc-512 19226KB 19282KB [ 2448.763956] kmalloc-256 5704KB 6645KB [ 2448.780350] kmalloc-128 1462KB 1838KB [ 2448.785721] kmalloc-96 3941KB 5336KB [ 2448.793471] kmalloc-64 3325KB 5044KB [ 2448.798967] kmalloc-32 2120KB 3146KB [ 2448.804339] kmalloc-192 2469KB 3108KB [ 2448.816084] kmem_cache 177KB 180KB [ 2448.828427] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2448.849777] Killed process 29562 (syz-executor.1) total-vm:48512kB, anon-rss:428kB, file-rss:4kB, shmem-rss:0kB [ 2449.390320] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2449.458383] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2449.463188] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2449.470628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2449.479974] Call Trace: [ 2449.482568] dump_stack+0x1fc/0x2ef [ 2449.486204] dump_header+0x15d/0xc3f [ 2449.489924] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2449.495040] ? ___ratelimit+0x319/0x590 [ 2449.499032] oom_kill_process.cold+0x10/0x692 [ 2449.503536] ? check_preemption_disabled+0x41/0x280 [ 2449.508590] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2449.513873] out_of_memory+0x1072/0x1390 [ 2449.517942] ? oom_killer_disable+0x270/0x270 [ 2449.522446] ? mutex_trylock+0x15f/0x1a0 [ 2449.526516] __alloc_pages_nodemask+0x23a2/0x2890 [ 2449.531454] ? find_get_entry+0x4cd/0x8a0 [ 2449.535611] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2449.540479] alloc_pages_current+0x193/0x2a0 [ 2449.544895] filemap_fault+0x146e/0x2180 [ 2449.548991] ext4_filemap_fault+0x84/0xb0 [ 2449.553144] __do_fault+0x10b/0x4b0 [ 2449.556772] __handle_mm_fault+0x273b/0x41c0 [ 2449.561181] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2449.566283] ? vm_insert_page+0x9c0/0x9c0 [ 2449.570444] ? check_preemption_disabled+0x41/0x280 [ 2449.575466] handle_mm_fault+0x436/0xb10 [ 2449.579533] __do_page_fault+0x68e/0xd60 [ 2449.583605] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2449.588625] ? spurious_fault+0x840/0x840 [ 2449.592775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2449.597624] ? page_fault+0x8/0x30 [ 2449.601162] page_fault+0x1e/0x30 [ 2449.604610] RIP: 0033:0x46af7d [ 2449.607976] Code: Bad RIP value. [ 2449.611427] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2449.616873] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2449.624135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2449.631395] RBP: 000000c000067f20 R08: 0000000000063027 R09: 000002743075bc0a [ 2449.638657] R10: 000c09b41d7d9a1c R11: 0000000000000202 R12: 000000c000067f10 [ 2449.645921] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2449.717672] Mem-Info: [ 2449.723328] active_anon:27834 inactive_anon:81958 isolated_anon:0 [ 2449.723328] active_file:58 inactive_file:0 isolated_file:29 [ 2449.723328] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2449.723328] slab_reclaimable:13439 slab_unreclaimable:115491 [ 2449.723328] mapped:18634 shmem:96116 pagetables:582 bounce:0 [ 2449.723328] free:25116 free_pcp:484 free_cma:0 [ 2449.759057] Node 0 active_anon:109972kB inactive_anon:170900kB active_file:92kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74464kB dirty:0kB writeback:0kB shmem:226508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2449.788415] Node 1 active_anon:1300kB inactive_anon:156932kB active_file:60kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2449.816185] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2449.847504] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2449.870196] Node 0 DMA32 free:36100kB min:35996kB low:44992kB high:53988kB active_anon:109912kB inactive_anon:167284kB active_file:20kB inactive_file:1032kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2220kB bounce:0kB free_pcp:548kB local_pcp:364kB free_cma:0kB [ 2449.948538] lowmem_reserve[]: 0 0 1 1 1 [ 2449.952544] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.018461] lowmem_reserve[]: 0 0 0 0 0 [ 2450.022481] Node 1 Normal free:53392kB min:53876kB low:67344kB high:80812kB active_anon:1300kB inactive_anon:156932kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.069757] lowmem_reserve[]: 0 0 0 0 0 [ 2450.074369] Node 0 DMA: 0*4kB 5*8kB (UM) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10984kB [ 2450.090250] Node 0 DMA32: 52*4kB (E) 541*8kB (UMEH) 251*16kB (UME) 147*32kB (UME) 51*64kB (UME) 27*128kB (UM) 6*256kB (UM) 26*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35848kB [ 2450.115083] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2450.126198] Node 1 Normal: 524*4kB (ME) 372*8kB (UME) 184*16kB (UME) 48*32kB (UME) 23*64kB (UME) 11*128kB (UM) 3*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 0*2048kB 9*4096kB (UM) = 54160kB [ 2450.142917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.151821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.160435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.169293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.177870] 96245 total pagecache pages [ 2450.181912] 0 pages in swap cache [ 2450.185379] Swap cache stats: add 0, delete 0, find 0/0 [ 2450.218474] Free swap = 0kB [ 2450.221512] Total swap = 0kB [ 2450.224524] 2097051 pages RAM [ 2450.227620] 0 pages HighMem/MovableOnly [ 2450.239560] 369649 pages reserved [ 2450.243018] 0 pages cma reserved [ 2450.246381] Unreclaimable slab info: [ 2450.250153] Name Used Total [ 2450.268480] pid_2 33KB 36KB [ 2450.273917] batadv_tt_change_cache 4KB 11KB [ 2450.282561] batadv_tl_cache 8KB 16KB [ 2450.287947] TIPC 19KB 30KB [ 2450.297520] SCTPv6 26KB 49KB [ 2450.306232] DCCPv6 20KB 45KB [ 2450.316659] DCCP 19KB 42KB [ 2450.322999] RXRPC 21KB 45KB [ 2450.328356] rxrpc_call_jar 128KB 173KB [ 2450.338114] bridge_fdb_cache 16KB 27KB [ 2450.344585] fib6_nodes 255KB 308KB [ 2450.354105] ip6_dst_cache 810KB 810KB [ 2450.360738] RAWv6 131KB 155KB [ 2450.366122] UDPv6 41KB 48KB [ 2450.391258] TCPv6 24KB 42KB [ 2450.401478] nf_conntrack 16KB 18KB [ 2450.406964] t10_alua_lu_gp_cache 0KB 3KB [ 2450.412638] sd_ext_cdb 0KB 7KB [ 2450.417989] scsi_sense_cache 1056KB 1060KB [ 2450.423526] virtio_scsi_cmd 16KB 16KB [ 2450.428936] sgpool-128 8KB 8KB [ 2450.434333] sgpool-64 4KB 12KB [ 2450.448435] sgpool-32 2KB 15KB [ 2450.453810] sgpool-16 1KB 7KB [ 2450.459210] sgpool-8 0KB 7KB [ 2450.464572] mqueue_inode_cache 15KB 30KB [ 2450.471134] bio_post_read_ctx 14KB 15KB [ 2450.476566] bio-2 14KB 15KB [ 2450.482123] jfs_mp 7KB 7KB [ 2450.487513] cifs_small_rq 15KB 16KB [ 2450.496156] cifs_request 67KB 67KB [ 2450.501573] cifs_mpx_ids 0KB 7KB [ 2450.506954] nfs_commit_data 3KB 14KB [ 2450.512360] nfs_write_data 34KB 44KB [ 2450.517753] ext4_system_zone 1KB 7KB [ 2450.523259] bio-1 1KB 7KB [ 2450.528671] pid_namespace 3KB 11KB [ 2450.534034] rpc_buffers 17KB 25KB [ 2450.539452] rpc_tasks 2KB 7KB [ 2450.544810] UNIX 2126KB 2201KB [ 2450.550695] tcp_bind_bucket 2KB 8KB [ 2450.556070] ip_fib_trie 39KB 47KB [ 2450.562300] ip_fib_alias 175KB 213KB [ 2450.567678] ip_dst_cache 18KB 24KB [ 2450.573089] RAW 85KB 112KB [ 2450.578530] UDP 70KB 101KB [ 2450.583892] TCP 11KB 16KB [ 2450.597853] hugetlbfs_inode_cache 3KB 15KB [ 2450.603630] fscache_cookie_jar 1KB 7KB [ 2450.609606] eventpoll_pwq 25KB 43KB [ 2450.617056] eventpoll_epi 46KB 63KB [ 2450.622931] inotify_inode_mark 5KB 7KB [ 2450.628444] request_queue 199KB 199KB [ 2450.633798] blkdev_requests 1KB 3KB [ 2450.639203] blkdev_ioc 26KB 42KB [ 2450.644558] bio-0 1084KB 1087KB [ 2450.649962] biovec-max 1600KB 1600KB [ 2450.655327] biovec-64 1110KB 1110KB [ 2450.660741] biovec-16 157KB 165KB [ 2450.666121] bio_integrity_payload 1KB 8KB [ 2450.671865] khugepaged_mm_slot 7KB 19KB [ 2450.677320] uid_cache 0KB 4KB [ 2450.685728] dmaengine-unmap-2 0KB 3KB [ 2450.691167] skbuff_fclone_cache 45KB 48KB [ 2450.696706] skbuff_head_cache 10098KB 10098KB [ 2450.702250] configfs_dir_cache 3KB 7KB [ 2450.707794] file_lock_ctx 9KB 11KB [ 2450.714233] fsnotify_mark_connector 2KB 3KB [ 2450.720165] net_namespace 105KB 122KB [ 2450.725625] shmem_inode_cache 7958KB 7987KB [ 2450.737032] task_delay_info 283KB 442KB [ 2450.742609] taskstats 36KB 42KB [ 2450.747995] proc_dir_entry 1061KB 1218KB [ 2450.753394] pde_opener 15KB 23KB [ 2450.758795] seq_file 300KB 350KB [ 2450.764149] sigqueue 57KB 70KB [ 2450.769539] kernfs_node_cache 18235KB 18250KB [ 2450.774893] mnt_cache 209KB 256KB [ 2450.780300] filp 7444KB 8268KB [ 2450.785658] names_cache 100559KB 100597KB [ 2450.791177] iint_cache 29KB 51KB [ 2450.796533] key_jar 4KB 7KB [ 2450.804527] uts_namespace 4KB 11KB [ 2450.861998] nsproxy 2KB 11KB [ 2450.867389] vm_area_struct 3489KB 3495KB [ 2450.938822] mm_struct 620KB 637KB [ 2450.944211] fs_cache 298KB 392KB [ 2451.006238] files_cache 1097KB 1275KB [ 2451.041272] signal_cache 2016KB 2479KB [ 2451.046662] sighand_cache 707KB 735KB [ 2451.104234] task_struct 8458KB 8540KB [ 2451.133431] cred_jar 2274KB 2944KB [ 2451.161770] anon_vma_chain 1015KB 1366KB [ 2451.167151] anon_vma 146KB 231KB [ 2451.211252] pid 164KB 256KB [ 2451.216638] Acpi-Operand 156KB 198KB [ 2451.273565] Acpi-ParseExt 9KB 11KB [ 2451.300863] Acpi-Parse 41KB 47KB [ 2451.306248] Acpi-State 52KB 63KB [ 2451.358650] Acpi-Namespace 20KB 27KB [ 2451.382038] numa_policy 0KB 3KB [ 2451.387445] debug_objects_cache 2836KB 3129KB [ 2451.436427] trace_event_file 297KB 298KB [ 2451.467410] ftrace_event_field 398KB 401KB [ 2451.493853] pool_workqueue 147KB 164KB [ 2451.515742] page->ptl 575KB 1083KB [ 2451.523021] kmalloc-2097152 2050KB 2050KB [ 2451.528385] kmalloc-524288 2056KB 2056KB [ 2451.560151] kmalloc-262144 1290KB 1290KB [ 2451.565695] kmalloc-131072 650KB 650KB [ 2451.603091] kmalloc-65536 3036KB 3366KB [ 2451.629310] kmalloc-32768 2442KB 2673KB [ 2451.634701] kmalloc-16384 1353KB 1435KB [ 2451.681210] kmalloc-8192 5535KB 5610KB [ 2451.686591] kmalloc-4096 28266KB 28326KB [ 2451.736435] kmalloc-2048 18884KB 20145KB [ 2451.768078] kmalloc-1024 13572KB 15072KB [ 2451.794409] kmalloc-512 19551KB 19601KB [ 2451.824766] kmalloc-256 5696KB 6645KB [ 2451.850216] kmalloc-128 1462KB 1838KB [ 2451.855615] kmalloc-96 3964KB 5336KB [ 2451.908259] kmalloc-64 3325KB 5044KB [ 2451.938252] kmalloc-32 2120KB 3146KB [ 2451.978561] kmalloc-192 2439KB 3108KB [ 2451.983953] kmem_cache 177KB 180KB [ 2452.041258] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2452.098641] Killed process 27818 (syz-executor.3) total-vm:48512kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 2452.785671] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 2452.800440] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2452.805490] CPU: 1 PID: 4696 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2452.813187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2452.822531] Call Trace: [ 2452.825100] dump_stack+0x1fc/0x2ef [ 2452.828715] dump_header+0x15d/0xc3f [ 2452.832409] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2452.837491] ? ___ratelimit+0x319/0x590 [ 2452.841447] oom_kill_process.cold+0x10/0x692 [ 2452.845937] ? oom_badness.part.0+0x135/0x6e0 [ 2452.850415] ? lock_downgrade+0x720/0x720 [ 2452.854543] ? check_preemption_disabled+0x41/0x280 [ 2452.859544] out_of_memory+0x34d/0x1390 [ 2452.863506] ? oom_killer_disable+0x270/0x270 [ 2452.867984] ? mutex_trylock+0x15f/0x1a0 [ 2452.872030] __alloc_pages_nodemask+0x23a2/0x2890 [ 2452.876858] ? find_get_entry+0x4cd/0x8a0 [ 2452.880990] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2452.885825] alloc_pages_current+0x193/0x2a0 [ 2452.890211] filemap_fault+0x146e/0x2180 [ 2452.894260] ext4_filemap_fault+0x84/0xb0 [ 2452.898400] __do_fault+0x10b/0x4b0 [ 2452.902005] ? do_raw_spin_unlock+0x171/0x230 [ 2452.906484] __handle_mm_fault+0x273b/0x41c0 [ 2452.910875] ? vm_insert_page+0x9c0/0x9c0 [ 2452.915004] ? lock_downgrade+0x720/0x720 [ 2452.919137] ? check_preemption_disabled+0x41/0x280 [ 2452.924137] handle_mm_fault+0x436/0xb10 [ 2452.928184] __do_page_fault+0x68e/0xd60 [ 2452.932231] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2452.937244] ? spurious_fault+0x840/0x840 [ 2452.941377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2452.946201] ? page_fault+0x8/0x30 [ 2452.949735] page_fault+0x1e/0x30 [ 2452.953168] RIP: 0033:0x7fd648d7f650 [ 2452.956863] Code: Bad RIP value. [ 2452.960205] RSP: 002b:00007ffd67984498 EFLAGS: 00010206 [ 2452.965543] RAX: 00005593fa0e0d20 RBX: 00005593fb2471a0 RCX: 6c7967656e657261 [ 2452.972791] RDX: 7465646279746573 RSI: 00007ffd679844c0 RDI: 00005593fb2471a0 [ 2452.980040] RBP: 00007ffd679844c0 R08: 0000000000000018 R09: 0000000000000018 [ 2452.987290] R10: 0000000000000000 R11: 00005593fb233dc0 R12: 00005593fb2471a0 [ 2452.994539] R13: 00005593fb233eb0 R14: 00005593fa0e09a0 R15: 0000000000000000 [ 2453.004175] Mem-Info: [ 2453.006637] active_anon:27672 inactive_anon:81958 isolated_anon:0 [ 2453.006637] active_file:13 inactive_file:88 isolated_file:0 [ 2453.006637] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2453.006637] slab_reclaimable:13439 slab_unreclaimable:115076 [ 2453.006637] mapped:15091 shmem:96116 pagetables:528 bounce:0 [ 2453.006637] free:25635 free_pcp:211 free_cma:0 [ 2453.061021] Node 0 active_anon:109392kB inactive_anon:170900kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60164kB dirty:0kB writeback:0kB shmem:226508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2453.228664] Node 1 active_anon:1296kB inactive_anon:156932kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.379700] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.518646] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2453.535155] Node 0 DMA32 free:35820kB min:35996kB low:44992kB high:53988kB active_anon:109392kB inactive_anon:167284kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.677893] lowmem_reserve[]: 0 0 1 1 1 [ 2453.683200] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.854933] lowmem_reserve[]: 0 0 0 0 0 [ 2453.875161] Node 1 Normal free:53396kB min:53876kB low:67344kB high:80812kB active_anon:1296kB inactive_anon:156932kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.074941] lowmem_reserve[]: 0 0 0 0 0 [ 2454.096819] Node 0 DMA: 0*4kB 5*8kB (UM) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10984kB [ 2454.181291] Node 0 DMA32: 429*4kB (UME) 561*8kB (UME) 256*16kB (UME) 150*32kB (UME) 53*64kB (UME) 20*128kB (UM) 7*256kB (UM) 24*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36156kB [ 2454.206553] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2454.217723] Node 1 Normal: 524*4kB (UME) 371*8kB (UME) 182*16kB (ME) 47*32kB (ME) 20*64kB (ME) 11*128kB (UM) 3*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 0*2048kB 9*4096kB (UM) = 53896kB [ 2454.262461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2454.318731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2454.327488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2454.430856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2454.478648] 96179 total pagecache pages [ 2454.482653] 0 pages in swap cache [ 2454.486099] Swap cache stats: add 0, delete 0, find 0/0 [ 2454.549884] Free swap = 0kB [ 2454.552929] Total swap = 0kB [ 2454.555943] 2097051 pages RAM [ 2454.566751] 0 pages HighMem/MovableOnly [ 2454.570852] 369649 pages reserved [ 2454.574298] 0 pages cma reserved [ 2454.577651] Unreclaimable slab info: [ 2454.666611] Name Used Total [ 2454.696745] pid_2 32KB 36KB [ 2454.719856] batadv_tt_change_cache 3KB 11KB [ 2454.725673] batadv_tl_cache 7KB 16KB [ 2454.784215] TIPC 18KB 30KB [ 2454.812075] SCTPv6 24KB 49KB [ 2454.817483] DCCPv6 17KB 45KB [ 2454.868940] DCCP 16KB 42KB [ 2454.874367] RXRPC 19KB 45KB [ 2454.935064] rxrpc_call_jar 128KB 173KB [ 2454.967382] bridge_fdb_cache 15KB 27KB [ 2455.004910] fib6_nodes 249KB 308KB [ 2455.045280] ip6_dst_cache 813KB 813KB [ 2455.081938] RAWv6 131KB 155KB [ 2455.087327] UDPv6 39KB 45KB [ 2455.139921] TCPv6 21KB 42KB [ 2455.145324] nf_conntrack 12KB 18KB [ 2455.176337] t10_alua_lu_gp_cache 0KB 3KB [ 2455.188330] sd_ext_cdb 0KB 7KB [ 2455.242105] scsi_sense_cache 1056KB 1060KB [ 2455.247497] virtio_scsi_cmd 16KB 16KB [ 2455.296457] sgpool-128 8KB 8KB [ 2455.324811] sgpool-64 4KB 12KB [ 2455.373312] sgpool-32 2KB 15KB [ 2455.401028] sgpool-16 1KB 7KB [ 2455.406408] sgpool-8 0KB 7KB [ 2455.478014] mqueue_inode_cache 13KB 30KB [ 2455.511286] bio_post_read_ctx 14KB 15KB [ 2455.516734] bio-2 14KB 15KB [ 2455.584066] jfs_mp 7KB 7KB [ 2455.618309] cifs_small_rq 15KB 16KB [ 2455.663836] cifs_request 67KB 67KB [ 2455.700038] cifs_mpx_ids 0KB 7KB [ 2455.705452] nfs_commit_data 3KB 14KB [ 2455.756816] nfs_write_data 34KB 44KB [ 2455.765716] ext4_system_zone 1KB 7KB [ 2455.788551] bio-1 1KB 7KB [ 2455.794014] pid_namespace 3KB 11KB [ 2455.816651] rpc_buffers 17KB 25KB [ 2455.822072] rpc_tasks 2KB 7KB [ 2455.827428] UNIX 2070KB 2186KB [ 2455.855680] tcp_bind_bucket 1KB 8KB [ 2455.876954] ip_fib_trie 38KB 47KB [ 2455.887540] ip_fib_alias 167KB 213KB [ 2455.908567] ip_dst_cache 16KB 24KB [ 2455.913989] RAW 84KB 112KB [ 2455.937244] UDP 69KB 101KB [ 2455.947634] TCP 8KB 16KB [ 2455.969250] hugetlbfs_inode_cache 3KB 15KB [ 2455.974998] fscache_cookie_jar 1KB 7KB [ 2455.996231] eventpoll_pwq 22KB 43KB [ 2456.005029] eventpoll_epi 41KB 63KB [ 2456.025892] inotify_inode_mark 5KB 7KB [ 2456.035159] request_queue 199KB 199KB [ 2456.056254] blkdev_requests 1KB 3KB [ 2456.062538] blkdev_ioc 26KB 42KB [ 2456.067904] bio-0 1185KB 1188KB [ 2456.076062] biovec-max 1617KB 1617KB [ 2456.088156] biovec-64 1299KB 1299KB [ 2456.097205] biovec-16 180KB 187KB [ 2456.107726] bio_integrity_payload 1KB 8KB [ 2456.117027] khugepaged_mm_slot 7KB 19KB [ 2456.134138] uid_cache 0KB 4KB [ 2456.147335] dmaengine-unmap-2 0KB 3KB [ 2456.171446] skbuff_fclone_cache 45KB 48KB [ 2456.176997] skbuff_head_cache 10447KB 10451KB [ 2456.187374] configfs_dir_cache 3KB 7KB [ 2456.208610] file_lock_ctx 9KB 11KB [ 2456.217882] fsnotify_mark_connector 2KB 3KB [ 2456.245416] net_namespace 105KB 122KB [ 2456.266433] shmem_inode_cache 7949KB 7987KB [ 2456.271887] task_delay_info 262KB 442KB [ 2456.277294] taskstats 35KB 42KB [ 2456.303778] proc_dir_entry 1042KB 1211KB [ 2456.316468] pde_opener 15KB 23KB [ 2456.337888] seq_file 297KB 350KB [ 2456.363959] sigqueue 57KB 70KB [ 2456.371868] kernfs_node_cache 18185KB 18250KB [ 2456.377232] mnt_cache 208KB 252KB [ 2456.400089] filp 7416KB 8268KB [ 2456.405477] names_cache 100138KB 100176KB [ 2456.425916] iint_cache 29KB 51KB [ 2456.435354] key_jar 4KB 7KB [ 2456.456387] uts_namespace 4KB 11KB [ 2456.468650] nsproxy 2KB 11KB [ 2456.493892] vm_area_struct 3472KB 3495KB [ 2456.502912] mm_struct 612KB 637KB [ 2456.508280] fs_cache 285KB 388KB [ 2456.533946] files_cache 1046KB 1275KB [ 2456.558385] signal_cache 1980KB 2479KB [ 2456.579462] sighand_cache 649KB 721KB [ 2456.584842] task_struct 8345KB 8427KB [ 2456.606068] cred_jar 2250KB 2944KB [ 2456.616410] anon_vma_chain 1010KB 1366KB [ 2456.638327] anon_vma 129KB 231KB [ 2456.643825] pid 157KB 256KB [ 2456.667197] Acpi-Operand 156KB 198KB [ 2456.688113] Acpi-ParseExt 9KB 11KB [ 2456.693546] Acpi-Parse 41KB 47KB [ 2456.716252] Acpi-State 52KB 63KB [ 2456.724180] Acpi-Namespace 20KB 27KB [ 2456.745037] numa_policy 0KB 3KB [ 2456.755501] debug_objects_cache 2836KB 3129KB [ 2456.775158] trace_event_file 297KB 298KB [ 2456.781433] ftrace_event_field 398KB 401KB [ 2456.786879] pool_workqueue 143KB 164KB [ 2456.796210] page->ptl 571KB 1083KB [ 2456.807355] kmalloc-2097152 2050KB 2050KB [ 2456.816233] kmalloc-524288 2056KB 2056KB [ 2456.827608] kmalloc-262144 1290KB 1290KB [ 2456.836509] kmalloc-131072 650KB 650KB [ 2456.866401] kmalloc-65536 2904KB 3234KB [ 2456.876505] kmalloc-32768 2376KB 2607KB [ 2456.897542] kmalloc-16384 1336KB 1402KB [ 2456.918617] kmalloc-8192 5519KB 5593KB [ 2456.926551] kmalloc-4096 27790KB 27850KB [ 2456.947476] kmalloc-2048 18808KB 20113KB [ 2456.969195] kmalloc-1024 13680KB 15072KB [ 2456.974575] kmalloc-512 20236KB 20283KB [ 2456.986848] kmalloc-256 5682KB 6645KB [ 2456.996109] kmalloc-128 1444KB 1838KB [ 2457.008468] kmalloc-96 4024KB 5336KB [ 2457.017566] kmalloc-64 3313KB 5044KB [ 2457.033652] kmalloc-32 2124KB 3146KB [ 2457.039082] kmalloc-192 2415KB 3108KB [ 2457.044441] kmem_cache 177KB 180KB [ 2457.066458] Out of memory: Kill process 29524 (syz-executor.5) score 1001 or sacrifice child [ 2457.075120] Killed process 29528 (syz-executor.5) total-vm:60680kB, anon-rss:508kB, file-rss:14340kB, shmem-rss:72kB [ 2457.103138] oom_reaper: reaped process 29528 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2457.124326] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2457.154168] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2457.159000] CPU: 1 PID: 9509 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2457.166437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2457.175788] Call Trace: [ 2457.178381] dump_stack+0x1fc/0x2ef [ 2457.182009] dump_header+0x15d/0xc3f [ 2457.185724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2457.190825] ? ___ratelimit+0x319/0x590 [ 2457.194800] oom_kill_process.cold+0x10/0x692 [ 2457.199298] ? check_preemption_disabled+0x41/0x280 [ 2457.204322] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2457.209606] out_of_memory+0x1072/0x1390 [ 2457.214455] ? oom_killer_disable+0x270/0x270 [ 2457.218951] ? mutex_trylock+0x15f/0x1a0 [ 2457.223044] __alloc_pages_nodemask+0x23a2/0x2890 [ 2457.227889] ? find_get_entry+0x4cd/0x8a0 [ 2457.232043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2457.236906] alloc_pages_current+0x193/0x2a0 [ 2457.241319] filemap_fault+0x146e/0x2180 [ 2457.245392] ext4_filemap_fault+0x84/0xb0 [ 2457.249539] __do_fault+0x10b/0x4b0 [ 2457.253167] ? do_raw_spin_unlock+0x171/0x230 [ 2457.257668] __handle_mm_fault+0x273b/0x41c0 [ 2457.262081] ? vm_insert_page+0x9c0/0x9c0 [ 2457.266241] ? check_preemption_disabled+0x41/0x280 [ 2457.271258] handle_mm_fault+0x436/0xb10 [ 2457.275324] __do_page_fault+0x68e/0xd60 [ 2457.279386] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2457.284400] ? spurious_fault+0x840/0x840 [ 2457.288544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2457.293388] ? page_fault+0x8/0x30 [ 2457.296928] page_fault+0x1e/0x30 [ 2457.300393] RIP: 0033:0x44c5da [ 2457.303586] Code: Bad RIP value. [ 2457.306935] RSP: 002b:000000c0009c7940 EFLAGS: 00010202 [ 2457.312282] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000001 [ 2457.319531] RDX: 0000000000000017 RSI: 0000000001ef2ddc RDI: 0000000000eea340 [ 2457.326873] RBP: 000000c0009c79e8 R08: 0000000000000507 R09: 0000000000eecb78 [ 2457.334333] R10: 00000000001342a0 R11: 000000000005a835 R12: 000000c0009c7808 [ 2457.342454] R13: 0000000000000008 R14: 000000c00047ed00 R15: 0000000000000020 [ 2457.357008] Mem-Info: [ 2457.365625] syz-executor.5: vmalloc: allocation failure, allocated 1077743616 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2457.392478] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2457.397614] CPU: 0 PID: 29528 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2457.404197] active_anon:27672 inactive_anon:81958 isolated_anon:0 [ 2457.404197] active_file:14 inactive_file:12 isolated_file:0 [ 2457.404197] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2457.404197] slab_reclaimable:13439 slab_unreclaimable:114516 [ 2457.404197] mapped:15041 shmem:96116 pagetables:528 bounce:0 [ 2457.404197] free:13896 free_pcp:281 free_cma:0 [ 2457.405483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2457.405507] Call Trace: [ 2457.450645] dump_stack+0x1fc/0x2ef [ 2457.454278] warn_alloc.cold+0x7b/0x18f [ 2457.458255] ? zone_watermark_ok_safe+0x260/0x260 [ 2457.463093] ? rcu_nmi_exit+0xb3/0x180 [ 2457.467004] __vmalloc_area_node+0x4fd/0x780 [ 2457.471422] ? __vmalloc_node_range+0x180/0x180 [ 2457.476088] ? _raw_spin_unlock+0x29/0x40 [ 2457.478737] Node 0 active_anon:109392kB inactive_anon:170900kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60164kB dirty:0kB writeback:0kB shmem:226508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.480228] ? __get_vm_area_node+0x2e2/0x3a0 [ 2457.480248] __vmalloc_node_range+0xed/0x180 [ 2457.480265] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2457.480281] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2457.480293] vmalloc_user+0x70/0xe0 [ 2457.480308] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2457.528036] Node 1 active_anon:1296kB inactive_anon:156932kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.530177] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2457.530194] __vb2_queue_alloc+0x472/0xe60 [ 2457.530218] vb2_core_create_bufs+0x273/0x7e0 [ 2457.530233] ? __vb2_queue_free+0x870/0x870 [ 2457.534532] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.561500] ? __video_do_ioctl+0x632/0xcd0 [ 2457.561522] ? __mutex_lock+0x368/0x1190 [ 2457.561538] vb2_create_bufs+0x332/0x620 [ 2457.561555] ? mark_held_locks+0xf0/0xf0 [ 2457.561569] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2457.561587] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2457.561603] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2457.561624] v4l_create_bufs+0xb2/0x160 [ 2457.561641] __video_do_ioctl+0x49a/0xcd0 [ 2457.561661] ? v4l_querycap+0x340/0x340 [ 2457.583649] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2457.605135] ? __might_fault+0x192/0x1d0 [ 2457.605155] ? v4l_querycap+0x340/0x340 [ 2457.605167] video_usercopy+0x13f/0xfa0 [ 2457.605186] ? v4l_enumstd+0x60/0x60 [ 2457.605200] ? do_futex+0x171/0x1880 [ 2457.605216] ? mark_held_locks+0xf0/0xf0 [ 2457.605234] ? debug_check_no_obj_freed+0x201/0x490 [ 2457.605256] ? video_usercopy+0xfa0/0xfa0 [ 2457.605268] v4l2_ioctl+0x147/0x1a0 [ 2457.605280] ? video_devdata+0xa0/0xa0 [ 2457.605293] do_vfs_ioctl+0xcdb/0x12e0 [ 2457.605306] ? lock_downgrade+0x720/0x720 [ 2457.605319] ? check_preemption_disabled+0x41/0x280 [ 2457.605331] ? ioctl_preallocate+0x200/0x200 [ 2457.605345] ? __fget+0x356/0x510 [ 2457.605359] ? do_dup2+0x450/0x450 [ 2457.605372] ? __se_sys_futex+0x298/0x3b0 [ 2457.605395] ksys_ioctl+0x9b/0xc0 [ 2457.605412] __x64_sys_ioctl+0x6f/0xb0 [ 2457.605426] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2457.605439] do_syscall_64+0xf9/0x620 [ 2457.605457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2457.605469] RIP: 0033:0x7f579755f0f9 [ 2457.605483] Code: Bad RIP value. [ 2457.605490] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.605503] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2457.605512] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2457.605519] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2457.605527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2457.605536] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2457.626351] Mem-Info: [ 2457.643495] Node 0 DMA32 free:17760kB min:35996kB low:44992kB high:53988kB active_anon:109392kB inactive_anon:167284kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2112kB bounce:0kB free_pcp:608kB local_pcp:128kB free_cma:0kB [ 2457.656440] active_anon:27672 inactive_anon:81958 isolated_anon:0 [ 2457.656440] active_file:14 inactive_file:12 isolated_file:0 [ 2457.656440] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2457.656440] slab_reclaimable:13439 slab_unreclaimable:114516 [ 2457.656440] mapped:15041 shmem:96116 pagetables:528 bounce:0 [ 2457.656440] free:13896 free_pcp:277 free_cma:0 [ 2457.746697] lowmem_reserve[]: 0 0 1 1 1 [ 2457.756179] Node 0 active_anon:109392kB inactive_anon:170900kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60164kB dirty:0kB writeback:0kB shmem:226508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.798072] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.807210] Node 1 active_anon:1292kB inactive_anon:156932kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.858355] lowmem_reserve[]: 0 0 0 0 0 [ 2457.872571] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.913434] Node 1 Normal free:26932kB min:53876kB low:67344kB high:80812kB active_anon:1292kB inactive_anon:156932kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:0kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 2457.935863] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2457.964030] lowmem_reserve[]: 0 0 0 0 0 [ 2458.034300] Node 0 DMA: 1*4kB (U) 4*8kB (M) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10884kB [ 2458.065253] Node 0 DMA32: 342*4kB (ME) 523*8kB (UME) 235*16kB (UME) 128*32kB (UME) 36*64kB (ME) 12*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17760kB [ 2458.078816] Node 0 DMA32 free:17760kB min:35996kB low:44992kB high:53988kB active_anon:109300kB inactive_anon:167284kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2112kB bounce:0kB free_pcp:588kB local_pcp:464kB free_cma:0kB [ 2458.095266] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2458.137400] Node 1 Normal: 523*4kB (ME) 371*8kB (UME) 183*16kB (UME) 48*32kB (UME) 20*64kB (ME) 10*128kB (M) 2*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (M) = 26932kB [ 2458.173938] lowmem_reserve[]: 0 0 1 1 1 [ 2458.173973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.177942] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.201979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.228876] net_ratelimit: 8 callbacks suppressed [ 2458.228882] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.228907] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.246760] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.248595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.253311] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.268709] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.275264] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.276988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.281813] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.281858] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.303466] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.305313] 96142 total pagecache pages [ 2458.310015] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2458.329000] 0 pages in swap cache [ 2458.332456] Swap cache stats: add 0, delete 0, find 0/0 [ 2458.357722] Free swap = 0kB [ 2458.360807] Total swap = 0kB [ 2458.363819] 2097051 pages RAM [ 2458.366914] 0 pages HighMem/MovableOnly [ 2458.402893] lowmem_reserve[]: 0 0 0 0 0 [ 2458.406903] Node 1 Normal free:26932kB min:53876kB low:67344kB high:80812kB active_anon:1292kB inactive_anon:156932kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:0kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 2458.431959] 369649 pages reserved [ 2458.445987] lowmem_reserve[]: 0 0 0 0 0 [ 2458.450078] Node 0 DMA: 1*4kB (U) 4*8kB (M) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10884kB [ 2458.458715] 0 pages cma reserved [ 2458.478039] Node 0 DMA32: 342*4kB (ME) 523*8kB (UME) 235*16kB (UME) 128*32kB (UME) 36*64kB (ME) 12*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17760kB [ 2458.488854] Unreclaimable slab info: [ 2458.497421] Name Used Total [ 2458.505458] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2458.530341] Node 1 Normal: 523*4kB (ME) 371*8kB (UME) 183*16kB (UME) 48*32kB (UME) 20*64kB (ME) 10*128kB (M) 2*256kB (M) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (M) = 26932kB [ 2458.539935] pid_2 32KB 36KB [ 2458.559664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.568512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.573672] batadv_tt_change_cache 3KB 11KB [ 2458.589735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.598579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.603550] batadv_tl_cache 7KB 16KB [ 2458.619765] 96142 total pagecache pages [ 2458.623744] 0 pages in swap cache [ 2458.627188] Swap cache stats: add 0, delete 0, find 0/0 [ 2458.636220] TIPC 18KB 30KB [ 2458.642124] Free swap = 0kB [ 2458.645137] Total swap = 0kB [ 2458.648149] 2097051 pages RAM [ 2458.654652] 0 pages HighMem/MovableOnly [ 2458.658620] 369649 pages reserved [ 2458.665740] SCTPv6 24KB 49KB [ 2458.668614] 0 pages cma reserved [ 2458.712457] DCCPv6 17KB 45KB [ 2458.717838] DCCP 16KB 42KB [ 2458.733221] RXRPC 19KB 45KB [ 2458.738624] rxrpc_call_jar 128KB 173KB [ 2458.744037] bridge_fdb_cache 15KB 27KB [ 2458.759569] fib6_nodes 249KB 308KB [ 2458.764931] ip6_dst_cache 817KB 817KB [ 2458.773515] RAWv6 131KB 155KB [ 2458.825876] UDPv6 39KB 45KB [ 2458.842390] TCPv6 21KB 42KB [ 2458.847809] nf_conntrack 12KB 18KB [ 2458.862705] t10_alua_lu_gp_cache 0KB 3KB [ 2458.868349] sd_ext_cdb 0KB 7KB [ 2458.877646] scsi_sense_cache 1056KB 1060KB [ 2458.892687] virtio_scsi_cmd 16KB 16KB [ 2458.898069] sgpool-128 8KB 8KB [ 2458.906808] sgpool-64 4KB 12KB [ 2458.915741] sgpool-32 2KB 15KB [ 2458.924580] sgpool-16 1KB 7KB [ 2458.933361] sgpool-8 0KB 7KB [ 2458.938731] mqueue_inode_cache 13KB 30KB [ 2458.947576] bio_post_read_ctx 14KB 15KB [ 2458.956450] bio-2 14KB 15KB [ 2458.965233] jfs_mp 7KB 7KB [ 2458.974121] cifs_small_rq 15KB 16KB [ 2458.982954] cifs_request 67KB 67KB [ 2458.988323] cifs_mpx_ids 0KB 7KB [ 2458.997115] nfs_commit_data 3KB 14KB [ 2459.005573] nfs_write_data 34KB 44KB [ 2459.014319] ext4_system_zone 1KB 7KB [ 2459.023104] bio-1 1KB 7KB [ 2459.028595] pid_namespace 3KB 11KB [ 2459.037298] rpc_buffers 17KB 25KB [ 2459.046180] rpc_tasks 2KB 7KB [ 2459.062334] UNIX 2070KB 2186KB [ 2459.067716] tcp_bind_bucket 1KB 8KB [ 2459.076442] ip_fib_trie 38KB 47KB [ 2459.085229] ip_fib_alias 167KB 213KB [ 2459.094023] ip_dst_cache 16KB 24KB [ 2459.102887] RAW 84KB 112KB [ 2459.108251] UDP 69KB 101KB [ 2459.117158] TCP 8KB 16KB [ 2459.132652] hugetlbfs_inode_cache 3KB 15KB [ 2459.138368] fscache_cookie_jar 1KB 7KB [ 2459.147179] eventpoll_pwq 22KB 43KB [ 2459.162298] eventpoll_epi 41KB 63KB [ 2459.167682] inotify_inode_mark 5KB 7KB [ 2459.176698] request_queue 199KB 199KB [ 2459.188270] blkdev_requests 1KB 3KB [ 2459.205759] blkdev_ioc 26KB 42KB [ 2459.216882] bio-0 1185KB 1188KB [ 2459.272396] biovec-max 1617KB 1617KB [ 2459.277800] biovec-64 1299KB 1299KB [ 2459.292922] biovec-16 180KB 187KB [ 2459.298320] bio_integrity_payload 1KB 8KB [ 2459.307404] khugepaged_mm_slot 7KB 19KB [ 2459.322660] uid_cache 0KB 4KB [ 2459.328148] dmaengine-unmap-2 0KB 3KB [ 2459.337049] skbuff_fclone_cache 45KB 48KB [ 2459.348810] skbuff_head_cache 10614KB 10616KB [ 2459.357637] configfs_dir_cache 3KB 7KB [ 2459.373587] file_lock_ctx 9KB 11KB [ 2459.379003] fsnotify_mark_connector 2KB 3KB [ 2459.384884] net_namespace 105KB 122KB [ 2459.399909] shmem_inode_cache 7949KB 7987KB [ 2459.405292] task_delay_info 262KB 442KB [ 2459.417402] taskstats 35KB 42KB [ 2459.426004] proc_dir_entry 1042KB 1211KB [ 2459.438031] pde_opener 15KB 23KB [ 2459.446936] seq_file 297KB 350KB [ 2459.458675] sigqueue 57KB 70KB [ 2459.467540] kernfs_node_cache 18132KB 18246KB [ 2459.483349] mnt_cache 208KB 252KB [ 2459.488721] filp 7366KB 8268KB [ 2459.497417] names_cache 99594KB 99632KB [ 2459.513142] iint_cache 29KB 51KB [ 2459.518513] key_jar 4KB 7KB [ 2459.526989] uts_namespace 4KB 11KB [ 2459.552361] nsproxy 2KB 11KB [ 2459.557739] vm_area_struct 3472KB 3495KB [ 2459.577463] mm_struct 612KB 637KB [ 2459.586473] fs_cache 285KB 388KB [ 2459.607629] files_cache 1046KB 1275KB [ 2459.618455] signal_cache 1963KB 2479KB [ 2459.642494] sighand_cache 649KB 721KB [ 2459.647868] task_struct 8294KB 8376KB [ 2459.668851] cred_jar 2235KB 2944KB [ 2459.674334] anon_vma_chain 1010KB 1366KB [ 2459.695425] anon_vma 129KB 231KB [ 2459.703300] pid 157KB 256KB [ 2459.708660] Acpi-Operand 156KB 198KB [ 2459.732414] Acpi-ParseExt 9KB 11KB [ 2459.737805] Acpi-Parse 41KB 47KB [ 2459.758598] Acpi-State 52KB 63KB [ 2459.767394] Acpi-Namespace 20KB 27KB [ 2459.787956] numa_policy 0KB 3KB [ 2459.811877] debug_objects_cache 2836KB 3129KB [ 2459.817435] trace_event_file 297KB 298KB [ 2459.828293] ftrace_event_field 398KB 401KB [ 2459.853763] pool_workqueue 143KB 164KB [ 2459.868804] page->ptl 571KB 1083KB [ 2459.878109] kmalloc-2097152 2050KB 2050KB [ 2459.894268] kmalloc-524288 2056KB 2056KB [ 2459.903372] kmalloc-262144 1290KB 1290KB [ 2459.908835] kmalloc-131072 650KB 650KB [ 2459.924199] kmalloc-65536 2904KB 3234KB [ 2459.933294] kmalloc-32768 2376KB 2607KB [ 2459.938669] kmalloc-16384 1336KB 1402KB [ 2459.954419] kmalloc-8192 5519KB 5593KB [ 2459.963412] kmalloc-4096 27790KB 27850KB [ 2459.968782] kmalloc-2048 18808KB 20113KB [ 2459.984026] kmalloc-1024 13720KB 15072KB [ 2459.993032] kmalloc-512 20295KB 20295KB [ 2459.998658] kmalloc-256 5682KB 6645KB [ 2460.014142] kmalloc-128 1444KB 1838KB [ 2460.023329] kmalloc-96 4024KB 5336KB [ 2460.028697] kmalloc-64 3313KB 5044KB [ 2460.052859] kmalloc-32 2131KB 3146KB [ 2460.058294] kmalloc-192 2415KB 3108KB [ 2460.084241] kmem_cache 177KB 180KB [ 2460.095885] Out of memory (oom_kill_allocating_task): Kill process 9509 (syz-fuzzer) score 0 or sacrifice child [ 2460.116634] Killed process 29243 (syz-executor.4) total-vm:48512kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 2460.910267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2460.916996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2460.941074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2460.947797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2460.985828] device bridge_slave_1 left promiscuous mode [ 2460.991672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2461.004319] device bridge_slave_0 left promiscuous mode [ 2461.009837] bridge0: port 1(bridge_slave_0) entered disabled state [ 2461.025304] device veth1_macvtap left promiscuous mode [ 2461.030772] device veth0_macvtap left promiscuous mode [ 2461.036098] device veth1_vlan left promiscuous mode [ 2461.064354] device veth0_vlan left promiscuous mode 06:45:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x121481) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x6, 0x2, 0x4, 0x4, 0x8, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x5, 0xff, 0xff, "96f11d07"}, 0x0, 0x4, {&(0x7f0000000140)=[{0x81, 0x6, {}, 0xfff}, {0x1f, 0x20, {r2}}]}, 0x4}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffffd, 0x400, 0x2, {0x2, @pix={0x4, 0x8, 0x3136564e, 0x9, 0x2, 0x4, 0xb, 0x3, 0x0, 0x3, 0x2, 0x3}}, 0x1}) 06:45:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}], 0x8, 0x0) 06:45:15 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) (async) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="4cc510ad9c09628fcb4e421d7b649746f99952ca3c8249148369539814d5b30286f5581c16af6d14b8021c9168f56db6537ee529", &(0x7f0000000280)=""/171, &(0x7f0000000340)="33996f64948123c07a483b080707209e9a7c69598e57037c2ef2bbe7555331c21bae072fd57447c41d5a7982e8f416df78e58687dfbc000005b3e58c5530e333ed8fa30300000000000000128fa85b3247ee43d1a38c06d3856efe625a7514106f30fbce9690689162bd47941914297d1d71c3b908d9624b479980740c020b5a7ff99f1a9009789787443dc3cc806ff5ef1a60f181ec8cdbe218289079483283cd43ad3bf2883b38840345207bbc8609d14e30862858c9a5f6a12e50bb99cfe6f3e74684fb82eb776798b202311cbb78cffffdf7640709138dcb", &(0x7f0000000040)="b9ba460f1a7f00552d790f42a76cf9205a8f306329c6406fbae1e027eee8d74b3646a88e08d359593117174b40cf90a4", 0x0, r0, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="4cc510ad9c09628fcb4e421d7b649746f99952ca3c8249148369539814d5b30286f5581c16af6d14b8021c9168f56db6537ee529", &(0x7f0000000280)=""/171, &(0x7f0000000340)="33996f64948123c07a483b080707209e9a7c69598e57037c2ef2bbe7555331c21bae072fd57447c41d5a7982e8f416df78e58687dfbc000005b3e58c5530e333ed8fa30300000000000000128fa85b3247ee43d1a38c06d3856efe625a7514106f30fbce9690689162bd47941914297d1d71c3b908d9624b479980740c020b5a7ff99f1a9009789787443dc3cc806ff5ef1a60f181ec8cdbe218289079483283cd43ad3bf2883b38840345207bbc8609d14e30862858c9a5f6a12e50bb99cfe6f3e74684fb82eb776798b202311cbb78cffffdf7640709138dcb", &(0x7f0000000040)="b9ba460f1a7f00552d790f42a76cf9205a8f306329c6406fbae1e027eee8d74b3646a88e08d359593117174b40cf90a4", 0x0, r0, 0x4}, 0x38) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) 06:45:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x1b7, 0x83f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:45:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:45:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x121481) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x6, 0x2, 0x4, 0x4, 0x8, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x5, 0xff, 0xff, "96f11d07"}, 0x0, 0x4, {&(0x7f0000000140)=[{0x81, 0x6, {}, 0xfff}, {0x1f, 0x20, {r2}}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffffd, 0x400, 0x2, {0x2, @pix={0x4, 0x8, 0x3136564e, 0x9, 0x2, 0x4, 0xb, 0x3, 0x0, 0x3, 0x2, 0x3}}, 0x1}) 06:45:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}], 0x8, 0x0) 06:45:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x2}) 06:45:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}], 0x8, 0x0) 06:45:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x2}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x2}) (async) 06:45:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {0x0}], 0x9, 0x0) 06:45:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x2}) 06:45:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}], 0x8, 0x0) [ 2468.471689] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.477299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.028734] device hsr_slave_1 left promiscuous mode [ 2469.041648] device hsr_slave_0 left promiscuous mode [ 2469.062210] team0 (unregistering): Port device team_slave_1 removed [ 2469.074946] team0 (unregistering): Port device team_slave_0 removed [ 2469.085837] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2469.099549] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2469.142016] bond0 (unregistering): Released all slaves [ 2469.166807] IPVS: ftp: loaded support on port[0] = 21 [ 2469.182479] IPVS: ftp: loaded support on port[0] = 21 [ 2469.187950] IPVS: ftp: loaded support on port[0] = 21 [ 2469.670729] chnl_net:caif_netlink_parms(): no params data found [ 2469.698120] chnl_net:caif_netlink_parms(): no params data found [ 2469.718128] chnl_net:caif_netlink_parms(): no params data found [ 2469.908700] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.931145] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.948356] device bridge_slave_0 entered promiscuous mode [ 2469.962975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.972609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.988854] device bridge_slave_0 entered promiscuous mode [ 2470.024316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.031313] bridge0: port 2(bridge_slave_1) entered disabled state [ 2470.038851] device bridge_slave_1 entered promiscuous mode [ 2470.070545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.076914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2470.100500] device bridge_slave_1 entered promiscuous mode [ 2470.106837] bridge0: port 1(bridge_slave_0) entered blocking state [ 2470.114547] bridge0: port 1(bridge_slave_0) entered disabled state [ 2470.130351] device bridge_slave_0 entered promiscuous mode [ 2470.162448] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.168815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2470.178412] device bridge_slave_1 entered promiscuous mode [ 2470.193516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2470.211708] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2470.221797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2470.229577] Bluetooth: hci4: command 0x0409 tx timeout [ 2470.229605] Bluetooth: hci2: command 0x0409 tx timeout [ 2470.250965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2470.291562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2470.309354] Bluetooth: hci5: command 0x0409 tx timeout [ 2470.331874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2470.354929] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2470.370238] team0: Port device team_slave_0 added [ 2470.392603] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2470.407304] team0: Port device team_slave_0 added [ 2470.414207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2470.429115] team0: Port device team_slave_1 added [ 2470.453653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2470.468688] team0: Port device team_slave_1 added [ 2470.496124] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2470.513837] team0: Port device team_slave_0 added [ 2470.555922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2470.567373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2470.601923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2470.621349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2470.629023] team0: Port device team_slave_1 added [ 2470.672421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2470.678688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2470.759373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2470.781627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2470.787879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2470.831775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2470.856190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2470.864330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2470.872971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2470.879216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2470.920725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2470.937152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2470.943715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2470.977277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2471.006026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2471.040257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2471.048451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2471.068154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2471.094146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2471.107459] device hsr_slave_0 entered promiscuous mode [ 2471.118169] device hsr_slave_1 entered promiscuous mode [ 2471.137162] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2471.150102] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2471.157013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2471.208859] device hsr_slave_0 entered promiscuous mode [ 2471.234496] device hsr_slave_1 entered promiscuous mode [ 2471.266294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2471.287977] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2471.332132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2471.361729] device hsr_slave_0 entered promiscuous mode [ 2471.377425] device hsr_slave_1 entered promiscuous mode [ 2471.426690] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2471.473564] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2471.644633] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2471.702500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2471.759457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2472.309344] Bluetooth: hci2: command 0x041b tx timeout [ 2472.314814] Bluetooth: hci4: command 0x041b tx timeout [ 2472.389336] Bluetooth: hci5: command 0x041b tx timeout [ 2472.570756] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2472.580052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2472.981065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2472.995506] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2473.002473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2473.011065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2473.026851] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2473.408879] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2473.416255] 8021q: adding VLAN 0 to HW filter on device team0 [ 2473.842414] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2473.852565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2473.877513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2473.891760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2473.898817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2473.920999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2473.928823] bridge0: port 1(bridge_slave_0) entered blocking state [ 2473.935267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2473.951590] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2473.959149] 8021q: adding VLAN 0 to HW filter on device team0 [ 2473.975743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2473.997697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2474.004926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2474.013039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2474.022026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2474.030518] bridge0: port 2(bridge_slave_1) entered blocking state [ 2474.036872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2474.253798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2474.266608] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2474.276159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2474.286668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2474.294850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2474.305289] bridge0: port 1(bridge_slave_0) entered blocking state [ 2474.311710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2474.327133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2474.337838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2474.356637] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2474.389693] Bluetooth: hci4: command 0x040f tx timeout [ 2474.395085] Bluetooth: hci2: command 0x040f tx timeout [ 2474.470003] Bluetooth: hci5: command 0x040f tx timeout [ 2474.605644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2474.613215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2474.627834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2474.636227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2474.642804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2474.657409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2474.664932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2474.681455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2474.691257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2474.708782] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2474.716705] 8021q: adding VLAN 0 to HW filter on device team0 [ 2475.161928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2475.184895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2475.211766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2475.247193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2475.532317] oom_reaper: reaped process 29860 (syz-executor.5), now anon-rss:0kB, file-rss:14332kB, shmem-rss:4kB [ 2475.580459] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2475.609431] in:imklog cpuset=/ mems_allowed=0-1 [ 2475.614149] CPU: 1 PID: 29150 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2475.621594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2475.630945] Call Trace: [ 2475.633546] dump_stack+0x1fc/0x2ef [ 2475.637182] dump_header+0x15d/0xc3f [ 2475.640899] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2475.646002] ? ___ratelimit+0x319/0x590 [ 2475.649976] oom_kill_process.cold+0x10/0x692 [ 2475.654471] ? check_preemption_disabled+0x41/0x280 [ 2475.659593] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2475.664871] out_of_memory+0x1072/0x1390 [ 2475.668937] ? oom_killer_disable+0x270/0x270 [ 2475.673517] ? mutex_trylock+0x15f/0x1a0 [ 2475.677581] __alloc_pages_nodemask+0x23a2/0x2890 [ 2475.682442] ? find_get_entry+0x4cd/0x8a0 [ 2475.686605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2475.691477] alloc_pages_current+0x193/0x2a0 [ 2475.695886] filemap_fault+0x146e/0x2180 [ 2475.699964] ext4_filemap_fault+0x84/0xb0 [ 2475.704118] __do_fault+0x10b/0x4b0 [ 2475.707749] __handle_mm_fault+0x273b/0x41c0 [ 2475.712161] ? vm_insert_page+0x9c0/0x9c0 [ 2475.716659] ? lock_downgrade+0x720/0x720 [ 2475.720819] ? check_preemption_disabled+0x41/0x280 [ 2475.725850] handle_mm_fault+0x436/0xb10 [ 2475.729916] __do_page_fault+0x68e/0xd60 [ 2475.733983] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2475.739000] ? spurious_fault+0x840/0x840 [ 2475.743144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2475.747979] ? page_fault+0x8/0x30 [ 2475.751498] page_fault+0x1e/0x30 [ 2475.754936] RIP: 0033:0x7f29c0e4422d [ 2475.758636] Code: Bad RIP value. [ 2475.761977] RSP: 002b:00007f29be7e0580 EFLAGS: 00010293 [ 2475.767322] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f29c0e4422d [ 2475.774976] RDX: 0000000000001fa0 RSI: 00007f29be7e0da0 RDI: 0000000000000004 [ 2475.782351] RBP: 0000563cf559c9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2475.789604] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f29be7e0da0 [ 2475.796876] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f29be7e0dee [ 2475.806379] Mem-Info: [ 2475.808841] active_anon:27796 inactive_anon:81953 isolated_anon:0 [ 2475.808841] active_file:42 inactive_file:12 isolated_file:0 [ 2475.808841] unevictable:0 dirty:5 writeback:22 unstable:0 [ 2475.808841] slab_reclaimable:13419 slab_unreclaimable:118946 [ 2475.808841] mapped:22317 shmem:96111 pagetables:556 bounce:0 [ 2475.808841] free:13830 free_pcp:1163 free_cma:0 [ 2475.823175] syz-executor.5: vmalloc: allocation failure, allocated 1025990656 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2475.842926] Node 0 active_anon:109996kB inactive_anon:170888kB active_file:64kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89260kB dirty:0kB writeback:12kB shmem:226504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.884699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2475.891866] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2475.892810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2475.897031] CPU: 0 PID: 29860 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2475.909129] Node 1 active_anon:1184kB inactive_anon:156924kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.911968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2475.911973] Call Trace: [ 2475.911993] dump_stack+0x1fc/0x2ef [ 2475.912010] warn_alloc.cold+0x7b/0x18f [ 2475.912027] ? zone_watermark_ok_safe+0x260/0x260 [ 2475.912039] ? retint_kernel+0x2d/0x2d [ 2475.912072] __vmalloc_area_node+0x4fd/0x780 [ 2475.912092] ? __vmalloc_node_range+0x180/0x180 [ 2475.912106] ? _raw_spin_unlock+0x29/0x40 [ 2475.912117] ? __get_vm_area_node+0x2e2/0x3a0 [ 2475.912132] __vmalloc_node_range+0xed/0x180 [ 2475.912154] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2475.912169] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2475.912180] vmalloc_user+0x70/0xe0 [ 2475.912191] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2475.912206] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2475.942638] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.948521] __vb2_queue_alloc+0x472/0xe60 [ 2475.951143] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2475.954716] vb2_core_create_bufs+0x273/0x7e0 [ 2475.958676] Node 0 DMA32 free:17620kB min:35996kB low:44992kB high:53988kB active_anon:109932kB inactive_anon:167272kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2220kB bounce:0kB free_pcp:2636kB local_pcp:1500kB free_cma:0kB [ 2475.963530] ? __vb2_queue_free+0x870/0x870 [ 2475.963545] ? __video_do_ioctl+0x632/0xcd0 [ 2475.963563] ? __mutex_lock+0x368/0x1190 [ 2475.963579] vb2_create_bufs+0x332/0x620 [ 2475.963596] ? mark_held_locks+0xf0/0xf0 [ 2475.970743] lowmem_reserve[]: 0 0 1 1 1 [ 2475.971850] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2475.976489] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.980626] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2475.980643] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2475.980663] v4l_create_bufs+0xb2/0x160 [ 2475.980680] __video_do_ioctl+0x49a/0xcd0 [ 2475.980701] ? v4l_querycap+0x340/0x340 [ 2475.985188] lowmem_reserve[]: 0 0 0 0 0 [ 2475.989578] ? __might_fault+0x192/0x1d0 [ 2475.989595] ? v4l_querycap+0x340/0x340 [ 2475.989609] video_usercopy+0x13f/0xfa0 [ 2475.989626] ? v4l_enumstd+0x60/0x60 [ 2475.989637] ? do_futex+0x171/0x1880 [ 2475.989653] ? mark_held_locks+0xf0/0xf0 [ 2475.989671] ? debug_check_no_obj_freed+0x201/0x490 [ 2475.989689] ? video_usercopy+0xfa0/0xfa0 [ 2475.989701] v4l2_ioctl+0x147/0x1a0 [ 2475.989713] ? video_devdata+0xa0/0xa0 [ 2475.989727] do_vfs_ioctl+0xcdb/0x12e0 [ 2475.989740] ? lock_downgrade+0x720/0x720 [ 2475.989753] ? check_preemption_disabled+0x41/0x280 [ 2475.989764] ? ioctl_preallocate+0x200/0x200 [ 2475.989780] ? __fget+0x356/0x510 [ 2475.989794] ? do_dup2+0x450/0x450 [ 2475.989807] ? __se_sys_futex+0x298/0x3b0 [ 2475.989826] ksys_ioctl+0x9b/0xc0 [ 2475.989842] __x64_sys_ioctl+0x6f/0xb0 [ 2475.989855] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2475.989868] do_syscall_64+0xf9/0x620 [ 2475.989886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2475.989897] RIP: 0033:0x7f579755f0f9 [ 2475.989910] Code: Bad RIP value. [ 2475.989917] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2475.989929] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2475.989935] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2475.989943] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2475.989949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2475.989957] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2476.004241] Mem-Info: [ 2476.004274] active_anon:27780 inactive_anon:81953 isolated_anon:0 [ 2476.004274] active_file:15 inactive_file:16 isolated_file:0 [ 2476.004274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2476.004274] slab_reclaimable:13414 slab_unreclaimable:118962 [ 2476.004274] mapped:22321 shmem:96111 pagetables:556 bounce:0 [ 2476.004274] free:13856 free_pcp:1163 free_cma:0 [ 2476.004301] Node 0 active_anon:109936kB inactive_anon:170888kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89284kB dirty:0kB writeback:0kB shmem:226504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2476.004325] Node 1 active_anon:1184kB inactive_anon:156924kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2476.004330] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2476.004360] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2476.004379] Node 0 DMA32 free:17620kB min:35996kB low:44992kB high:53988kB active_anon:109932kB inactive_anon:167272kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2220kB bounce:0kB free_pcp:2636kB local_pcp:1136kB free_cma:0kB [ 2476.004408] lowmem_reserve[]: 0 0 1 1 1 [ 2476.004426] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2476.004454] lowmem_reserve[]: 0 0 0 0 0 [ 2476.004472] Node 1 Normal free:26912kB min:53876kB low:67344kB high:80812kB active_anon:1184kB inactive_anon:156924kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:4kB bounce:0kB free_pcp:2016kB local_pcp:1728kB free_cma:0kB [ 2476.004502] lowmem_reserve[]: 0 0 0 0 0 [ 2476.004519] Node 0 DMA: 1*4kB (M) 4*8kB (UM) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10884kB [ 2476.004591] Node 0 DMA32: 385*4kB (ME) 476*8kB (ME) 273*16kB (ME) 143*32kB (ME) 40*64kB (UME) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 2476.004643] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2476.004688] Node 1 Normal: 400*4kB (ME) 342*8kB (ME) 187*16kB (UME) 54*32kB (ME) 31*64kB (ME) 10*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (UM) = 26912kB [ 2476.013147] Node 1 Normal free:26912kB min:53876kB low:67344kB high:80812kB active_anon:1184kB inactive_anon:156924kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:4kB bounce:0kB free_pcp:2016kB local_pcp:288kB free_cma:0kB [ 2476.013177] lowmem_reserve[]: 0 0 0 0 0 [ 2476.013195] Node 0 DMA: 1*4kB (M) 4*8kB (UM) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10884kB [ 2476.049051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.052598] Node 0 DMA32: 385*4kB (ME) 476*8kB (ME) 273*16kB (ME) 143*32kB (ME) 40*64kB (UME) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 2476.053602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.094698] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2476.099543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.105580] Node 1 Normal: 400*4kB (ME) 342*8kB (ME) 187*16kB (UME) 54*32kB (ME) 31*64kB (ME) 10*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (UM) = 26912kB [ 2476.108229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.116656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.145526] 96142 total pagecache pages [ 2476.153218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.159084] 0 pages in swap cache [ 2476.161928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.161938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.161945] 96142 total pagecache pages [ 2476.161956] 0 pages in swap cache [ 2476.161964] Swap cache stats: add 0, delete 0, find 0/0 [ 2476.161969] Free swap = 0kB [ 2476.161978] Total swap = 0kB [ 2476.161987] 2097051 pages RAM [ 2476.161991] 0 pages HighMem/MovableOnly [ 2476.161999] 369649 pages reserved [ 2476.169371] Swap cache stats: add 0, delete 0, find 0/0 [ 2476.173296] 0 pages cma reserved [ 2476.173961] Free swap = 0kB [ 2476.173969] Total swap = 0kB [ 2476.177926] Unreclaimable slab info: [ 2476.190365] 2097051 pages RAM [ 2476.197858] Name Used Total [ 2476.198752] 0 pages HighMem/MovableOnly [ 2476.202406] pid_2 26KB 40KB [ 2476.208356] batadv_tt_change_cache 2KB 11KB [ 2476.211755] 369649 pages reserved [ 2476.225522] batadv_tl_cache 8KB 16KB [ 2476.227431] 0 pages cma reserved [ 2476.237805] TIPC 19KB 37KB [ 2476.850610] Bluetooth: hci2: command 0x0419 tx timeout [ 2476.855934] Bluetooth: hci4: command 0x0419 tx timeout [ 2476.861318] SCTPv6 28KB 49KB [ 2476.866688] DCCPv6 25KB 52KB [ 2476.875610] Bluetooth: hci5: command 0x0419 tx timeout [ 2476.881032] DCCP 23KB 49KB [ 2476.886433] RXRPC 22KB 45KB [ 2476.895382] rxrpc_call_jar 141KB 165KB [ 2476.900860] bridge_fdb_cache 18KB 27KB [ 2476.906231] fib6_nodes 234KB 308KB [ 2476.915207] ip6_dst_cache 590KB 806KB [ 2476.920629] RAWv6 121KB 135KB [ 2476.927506] UDPv6 39KB 48KB [ 2476.936285] TCPv6 27KB 42KB [ 2476.941742] nf_conntrack 4KB 18KB [ 2476.947166] t10_alua_lu_gp_cache 0KB 3KB [ 2476.961329] sd_ext_cdb 0KB 7KB [ 2476.966710] scsi_sense_cache 1056KB 1060KB [ 2476.972300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2476.979855] virtio_scsi_cmd 16KB 16KB [ 2476.985532] sgpool-128 8KB 8KB [ 2476.990938] sgpool-64 4KB 12KB [ 2476.996294] sgpool-32 2KB 15KB [ 2477.005658] sgpool-16 1KB 7KB [ 2477.027325] sgpool-8 0KB 7KB [ 2477.040463] mqueue_inode_cache 21KB 37KB [ 2477.045928] bio_post_read_ctx 14KB 15KB [ 2477.069515] bio-2 14KB 15KB [ 2477.074888] jfs_mp 7KB 7KB [ 2477.105955] cifs_small_rq 15KB 16KB [ 2477.129501] cifs_request 67KB 67KB [ 2477.134884] cifs_mpx_ids 0KB 7KB [ 2477.159426] nfs_commit_data 3KB 14KB [ 2477.164810] nfs_write_data 34KB 44KB [ 2477.179427] ext4_system_zone 1KB 7KB [ 2477.184825] bio-1 1KB 7KB [ 2477.199518] pid_namespace 4KB 11KB [ 2477.204905] rpc_buffers 17KB 25KB [ 2477.229396] rpc_tasks 2KB 7KB [ 2477.236207] UNIX 1756KB 1807KB [ 2477.249407] tcp_bind_bucket 3KB 8KB [ 2477.254787] ip_fib_trie 39KB 47KB [ 2477.269639] ip_fib_alias 181KB 213KB [ 2477.275016] ip_dst_cache 18KB 24KB [ 2477.289395] RAW 79KB 105KB [ 2477.294772] UDP 55KB 94KB [ 2477.309428] TCP 8KB 11KB [ 2477.314819] hugetlbfs_inode_cache 3KB 15KB [ 2477.334040] fscache_cookie_jar 1KB 7KB [ 2477.339604] eventpoll_pwq 26KB 43KB [ 2477.345057] eventpoll_epi 48KB 63KB [ 2477.369400] inotify_inode_mark 5KB 7KB [ 2477.375009] request_queue 199KB 199KB [ 2477.389438] blkdev_requests 1KB 3KB [ 2477.395011] blkdev_ioc 35KB 42KB [ 2477.419429] bio-0 1256KB 1391KB [ 2477.424823] biovec-max 1551KB 1551KB [ 2477.439427] biovec-64 1477KB 1559KB [ 2477.445020] biovec-16 205KB 206KB [ 2477.450474] bio_integrity_payload 1KB 8KB [ 2477.456204] khugepaged_mm_slot 6KB 19KB [ 2477.479443] uid_cache 0KB 4KB [ 2477.484837] dmaengine-unmap-2 0KB 3KB [ 2477.495597] skbuff_fclone_cache 40KB 52KB [ 2477.501258] skbuff_head_cache 9733KB 10620KB [ 2477.506625] configfs_dir_cache 3KB 7KB [ 2477.517093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2477.526216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2477.534729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2477.545688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2477.553250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2477.561681] file_lock_ctx 9KB 11KB [ 2477.567056] fsnotify_mark_connector 2KB 3KB [ 2477.573786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2477.581589] bridge0: port 1(bridge_slave_0) entered blocking state [ 2477.587950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2477.594815] net_namespace 96KB 131KB [ 2477.600320] shmem_inode_cache 7971KB 7987KB [ 2477.605685] task_delay_info 300KB 442KB [ 2477.611522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2477.619687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2477.622543] taskstats 31KB 45KB [ 2477.627457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2477.644484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2477.649443] proc_dir_entry 1029KB 1181KB [ 2477.657004] pde_opener 17KB 23KB [ 2477.658620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2477.662504] seq_file 300KB 350KB [ 2477.680376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2477.689690] sigqueue 68KB 70KB [ 2477.695056] kernfs_node_cache 20508KB 20691KB [ 2477.697348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2477.707946] mnt_cache 261KB 268KB [ 2477.713422] filp 7477KB 8261KB [ 2477.718785] names_cache 104511KB 104511KB [ 2477.724240] iint_cache 30KB 51KB [ 2477.729636] key_jar 4KB 7KB [ 2477.735000] uts_namespace 5KB 15KB [ 2477.740458] nsproxy 4KB 11KB [ 2477.745840] vm_area_struct 2862KB 3472KB [ 2477.754512] mm_struct 547KB 630KB [ 2477.763067] fs_cache 338KB 388KB [ 2477.768436] files_cache 1248KB 1248KB [ 2477.777137] signal_cache 2333KB 2400KB [ 2477.785689] sighand_cache 730KB 735KB [ 2477.794359] task_struct 10156KB 10238KB [ 2477.803089] cred_jar 2529KB 2944KB [ 2477.808506] anon_vma_chain 916KB 1350KB [ 2477.817258] anon_vma 156KB 231KB [ 2477.825810] pid 179KB 252KB [ 2477.846333] Acpi-Operand 156KB 198KB [ 2477.853373] Acpi-ParseExt 9KB 11KB [ 2477.858749] Acpi-Parse 41KB 47KB [ 2477.892746] Acpi-State 52KB 63KB [ 2477.898134] Acpi-Namespace 20KB 27KB [ 2477.919389] numa_policy 0KB 3KB [ 2477.924770] debug_objects_cache 2916KB 3129KB [ 2477.939403] trace_event_file 297KB 298KB [ 2477.944781] ftrace_event_field 398KB 401KB [ 2477.959842] pool_workqueue 154KB 164KB [ 2477.965222] page->ptl 479KB 1067KB [ 2477.990968] kmalloc-2097152 2050KB 2050KB [ 2477.996366] kmalloc-524288 2056KB 2056KB [ 2478.019417] kmalloc-262144 1290KB 1290KB [ 2478.024866] kmalloc-131072 650KB 650KB [ 2478.030296] kmalloc-65536 3168KB 3234KB [ 2478.049934] kmalloc-32768 2475KB 2673KB [ 2478.055337] kmalloc-16384 1353KB 1435KB [ 2478.074097] kmalloc-8192 5791KB 5832KB [ 2478.099474] kmalloc-4096 31046KB 31084KB [ 2478.104955] kmalloc-2048 17949KB 18538KB [ 2478.116606] kmalloc-1024 13000KB 14812KB [ 2478.135664] kmalloc-512 19260KB 20287KB [ 2478.141173] kmalloc-256 5874KB 6633KB [ 2478.146540] kmalloc-128 1367KB 1838KB [ 2478.189418] kmalloc-96 3889KB 5336KB [ 2478.194820] kmalloc-64 3222KB 5044KB [ 2478.206465] kmalloc-32 2124KB 3146KB [ 2478.211930] kmalloc-192 2421KB 3104KB [ 2478.217315] kmem_cache 177KB 180KB [ 2478.229443] Out of memory (oom_kill_allocating_task): Kill process 29150 (in:imklog) score 0 or sacrifice child [ 2478.248045] Killed process 29148 (rsyslogd) total-vm:254332kB, anon-rss:664kB, file-rss:0kB, shmem-rss:0kB [ 2478.261085] oom_reaper: reaped process 29148 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2478.280001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2478.290536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2478.297912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2478.306763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2478.315572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2478.324822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2478.338766] bridge0: port 2(bridge_slave_1) entered blocking state [ 2478.345183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2478.370003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2478.378102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2478.402343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2478.414695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2478.437130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2478.445760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2478.464244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2478.476391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2478.491524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2478.509070] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2478.515791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2478.532890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2479.066163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2479.076127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2479.102783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2479.114977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2479.144328] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2479.163687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2479.183956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2479.197212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2479.455481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2479.470797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2479.482005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2479.496793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2479.512766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2479.548609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2479.565336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2479.590603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2479.598318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2479.859827] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2479.867758] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2479.884090] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2479.899225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2479.914598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2479.924215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2479.936364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2479.947029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2479.966121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2479.987647] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2480.014354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2480.027550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2480.267179] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2480.279849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2480.290444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2480.608892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2480.629326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2480.647060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2480.656311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2480.673288] device bridge_slave_1 left promiscuous mode [ 2480.678816] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.693601] device bridge_slave_0 left promiscuous mode [ 2480.699085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.716271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2480.726256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2480.738198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2480.748559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2480.764294] device bridge_slave_1 left promiscuous mode [ 2480.772975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.783841] device bridge_slave_0 left promiscuous mode [ 2480.789338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.812037] device veth1_macvtap left promiscuous mode [ 2480.817725] device veth0_macvtap left promiscuous mode [ 2480.827403] device veth1_vlan left promiscuous mode [ 2480.835032] device veth0_vlan left promiscuous mode [ 2480.845150] device veth1_macvtap left promiscuous mode [ 2480.853032] device veth0_macvtap left promiscuous mode [ 2480.858367] device veth1_vlan left promiscuous mode [ 2480.868094] device veth0_vlan left promiscuous mode [ 2490.848361] device hsr_slave_1 left promiscuous mode [ 2490.856512] device hsr_slave_0 left promiscuous mode [ 2490.874726] team0 (unregistering): Port device team_slave_1 removed [ 2490.885829] team0 (unregistering): Port device team_slave_0 removed [ 2490.896068] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2490.906877] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2490.936246] bond0 (unregistering): Released all slaves [ 2490.976265] device hsr_slave_1 left promiscuous mode [ 2490.985519] device hsr_slave_0 left promiscuous mode [ 2491.002439] team0 (unregistering): Port device team_slave_1 removed [ 2491.013519] team0 (unregistering): Port device team_slave_0 removed [ 2491.023536] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2491.034316] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2491.065955] bond0 (unregistering): Released all slaves [ 2491.083350] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2491.093556] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2491.104986] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2491.113795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2491.128136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2491.148582] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2491.168876] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2491.177631] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2491.190184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2491.196610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2491.211438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2491.219766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2491.226467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2491.258172] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2491.269510] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2491.276274] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2491.302749] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2491.313502] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2491.325392] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2491.344607] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2491.354770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2491.370196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2491.379989] device veth0_vlan entered promiscuous mode [ 2491.392240] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2491.405369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2491.412484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2491.419788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2491.427328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2491.437540] device veth1_vlan entered promiscuous mode [ 2491.444527] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2491.453030] device veth0_vlan entered promiscuous mode [ 2491.458956] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2491.467526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2491.475939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2491.489711] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2491.500544] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2491.510580] device veth1_vlan entered promiscuous mode [ 2491.516737] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2491.532039] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2491.539695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2491.547035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2491.560819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2491.581501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2491.602007] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2491.618174] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2491.628702] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2491.646941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2491.668426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2491.684875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2491.697935] device veth0_macvtap entered promiscuous mode [ 2491.709212] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2491.723434] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2491.737814] device veth1_macvtap entered promiscuous mode [ 2491.749108] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2491.762558] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2491.777587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2491.786139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2491.798887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2491.807075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2491.822916] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2491.834783] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2491.844827] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2491.858907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2491.868795] device veth0_macvtap entered promiscuous mode [ 2491.881572] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2491.891513] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2491.908591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2491.918734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2491.931886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2491.943122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2491.954804] device veth1_macvtap entered promiscuous mode [ 2491.965331] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2491.974571] device veth0_vlan entered promiscuous mode [ 2491.986375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2491.996296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2492.007900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2492.018647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.028912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.038579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.048830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.058423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.068652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.080215] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2492.087331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2492.098227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2492.108360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2492.116151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2492.126066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.136005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.145181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.155341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.164494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.174749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.185219] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2492.192196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2492.219257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2492.227388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2492.236884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2492.256497] device veth1_vlan entered promiscuous mode [ 2492.268228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.278544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.287878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.297755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.307110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.317515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.326835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.336637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.346827] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2492.354533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2492.371298] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2492.379064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2492.387765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2492.396340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.406128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.415493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.425484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.434666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.444411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.453795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.463554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.474249] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2492.481223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2492.493491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2492.501481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2492.519561] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2492.533086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2492.546898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2492.558589] device veth0_macvtap entered promiscuous mode [ 2492.566291] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2492.580546] device veth1_macvtap entered promiscuous mode [ 2492.593563] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2492.617279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2492.645427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2492.661077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.677049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.692604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.707199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.724181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.734782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.744769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.754963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.764834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2492.775038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.786093] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2492.794952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2492.804746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2492.814054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2492.827420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2492.842608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2492.859513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.869220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.881023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.891768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.919089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.934818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.944734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.959592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.968686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2492.978443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2492.988890] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2492.995921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2493.013126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2493.021804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2493.185701] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2493.200961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2493.208090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.227968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2493.242153] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2493.248531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2493.261622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.269002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2493.305159] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2493.317929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2493.326304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.363895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2493.384174] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2493.393669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2493.402154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.408940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2493.455068] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2493.461629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2493.468774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.486132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2493.507386] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2493.515318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2493.523617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.531211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:45:41 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x42) ioctl$KVM_NMI(r0, 0xae9a) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:45:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x1b7, 0x83f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:45:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:41 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x80, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000004380)={&(0x7f0000004280), 0xc, &(0x7f0000004340)={0x0}}, 0x41055) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72df2f22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:45:41 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x5, 0x8, 0x720e0c75, 0x4, 0x2, 0x6a, 0x72, 0x7fffffff}, &(0x7f0000000040)={0x2, 0x7, 0x7e8, 0x0, 0x1, 0x6, 0x2, 0x1}, &(0x7f00000000c0)={0x8000000000000000, 0x759, 0x80000000, 0x4, 0x5, 0x8, 0x9, 0x5}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 06:45:41 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}], 0x8, 0x0) 06:45:41 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x42) ioctl$KVM_NMI(r0, 0xae9a) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:45:41 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async, rerun: 64) pselect6(0x40, &(0x7f0000000000)={0x5, 0x8, 0x720e0c75, 0x4, 0x2, 0x6a, 0x72, 0x7fffffff}, &(0x7f0000000040)={0x2, 0x7, 0x7e8, 0x0, 0x1, 0x6, 0x2, 0x1}, &(0x7f00000000c0)={0x8000000000000000, 0x759, 0x80000000, 0x4, 0x5, 0x8, 0x9, 0x5}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) (rerun: 64) 06:45:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:41 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x42) ioctl$KVM_NMI(r0, 0xae9a) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:45:41 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}], 0x8, 0x0) 06:45:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:41 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async) pselect6(0x40, &(0x7f0000000000)={0x5, 0x8, 0x720e0c75, 0x4, 0x2, 0x6a, 0x72, 0x7fffffff}, &(0x7f0000000040)={0x2, 0x7, 0x7e8, 0x0, 0x1, 0x6, 0x2, 0x1}, &(0x7f00000000c0)={0x8000000000000000, 0x759, 0x80000000, 0x4, 0x5, 0x8, 0x9, 0x5}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 2496.149395] Bluetooth: hci3: command 0x0406 tx timeout [ 2498.258357] oom_reaper: reaped process 30692 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2498.289517] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2498.301422] in:imklog cpuset=/ mems_allowed=0-1 [ 2498.306111] CPU: 0 PID: 30494 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2498.313725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2498.323075] Call Trace: [ 2498.325672] dump_stack+0x1fc/0x2ef [ 2498.329301] dump_header+0x15d/0xc3f [ 2498.333017] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2498.338124] ? ___ratelimit+0x319/0x590 [ 2498.342099] oom_kill_process.cold+0x10/0x692 [ 2498.346597] ? check_preemption_disabled+0x41/0x280 [ 2498.351619] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2498.356899] out_of_memory+0x1072/0x1390 [ 2498.360962] ? oom_killer_disable+0x270/0x270 [ 2498.365456] ? mutex_trylock+0x15f/0x1a0 [ 2498.369519] __alloc_pages_nodemask+0x23a2/0x2890 [ 2498.374363] ? find_get_entry+0x4cd/0x8a0 [ 2498.378516] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2498.383372] alloc_pages_current+0x193/0x2a0 [ 2498.387807] filemap_fault+0x146e/0x2180 [ 2498.391855] ext4_filemap_fault+0x84/0xb0 [ 2498.396001] __do_fault+0x10b/0x4b0 [ 2498.399634] __handle_mm_fault+0x273b/0x41c0 [ 2498.404025] ? vm_insert_page+0x9c0/0x9c0 [ 2498.408152] ? lock_downgrade+0x720/0x720 [ 2498.412290] ? check_preemption_disabled+0x41/0x280 [ 2498.417288] handle_mm_fault+0x436/0xb10 [ 2498.421332] __do_page_fault+0x68e/0xd60 [ 2498.425375] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2498.430369] ? spurious_fault+0x840/0x840 [ 2498.434496] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2498.439323] ? page_fault+0x8/0x30 [ 2498.442843] page_fault+0x1e/0x30 [ 2498.446276] RIP: 0033:0x7fcd53aa222d [ 2498.449973] Code: Bad RIP value. [ 2498.453314] RSP: 002b:00007fcd5143e580 EFLAGS: 00010293 [ 2498.458656] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fcd53aa222d [ 2498.465904] RDX: 0000000000001fa0 RSI: 00007fcd5143eda0 RDI: 0000000000000004 [ 2498.473154] RBP: 000056049815f9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2498.480402] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fcd5143eda0 [ 2498.487668] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fcd5143eddd [ 2498.511894] syz-executor.5: vmalloc: allocation failure, allocated 1045614592 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2498.515606] Mem-Info: [ 2498.529000] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2498.531926] active_anon:27910 inactive_anon:81956 isolated_anon:0 [ 2498.531926] active_file:38 inactive_file:28 isolated_file:0 [ 2498.531926] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2498.531926] slab_reclaimable:13250 slab_unreclaimable:115107 [ 2498.531926] mapped:22408 shmem:96116 pagetables:580 bounce:0 [ 2498.531926] free:13819 free_pcp:201 free_cma:0 [ 2498.539046] CPU: 0 PID: 30692 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2498.572502] Node 0 active_anon:110528kB inactive_anon:170900kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89624kB dirty:40kB writeback:0kB shmem:226524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2498.575290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2498.603158] Node 1 active_anon:1112kB inactive_anon:156924kB active_file:36kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:24kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2498.612440] Call Trace: [ 2498.612461] dump_stack+0x1fc/0x2ef [ 2498.612479] warn_alloc.cold+0x7b/0x18f [ 2498.639620] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2498.642182] ? zone_watermark_ok_safe+0x260/0x260 [ 2498.645775] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2498.649745] ? write_comp_data+0x23/0x70 [ 2498.649770] __vmalloc_area_node+0x4fd/0x780 [ 2498.676125] Node 0 DMA32 free:17580kB min:35996kB low:44992kB high:53988kB active_anon:110524kB inactive_anon:167284kB active_file:196kB inactive_file:32kB unevictable:0kB writepending:340kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2316kB bounce:0kB free_pcp:556kB local_pcp:248kB free_cma:0kB [ 2498.680938] ? __vmalloc_node_range+0x180/0x180 [ 2498.680956] ? _raw_spin_unlock+0x29/0x40 [ 2498.685941] lowmem_reserve[]: 0 0 1 1 1 [ 2498.689988] ? __get_vm_area_node+0x2e2/0x3a0 [ 2498.690005] __vmalloc_node_range+0xed/0x180 [ 2498.690021] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2498.694418] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2498.723725] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2498.723738] vmalloc_user+0x70/0xe0 [ 2498.723752] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2498.728391] lowmem_reserve[]: 0 0 0 0 0 [ 2498.732523] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2498.732538] __vb2_queue_alloc+0x472/0xe60 [ 2498.732562] vb2_core_create_bufs+0x273/0x7e0 [ 2498.736499] Node 1 Normal free:26804kB min:53876kB low:67344kB high:80812kB active_anon:1112kB inactive_anon:156924kB active_file:36kB inactive_file:92kB unevictable:0kB writepending:24kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:4kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2498.740994] ? __vb2_queue_free+0x870/0x870 [ 2498.741008] ? __video_do_ioctl+0x632/0xcd0 [ 2498.741026] ? __mutex_lock+0x368/0x1190 [ 2498.745401] lowmem_reserve[]: 0 0 0 0 0 [ 2498.749726] vb2_create_bufs+0x332/0x620 [ 2498.749742] ? mark_held_locks+0xf0/0xf0 [ 2498.749757] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2498.775593] Node 0 DMA: 0*4kB 5*8kB (UM) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10888kB [ 2498.780950] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2498.780964] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2498.780984] v4l_create_bufs+0xb2/0x160 [ 2498.784578] Node 0 DMA32: 627*4kB (UME) 506*8kB (ME) 237*16kB (UME) 146*32kB (ME) 38*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17580kB [ 2498.788892] __video_do_ioctl+0x49a/0xcd0 [ 2498.792855] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2498.796974] ? v4l_querycap+0x340/0x340 [ 2498.801194] Node 1 Normal: 494*4kB (UME) 363*8kB (UME) 175*16kB (ME) 57*32kB (UME) 23*64kB (ME) 16*128kB (M) 5*256kB (M) 1*512kB (U) 2*1024kB (UE) 1*2048kB (U) 2*4096kB (M) = 27104kB [ 2498.805668] ? __might_fault+0x192/0x1d0 [ 2498.834377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.838661] ? v4l_querycap+0x340/0x340 [ 2498.842976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.847002] video_usercopy+0x13f/0xfa0 [ 2498.850971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.854999] ? v4l_enumstd+0x60/0x60 [ 2498.859033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.864113] ? do_futex+0x171/0x1880 [ 2498.864128] ? mark_held_locks+0xf0/0xf0 [ 2498.864145] ? debug_check_no_obj_freed+0x201/0x490 [ 2498.878349] 96194 total pagecache pages [ 2498.883426] ? video_usercopy+0xfa0/0xfa0 [ 2498.883442] v4l2_ioctl+0x147/0x1a0 [ 2498.888693] 0 pages in swap cache [ 2498.892646] ? video_devdata+0xa0/0xa0 [ 2498.892661] do_vfs_ioctl+0xcdb/0x12e0 [ 2498.892676] ? lock_downgrade+0x720/0x720 [ 2498.892694] ? check_preemption_disabled+0x41/0x280 [ 2498.907104] Swap cache stats: add 0, delete 0, find 0/0 [ 2498.911181] ? ioctl_preallocate+0x200/0x200 [ 2498.911198] ? __fget+0x356/0x510 [ 2498.911213] ? do_dup2+0x450/0x450 [ 2498.922315] Free swap = 0kB [ 2498.926267] ? __se_sys_futex+0x298/0x3b0 [ 2498.942848] Total swap = 0kB [ 2498.946883] ksys_ioctl+0x9b/0xc0 [ 2498.955709] 2097051 pages RAM [ 2498.959650] __x64_sys_ioctl+0x6f/0xb0 [ 2498.959663] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2498.959678] do_syscall_64+0xf9/0x620 [ 2498.968233] 0 pages HighMem/MovableOnly [ 2498.972201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2498.972214] RIP: 0033:0x7f579755f0f9 [ 2498.972227] Code: Bad RIP value. [ 2498.981062] 369649 pages reserved [ 2498.984737] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.993306] 0 pages cma reserved [ 2498.996978] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2498.996988] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2499.001048] Unreclaimable slab info: [ 2499.006016] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2499.006026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2499.009995] Name Used Total [ 2499.014099] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2499.037379] Mem-Info: [ 2499.052548] pid_2 26KB 36KB [ 2499.060039] active_anon:27895 inactive_anon:81956 isolated_anon:0 [ 2499.060039] active_file:16 inactive_file:16 isolated_file:0 [ 2499.060039] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2499.060039] slab_reclaimable:13250 slab_unreclaimable:115129 [ 2499.060039] mapped:22383 shmem:96116 pagetables:580 bounce:0 [ 2499.060039] free:13895 free_pcp:201 free_cma:0 [ 2499.067873] batadv_tt_change_cache 7KB 11KB [ 2499.068589] Node 0 active_anon:110464kB inactive_anon:170900kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89532kB dirty:0kB writeback:0kB shmem:226524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2499.078550] batadv_tl_cache 13KB 20KB [ 2499.079340] Node 1 active_anon:1116kB inactive_anon:156924kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2499.090044] TIPC 16KB 37KB [ 2499.096117] Node 0 DMA free:10888kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.096725] SCTPv6 22KB 49KB [ 2499.100423] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2499.100443] Node 0 DMA32 free:17580kB min:35996kB low:44992kB high:53988kB active_anon:110464kB inactive_anon:167284kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2316kB bounce:0kB free_pcp:556kB local_pcp:308kB free_cma:0kB [ 2499.100472] lowmem_reserve[]: 0 0 1 1 1 [ 2499.116052] DCCPv6 17KB 52KB [ 2499.124255] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.133133] DCCP 16KB 49KB [ 2499.138717] lowmem_reserve[]: 0 0 0 0 0 [ 2499.150642] RXRPC 19KB 45KB [ 2499.161399] Node 1 Normal free:27104kB min:53876kB low:67344kB high:80812kB active_anon:1116kB inactive_anon:156924kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:4kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2499.175259] rxrpc_call_jar 128KB 165KB [ 2499.225296] lowmem_reserve[]: 0 0 0 0 0 [ 2499.249659] bridge_fdb_cache 16KB 27KB [ 2499.285760] Node 0 DMA: 0*4kB 5*8kB (UM) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10888kB [ 2499.316659] fib6_nodes 271KB 308KB [ 2499.327538] Node 0 DMA32: 627*4kB (UME) 506*8kB (ME) 237*16kB (UME) 146*32kB (ME) 38*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17580kB [ 2499.358231] ip6_dst_cache 825KB 825KB [ 2499.365362] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2499.396123] RAWv6 121KB 135KB [ 2499.404548] Node 1 Normal: 494*4kB (UME) 363*8kB (UME) 175*16kB (ME) 57*32kB (UME) 23*64kB (ME) 16*128kB (M) 5*256kB (M) 1*512kB (U) 2*1024kB (UE) 1*2048kB (U) 2*4096kB (M) = 27104kB [ 2499.434258] UDPv6 48KB 48KB [ 2499.444663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.464189] TCPv6 33KB 36KB [ 2499.487430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.504657] nf_conntrack 10KB 11KB [ 2499.525231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.540733] t10_alua_lu_gp_cache 0KB 3KB [ 2499.555129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.569016] sd_ext_cdb 0KB 7KB [ 2499.577175] 96148 total pagecache pages [ 2499.583289] 0 pages in swap cache [ 2499.586733] Swap cache stats: add 0, delete 0, find 0/0 [ 2499.593234] scsi_sense_cache 1056KB 1060KB [ 2499.595517] Free swap = 0kB [ 2499.598598] virtio_scsi_cmd 16KB 16KB [ 2499.601794] Total swap = 0kB [ 2499.613745] 2097051 pages RAM [ 2499.616844] 0 pages HighMem/MovableOnly [ 2499.617066] sgpool-128 8KB 8KB [ 2499.620877] 369649 pages reserved [ 2499.620881] 0 pages cma reserved [ 2499.645617] sgpool-64 4KB 12KB [ 2499.652689] sgpool-32 2KB 15KB [ 2499.658412] sgpool-16 1KB 7KB [ 2499.678576] sgpool-8 0KB 7KB [ 2499.687432] mqueue_inode_cache 15KB 30KB [ 2499.707916] bio_post_read_ctx 14KB 15KB [ 2499.718086] bio-2 14KB 15KB [ 2499.738349] jfs_mp 7KB 7KB [ 2499.747180] cifs_small_rq 15KB 16KB [ 2499.767499] cifs_request 67KB 67KB [ 2499.778631] cifs_mpx_ids 0KB 7KB [ 2499.799317] nfs_commit_data 3KB 14KB [ 2499.804700] nfs_write_data 34KB 44KB [ 2499.820781] ext4_system_zone 1KB 7KB [ 2499.826177] bio-1 1KB 7KB [ 2499.832292] pid_namespace 3KB 11KB [ 2499.837668] rpc_buffers 17KB 25KB [ 2499.853259] rpc_tasks 2KB 7KB [ 2499.858629] UNIX 2381KB 2418KB [ 2499.864061] tcp_bind_bucket 1KB 8KB [ 2499.879314] ip_fib_trie 44KB 47KB [ 2499.884906] ip_fib_alias 195KB 213KB [ 2499.898579] ip_dst_cache 23KB 24KB [ 2499.904047] RAW 78KB 105KB [ 2499.918461] UDP 86KB 94KB [ 2499.923890] TCP 14KB 16KB [ 2499.937888] hugetlbfs_inode_cache 3KB 15KB [ 2499.943770] fscache_cookie_jar 1KB 7KB [ 2499.961050] eventpoll_pwq 25KB 43KB [ 2499.968675] eventpoll_epi 36KB 63KB [ 2499.978792] inotify_inode_mark 5KB 7KB [ 2500.001369] request_queue 199KB 199KB [ 2500.006751] blkdev_requests 1KB 3KB [ 2500.016845] blkdev_ioc 21KB 42KB [ 2500.028854] bio-0 850KB 1147KB [ 2500.038928] biovec-max 1476KB 1518KB [ 2500.056465] biovec-64 1091KB 1370KB [ 2500.062305] biovec-16 177KB 206KB [ 2500.087846] bio_integrity_payload 1KB 8KB [ 2500.095981] khugepaged_mm_slot 7KB 19KB [ 2500.113655] uid_cache 0KB 4KB [ 2500.119039] dmaengine-unmap-2 0KB 3KB [ 2500.127005] skbuff_fclone_cache 35KB 45KB [ 2500.135597] skbuff_head_cache 10459KB 10470KB [ 2500.143394] configfs_dir_cache 3KB 7KB [ 2500.148856] file_lock_ctx 9KB 11KB [ 2500.162548] fsnotify_mark_connector 2KB 3KB [ 2500.171526] net_namespace 96KB 113KB [ 2500.177290] shmem_inode_cache 7978KB 7987KB [ 2500.187242] task_delay_info 306KB 442KB [ 2500.193455] taskstats 32KB 42KB [ 2500.204822] proc_dir_entry 1008KB 1181KB [ 2500.212144] pde_opener 19KB 23KB [ 2500.218081] seq_file 279KB 350KB [ 2500.229635] sigqueue 63KB 70KB [ 2500.235030] kernfs_node_cache 18250KB 19081KB [ 2500.240550] mnt_cache 231KB 252KB [ 2500.245913] filp 7523KB 8250KB [ 2500.251424] names_cache 96317KB 96377KB [ 2500.257384] iint_cache 26KB 51KB [ 2500.263271] key_jar 4KB 7KB [ 2500.269466] uts_namespace 4KB 11KB [ 2500.277247] nsproxy 3KB 11KB [ 2500.284828] vm_area_struct 3189KB 3465KB [ 2500.290887] mm_struct 598KB 611KB [ 2500.296800] fs_cache 348KB 388KB [ 2500.302860] files_cache 1294KB 1305KB [ 2500.309519] signal_cache 2404KB 2465KB [ 2500.316079] sighand_cache 661KB 721KB [ 2500.322065] task_struct 9828KB 9916KB [ 2500.327439] cred_jar 2450KB 2944KB [ 2500.332843] anon_vma_chain 922KB 1334KB [ 2500.349292] anon_vma 149KB 231KB [ 2500.354766] pid 203KB 252KB [ 2500.368656] Acpi-Operand 156KB 198KB [ 2500.391693] Acpi-ParseExt 9KB 11KB [ 2500.409279] Acpi-Parse 41KB 47KB [ 2500.414661] Acpi-State 52KB 63KB [ 2500.447026] Acpi-Namespace 20KB 27KB [ 2500.452845] numa_policy 0KB 3KB [ 2500.463900] debug_objects_cache 2908KB 3129KB [ 2500.476599] trace_event_file 297KB 298KB [ 2500.482047] ftrace_event_field 398KB 401KB [ 2500.487495] pool_workqueue 160KB 164KB [ 2500.492951] page->ptl 514KB 1055KB [ 2500.498356] kmalloc-2097152 2050KB 2050KB [ 2500.503901] kmalloc-524288 2056KB 2056KB [ 2500.509356] kmalloc-262144 1290KB 1290KB [ 2500.514722] kmalloc-131072 650KB 650KB [ 2500.523902] kmalloc-65536 2904KB 3102KB [ 2500.529894] kmalloc-32768 2343KB 2574KB [ 2500.535795] kmalloc-16384 1402KB 1501KB [ 2500.541544] kmalloc-8192 5923KB 6039KB [ 2500.546914] kmalloc-4096 30272KB 30311KB [ 2500.552505] kmalloc-2048 19137KB 19622KB [ 2500.557868] kmalloc-1024 14242KB 14805KB [ 2500.563663] kmalloc-512 18645KB 20103KB [ 2500.569024] kmalloc-256 6039KB 6630KB [ 2500.574817] kmalloc-128 1516KB 1838KB [ 2500.589284] kmalloc-96 3791KB 5336KB [ 2500.594657] kmalloc-64 3304KB 5044KB [ 2500.604204] kmalloc-32 2077KB 3146KB [ 2500.617930] kmalloc-192 2486KB 3104KB [ 2500.633935] kmem_cache 177KB 180KB [ 2500.647529] Out of memory (oom_kill_allocating_task): Kill process 30494 (in:imklog) score 0 or sacrifice child [ 2500.659362] Killed process 30492 (rsyslogd) total-vm:254332kB, anon-rss:484kB, file-rss:0kB, shmem-rss:0kB [ 2500.670761] oom_reaper: reaped process 30492 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:45:52 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}, {0x0}], 0x9, 0x0) 06:45:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 06:45:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:52 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x80, 0x7}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000004380)={&(0x7f0000004280), 0xc, &(0x7f0000004340)={0x0}}, 0x41055) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72df2f22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:45:52 executing program 4: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x3, &(0x7f0000000040)) clock_getres(0x6, &(0x7f0000000000)) 06:45:52 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x8, 0x1ffff000) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60) r1 = syz_clone(0x80000000, &(0x7f0000000300)="dd3559045487a10f82fd2a99f761cc13fc14c2607a446280e21db848db863edbd24de97566e785beff2d901d5311fc61ed80f02abf8041fc6333688141a63260747396d14ca43637e848ff4b1df69f176f6dc3199678aa3e6bb2630104561eb068cc950f5d7cb4e865413e4aedc492b4bcbecd85284f75926f5a14cc06b85470083df6b9032db43bb7d79886e4df0823f211addb6d3fb5c8434c40f53c1c601751d181f7f94a68f5cbe9c038497ce9cde58905f337c7b3eb9142b5d329b633d244641e7759e8269f9b3835216bfa94a601", 0xd1, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000400)="b70b1eb86a73113029caa15b983548b1637e0d746281ca399a68a746d43dead34d271e0b0a8d92cc8ffc67234690933b7b1c2057e30a0dbc45b217417242344752c56ce782ab3bb2604f145653addbd8312b6cf527840a15ede82fed08c077c87fc992a7b301c0d2f85e476e1f3ee8158cecdd344588b5ef6a0ab33f2267a40bfdf31596f9265a45907ae520b1c9838561ee060a05da13ca5b7f631817d538dedde5151154979326708e318ef5f3055f85e8c8fa9aa7dac8576fb34f5b506aa48018e247ac6511ee837a00a2b4bb9d5c91293b817234b4afb17254b1d672b0b4146adbcb067f8f2bf5b8ba") set_tid_address(&(0x7f0000000540)) sched_getscheduler(r1) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/net\x00') r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000180)=0x1, 0x4) 06:45:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 06:45:52 executing program 4: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x3, &(0x7f0000000040)) clock_getres(0x6, &(0x7f0000000000)) clock_gettime(0x6, &(0x7f0000000080)) (async) clock_getres(0x3, &(0x7f0000000040)) (async) clock_getres(0x6, &(0x7f0000000000)) (async) 06:45:52 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x80, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000004380)={&(0x7f0000004280), 0xc, &(0x7f0000004340)={0x0}}, 0x41055) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72df2f22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x80, 0x7}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000004380)={&(0x7f0000004280), 0xc, &(0x7f0000004340)={0x0}}, 0x41055) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72df2f22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) 06:45:52 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}], 0x8, 0x0) 06:45:52 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 06:45:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:52 executing program 4: clock_gettime(0x6, &(0x7f0000000080)) clock_getres(0x3, &(0x7f0000000040)) (async) clock_getres(0x3, &(0x7f0000000040)) clock_getres(0x6, &(0x7f0000000000)) 06:45:52 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}], 0x8, 0x0) 06:45:52 executing program 4: clock_gettime(0x2, &(0x7f0000000000)) 06:45:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:45:52 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}], 0x8, 0x0) [ 2508.748746] oom_reaper: reaped process 30749 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 2508.777688] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2508.790073] systemd-journal cpuset=/ mems_allowed=0-1 [ 2508.795286] CPU: 0 PID: 29197 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2508.803252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2508.812604] Call Trace: [ 2508.815204] dump_stack+0x1fc/0x2ef [ 2508.818833] dump_header+0x15d/0xc3f [ 2508.822554] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2508.827662] ? ___ratelimit+0x319/0x590 [ 2508.831641] oom_kill_process.cold+0x10/0x692 [ 2508.836167] ? check_preemption_disabled+0x41/0x280 [ 2508.841189] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2508.846477] out_of_memory+0x1072/0x1390 [ 2508.850544] ? oom_killer_disable+0x270/0x270 [ 2508.855039] ? mutex_trylock+0x15f/0x1a0 [ 2508.859107] __alloc_pages_nodemask+0x23a2/0x2890 [ 2508.863959] ? find_get_entry+0x4cd/0x8a0 [ 2508.868113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2508.872981] alloc_pages_current+0x193/0x2a0 [ 2508.877391] filemap_fault+0x146e/0x2180 [ 2508.881466] ext4_filemap_fault+0x84/0xb0 [ 2508.885615] __do_fault+0x10b/0x4b0 [ 2508.889246] __handle_mm_fault+0x273b/0x41c0 [ 2508.893659] ? vm_insert_page+0x9c0/0x9c0 [ 2508.897823] ? check_preemption_disabled+0x41/0x280 [ 2508.902842] handle_mm_fault+0x436/0xb10 [ 2508.906909] __do_page_fault+0x68e/0xd60 [ 2508.910978] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2508.915997] ? spurious_fault+0x840/0x840 [ 2508.920145] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2508.924995] ? page_fault+0x8/0x30 [ 2508.928534] page_fault+0x1e/0x30 [ 2508.931983] RIP: 0033:0x7f5da49512e3 [ 2508.935692] Code: Bad RIP value. [ 2508.939047] RSP: 002b:00007ffcc9e820d8 EFLAGS: 00010246 [ 2508.944435] RAX: 0000000000000001 RBX: 000056541e5d91e0 RCX: 00007f5da49512e3 [ 2508.951705] RDX: 0000000000000012 RSI: 00007ffcc9e820e0 RDI: 000000000000000b [ 2508.958979] RBP: 00007ffcc9e822c0 R08: 00007ffcc9f43000 R09: 000002819dfd7fdf [ 2508.966239] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc9e820e0 [ 2508.973473] syz-executor.5: vmalloc: allocation failure, allocated 1039327232 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2508.973494] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d1100df1b8 [ 2508.994998] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2508.997575] Mem-Info: [ 2509.001510] CPU: 1 PID: 30749 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2509.002620] active_anon:27815 inactive_anon:81955 isolated_anon:0 [ 2509.002620] active_file:15 inactive_file:15 isolated_file:0 [ 2509.002620] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2509.002620] slab_reclaimable:13345 slab_unreclaimable:116120 [ 2509.002620] mapped:22414 shmem:96115 pagetables:557 bounce:0 [ 2509.002620] free:13846 free_pcp:826 free_cma:0 [ 2509.010473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2509.010479] Call Trace: [ 2509.010501] dump_stack+0x1fc/0x2ef [ 2509.010520] warn_alloc.cold+0x7b/0x18f [ 2509.010557] ? zone_watermark_ok_safe+0x260/0x260 [ 2509.043853] Node 0 active_anon:109900kB inactive_anon:170896kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89656kB dirty:0kB writeback:0kB shmem:226520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2509.053132] ? rcu_nmi_exit+0xb3/0x180 [ 2509.053171] __vmalloc_area_node+0x4fd/0x780 [ 2509.055742] Node 1 active_anon:1360kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2509.059347] ? __vmalloc_node_range+0x180/0x180 [ 2509.059365] ? _raw_spin_unlock+0x29/0x40 [ 2509.063309] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2509.068142] ? __get_vm_area_node+0x2e2/0x3a0 [ 2509.097567] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2509.099777] __vmalloc_node_range+0xed/0x180 [ 2509.099798] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2509.104199] Node 0 DMA32 free:17940kB min:35996kB low:44992kB high:53988kB active_anon:109900kB inactive_anon:167280kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2184kB bounce:0kB free_pcp:1756kB local_pcp:224kB free_cma:0kB [ 2509.131000] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2509.131015] vmalloc_user+0x70/0xe0 [ 2509.131035] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2509.135719] lowmem_reserve[]: 0 0 1 1 1 [ 2509.139882] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2509.139897] __vb2_queue_alloc+0x472/0xe60 [ 2509.139924] vb2_core_create_bufs+0x273/0x7e0 [ 2509.166925] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2509.171393] ? __vb2_queue_free+0x870/0x870 [ 2509.171408] ? __video_do_ioctl+0x632/0xcd0 [ 2509.171429] ? __mutex_lock+0x368/0x1190 [ 2509.176420] lowmem_reserve[]: 0 0 0 0 0 [ 2509.180819] vb2_create_bufs+0x332/0x620 [ 2509.180838] ? mark_held_locks+0xf0/0xf0 [ 2509.180851] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2509.180867] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2509.180881] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2509.180901] v4l_create_bufs+0xb2/0x160 [ 2509.180919] __video_do_ioctl+0x49a/0xcd0 [ 2509.180939] ? v4l_querycap+0x340/0x340 [ 2509.180958] ? __might_fault+0x192/0x1d0 [ 2509.180976] ? v4l_querycap+0x340/0x340 [ 2509.180991] video_usercopy+0x13f/0xfa0 [ 2509.181010] ? v4l_enumstd+0x60/0x60 [ 2509.181024] ? do_futex+0x171/0x1880 [ 2509.181040] ? mark_held_locks+0xf0/0xf0 [ 2509.181057] ? __fget+0x356/0x510 [ 2509.181071] ? __might_fault+0x11f/0x1d0 [ 2509.181094] ? video_usercopy+0xfa0/0xfa0 [ 2509.181107] v4l2_ioctl+0x147/0x1a0 [ 2509.181120] ? video_devdata+0xa0/0xa0 [ 2509.181136] do_vfs_ioctl+0xcdb/0x12e0 [ 2509.181151] ? lock_downgrade+0x720/0x720 [ 2509.181166] ? check_preemption_disabled+0x41/0x280 [ 2509.181181] ? ioctl_preallocate+0x200/0x200 [ 2509.181200] ? __fget+0x356/0x510 [ 2509.181216] ? do_dup2+0x450/0x450 [ 2509.181231] ? __se_sys_futex+0x298/0x3b0 [ 2509.181252] ksys_ioctl+0x9b/0xc0 [ 2509.181268] __x64_sys_ioctl+0x6f/0xb0 [ 2509.181282] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2509.181297] do_syscall_64+0xf9/0x620 [ 2509.181315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2509.181327] RIP: 0033:0x7f579755f0f9 [ 2509.181342] Code: Bad RIP value. [ 2509.181349] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2509.181362] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2509.181370] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2509.181378] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2509.181385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2509.181394] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2509.193511] Mem-Info: [ 2509.219970] Node 1 Normal free:26576kB min:53876kB low:67344kB high:80812kB active_anon:1360kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:44kB bounce:0kB free_pcp:1548kB local_pcp:1300kB free_cma:0kB [ 2509.227444] active_anon:27815 inactive_anon:81955 isolated_anon:0 [ 2509.227444] active_file:15 inactive_file:15 isolated_file:0 [ 2509.227444] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2509.227444] slab_reclaimable:13345 slab_unreclaimable:116120 [ 2509.227444] mapped:22414 shmem:96115 pagetables:557 bounce:0 [ 2509.227444] free:13846 free_pcp:826 free_cma:0 [ 2509.233210] lowmem_reserve[]: 0 0 0 0 0 [ 2509.233798] Node 0 active_anon:109900kB inactive_anon:170896kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89656kB dirty:0kB writeback:0kB shmem:226520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2509.237906] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2509.246700] Node 1 active_anon:1360kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2509.276186] Node 0 DMA32: 439*4kB (UME) 551*8kB (UME) 270*16kB (UME) 121*32kB (ME) 36*64kB (ME) 6*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17940kB [ 2509.282089] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2509.282123] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2509.282144] Node 0 DMA32 free:17940kB min:35996kB low:44992kB high:53988kB active_anon:109900kB inactive_anon:167280kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2184kB bounce:0kB free_pcp:1756kB local_pcp:1532kB free_cma:0kB [ 2509.282177] lowmem_reserve[]: 0 0 1 1 1 [ 2509.282196] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2509.282226] lowmem_reserve[]: 0 0 0 0 0 [ 2509.282246] Node 1 Normal free:26576kB min:53876kB low:67344kB high:80812kB active_anon:1360kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:44kB bounce:0kB free_pcp:1548kB local_pcp:248kB free_cma:0kB [ 2509.282278] lowmem_reserve[]: 0 0 0 0 0 [ 2509.282296] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2509.282374] Node 0 DMA32: 439*4kB (UME) 551*8kB (UME) 270*16kB (UME) 121*32kB (ME) 36*64kB (ME) 6*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17940kB [ 2509.282445] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2509.282497] Node 1 Normal: 404*4kB (ME) 326*8kB (UME) 191*16kB (UME) 39*32kB (ME) 14*64kB (ME) 16*128kB (M) 5*256kB (M) 1*512kB (U) 1*1024kB (E) 0*2048kB 3*4096kB (UM) = 26576kB [ 2509.282584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2509.282594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2509.282605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2509.282613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2509.282619] 96145 total pagecache pages [ 2509.282632] 0 pages in swap cache [ 2509.282640] Swap cache stats: add 0, delete 0, find 0/0 [ 2509.282645] Free swap = 0kB [ 2509.282651] Total swap = 0kB [ 2509.282659] 2097051 pages RAM [ 2509.282670] 0 pages HighMem/MovableOnly [ 2509.282675] 369649 pages reserved [ 2509.282679] 0 pages cma reserved [ 2509.888318] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2509.916010] Node 1 Normal: 501*4kB (ME) 387*8kB (UME) 189*16kB (UME) 37*32kB (UME) 20*64kB (ME) 15*128kB (M) 7*256kB (UM) 1*512kB (U) 1*1024kB (E) 0*2048kB 3*4096kB (UM) = 28124kB [ 2509.947216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2509.973191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2509.996554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2510.016646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2510.025284] 96145 total pagecache pages [ 2510.039848] 0 pages in swap cache [ 2510.043317] Swap cache stats: add 0, delete 0, find 0/0 [ 2510.048673] Free swap = 0kB [ 2510.055190] Total swap = 0kB [ 2510.058218] 2097051 pages RAM [ 2510.068221] 0 pages HighMem/MovableOnly [ 2510.075969] 369649 pages reserved [ 2510.086261] 0 pages cma reserved [ 2510.093229] Unreclaimable slab info: [ 2510.096955] Name Used Total [ 2510.117397] pid_2 27KB 36KB [ 2510.122927] batadv_tt_change_cache 3KB 11KB [ 2510.128730] batadv_tl_cache 8KB 20KB [ 2510.140779] TIPC 15KB 37KB [ 2510.146742] SCTPv6 22KB 49KB [ 2510.156883] DCCPv6 17KB 45KB [ 2510.164154] DCCP 16KB 42KB [ 2510.174041] RXRPC 17KB 45KB [ 2510.180246] rxrpc_call_jar 117KB 157KB [ 2510.185612] bridge_fdb_cache 14KB 27KB [ 2510.194970] fib6_nodes 245KB 308KB [ 2510.201179] ip6_dst_cache 816KB 825KB [ 2510.206920] RAWv6 111KB 135KB [ 2510.213067] UDPv6 37KB 45KB [ 2510.218442] TCPv6 27KB 36KB [ 2510.224422] nf_conntrack 10KB 11KB [ 2510.230702] t10_alua_lu_gp_cache 0KB 3KB [ 2510.236894] sd_ext_cdb 0KB 7KB [ 2510.242869] scsi_sense_cache 1056KB 1060KB [ 2510.248300] virtio_scsi_cmd 16KB 16KB [ 2510.253801] sgpool-128 8KB 8KB [ 2510.259283] sgpool-64 4KB 12KB [ 2510.265173] sgpool-32 2KB 15KB [ 2510.270695] sgpool-16 1KB 7KB [ 2510.276508] sgpool-8 0KB 7KB [ 2510.282447] mqueue_inode_cache 15KB 30KB [ 2510.288438] bio_post_read_ctx 14KB 15KB [ 2510.294505] bio-2 14KB 15KB [ 2510.300261] jfs_mp 7KB 7KB [ 2510.308435] cifs_small_rq 15KB 16KB [ 2510.314498] cifs_request 67KB 67KB [ 2510.322309] cifs_mpx_ids 0KB 7KB [ 2510.329069] nfs_commit_data 3KB 14KB [ 2510.335756] nfs_write_data 34KB 44KB [ 2510.341466] ext4_system_zone 1KB 7KB [ 2510.346852] bio-1 1KB 7KB [ 2510.352583] pid_namespace 3KB 11KB [ 2510.358355] rpc_buffers 17KB 25KB [ 2510.364100] rpc_tasks 2KB 7KB [ 2510.369776] UNIX 2124KB 2265KB [ 2510.375152] tcp_bind_bucket 1KB 8KB [ 2510.380878] ip_fib_trie 35KB 47KB [ 2510.386249] ip_fib_alias 174KB 213KB [ 2510.391966] ip_dst_cache 14KB 24KB [ 2510.397342] RAW 72KB 105KB [ 2510.403039] UDP 69KB 94KB [ 2510.408410] TCP 8KB 11KB [ 2510.414131] hugetlbfs_inode_cache 3KB 15KB [ 2510.420316] fscache_cookie_jar 1KB 7KB [ 2510.425765] eventpoll_pwq 18KB 43KB [ 2510.431492] eventpoll_epi 33KB 63KB [ 2510.436857] inotify_inode_mark 5KB 7KB [ 2510.442734] request_queue 199KB 199KB [ 2510.448101] blkdev_requests 1KB 3KB [ 2510.453937] blkdev_ioc 24KB 42KB [ 2510.459613] bio-0 1022KB 1147KB [ 2510.464975] biovec-max 1641KB 1674KB [ 2510.470801] biovec-64 1134KB 1370KB [ 2510.476165] biovec-16 175KB 202KB [ 2510.481840] bio_integrity_payload 1KB 8KB [ 2510.487551] khugepaged_mm_slot 6KB 19KB [ 2510.493462] uid_cache 0KB 4KB [ 2510.498823] dmaengine-unmap-2 0KB 3KB [ 2510.504492] skbuff_fclone_cache 41KB 45KB [ 2510.510298] skbuff_head_cache 10105KB 10462KB [ 2510.515660] configfs_dir_cache 3KB 7KB [ 2510.521497] file_lock_ctx 9KB 11KB [ 2510.526862] fsnotify_mark_connector 2KB 3KB [ 2510.533072] net_namespace 87KB 105KB [ 2510.538431] shmem_inode_cache 7958KB 7987KB [ 2510.544161] task_delay_info 282KB 442KB [ 2510.550189] taskstats 31KB 42KB [ 2510.555550] proc_dir_entry 946KB 1177KB [ 2510.561223] pde_opener 15KB 23KB [ 2510.566587] seq_file 272KB 350KB [ 2510.572247] sigqueue 64KB 70KB [ 2510.577611] kernfs_node_cache 18230KB 19077KB [ 2510.583270] mnt_cache 225KB 244KB [ 2510.588631] filp 7478KB 8246KB [ 2510.594273] names_cache 101009KB 101048KB [ 2510.599864] iint_cache 28KB 51KB [ 2510.605222] key_jar 4KB 7KB [ 2510.610871] uts_namespace 4KB 11KB [ 2510.616230] nsproxy 3KB 11KB [ 2510.621886] vm_area_struct 3183KB 3465KB [ 2510.627248] mm_struct 580KB 611KB [ 2510.632893] fs_cache 315KB 384KB [ 2510.638254] files_cache 1165KB 1305KB [ 2510.643910] signal_cache 2239KB 2465KB [ 2510.649502] sighand_cache 629KB 700KB [ 2510.654892] task_struct 9803KB 9834KB [ 2510.660527] cred_jar 2370KB 2944KB [ 2510.665889] anon_vma_chain 927KB 1334KB [ 2510.671525] anon_vma 123KB 231KB [ 2510.676885] pid 173KB 252KB [ 2510.682509] Acpi-Operand 156KB 198KB [ 2510.687871] Acpi-ParseExt 9KB 11KB [ 2510.693581] Acpi-Parse 41KB 47KB [ 2510.699168] Acpi-State 52KB 63KB [ 2510.704528] Acpi-Namespace 20KB 27KB [ 2510.711062] numa_policy 0KB 3KB [ 2510.716436] debug_objects_cache 2900KB 3129KB [ 2510.722287] trace_event_file 297KB 298KB [ 2510.727652] ftrace_event_field 398KB 401KB [ 2510.733491] pool_workqueue 143KB 160KB [ 2510.738857] page->ptl 520KB 1055KB [ 2510.744581] kmalloc-2097152 2050KB 2050KB [ 2510.750268] kmalloc-524288 2056KB 2056KB [ 2510.755654] kmalloc-262144 1290KB 1290KB [ 2510.761369] kmalloc-131072 650KB 650KB [ 2510.766735] kmalloc-65536 2904KB 2970KB [ 2510.772385] kmalloc-32768 2211KB 2376KB [ 2510.777745] kmalloc-16384 1303KB 1402KB [ 2510.783377] kmalloc-8192 5593KB 5700KB [ 2510.788738] kmalloc-4096 28968KB 29006KB [ 2510.794473] kmalloc-2048 18062KB 19539KB [ 2510.800076] kmalloc-1024 13588KB 14805KB [ 2510.805437] kmalloc-512 18881KB 20100KB [ 2510.811068] kmalloc-256 5770KB 6630KB [ 2510.816426] kmalloc-128 1453KB 1838KB [ 2510.822071] kmalloc-96 3874KB 5336KB [ 2510.827430] kmalloc-64 3282KB 5044KB [ 2510.833069] kmalloc-32 2070KB 3146KB [ 2510.838430] kmalloc-192 2382KB 3104KB [ 2510.844091] kmem_cache 177KB 180KB [ 2510.849689] Out of memory (oom_kill_allocating_task): Kill process 29197 (systemd-journal) score 0 or sacrifice child [ 2510.860716] Killed process 29197 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:2568kB [ 2510.872598] oom_reaper: reaped process 29197 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2568kB [ 2511.011570] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2511.026668] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2511.055357] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2511.062242] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2511.076959] systemd[1]: Stopped Journal Service. [ 2511.100150] systemd[1]: Starting Journal Service... [ 2511.298504] systemd-journald[30792]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2511.809676] systemd[1]: Started Journal Service. 06:46:02 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x8, 0x1ffff000) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60) r1 = syz_clone(0x80000000, &(0x7f0000000300)="dd3559045487a10f82fd2a99f761cc13fc14c2607a446280e21db848db863edbd24de97566e785beff2d901d5311fc61ed80f02abf8041fc6333688141a63260747396d14ca43637e848ff4b1df69f176f6dc3199678aa3e6bb2630104561eb068cc950f5d7cb4e865413e4aedc492b4bcbecd85284f75926f5a14cc06b85470083df6b9032db43bb7d79886e4df0823f211addb6d3fb5c8434c40f53c1c601751d181f7f94a68f5cbe9c038497ce9cde58905f337c7b3eb9142b5d329b633d244641e7759e8269f9b3835216bfa94a601", 0xd1, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000400)="b70b1eb86a73113029caa15b983548b1637e0d746281ca399a68a746d43dead34d271e0b0a8d92cc8ffc67234690933b7b1c2057e30a0dbc45b217417242344752c56ce782ab3bb2604f145653addbd8312b6cf527840a15ede82fed08c077c87fc992a7b301c0d2f85e476e1f3ee8158cecdd344588b5ef6a0ab33f2267a40bfdf31596f9265a45907ae520b1c9838561ee060a05da13ca5b7f631817d538dedde5151154979326708e318ef5f3055f85e8c8fa9aa7dac8576fb34f5b506aa48018e247ac6511ee837a00a2b4bb9d5c91293b817234b4afb17254b1d672b0b4146adbcb067f8f2bf5b8ba") set_tid_address(&(0x7f0000000540)) (async) sched_getscheduler(r1) (async) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/net\x00') (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) (async) accept4$nfc_llcp(r3, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000180)=0x1, 0x4) 06:46:02 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/86, 0x56}], 0xa, 0x0) 06:46:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5e6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @vbi={0x7a07, 0x5, 0x6c1, 0x30314247, [0x0, 0x80], [0x1000, 0x3], 0x1}}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) 06:46:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x40, 0xb9, 0x3, {0x3, @sliced={0x0, [0x1ff, 0x2b8, 0x6, 0x9, 0x4, 0x20, 0x8000, 0x40f7, 0x1000, 0x7, 0x5, 0x3, 0x1000, 0x4, 0x1, 0x0, 0x7ff, 0x9, 0x101, 0x1c5d, 0x5, 0x800, 0x1f, 0x2, 0x2, 0x6, 0x5, 0x20, 0x21, 0x9, 0x2, 0x9, 0x4, 0x4, 0x3, 0x8001, 0x100, 0x1000, 0x2, 0x5, 0x200, 0x8001, 0x40, 0x6, 0x8, 0x1, 0x3257, 0x40], 0x3}}, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0xd7, 0x20, 0x4, 0x0, 0xc6, 0x3, 0x81, 0x2, 0x5, 0x0, 0x2, 0x27, 0x0, 0x1, 0x400, 0x67, 0x3, 0x1, 0x4, '\x00', 0x4, 0x7a72}) 06:46:02 executing program 4: clock_gettime(0x2, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000000)) (async) 06:46:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:02 executing program 4: clock_gettime(0x2, &(0x7f0000000000)) 06:46:02 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x8, 0x1ffff000) (async) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60) (async) r1 = syz_clone(0x80000000, &(0x7f0000000300)="dd3559045487a10f82fd2a99f761cc13fc14c2607a446280e21db848db863edbd24de97566e785beff2d901d5311fc61ed80f02abf8041fc6333688141a63260747396d14ca43637e848ff4b1df69f176f6dc3199678aa3e6bb2630104561eb068cc950f5d7cb4e865413e4aedc492b4bcbecd85284f75926f5a14cc06b85470083df6b9032db43bb7d79886e4df0823f211addb6d3fb5c8434c40f53c1c601751d181f7f94a68f5cbe9c038497ce9cde58905f337c7b3eb9142b5d329b633d244641e7759e8269f9b3835216bfa94a601", 0xd1, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000400)="b70b1eb86a73113029caa15b983548b1637e0d746281ca399a68a746d43dead34d271e0b0a8d92cc8ffc67234690933b7b1c2057e30a0dbc45b217417242344752c56ce782ab3bb2604f145653addbd8312b6cf527840a15ede82fed08c077c87fc992a7b301c0d2f85e476e1f3ee8158cecdd344588b5ef6a0ab33f2267a40bfdf31596f9265a45907ae520b1c9838561ee060a05da13ca5b7f631817d538dedde5151154979326708e318ef5f3055f85e8c8fa9aa7dac8576fb34f5b506aa48018e247ac6511ee837a00a2b4bb9d5c91293b817234b4afb17254b1d672b0b4146adbcb067f8f2bf5b8ba") set_tid_address(&(0x7f0000000540)) (async) sched_getscheduler(r1) (async) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/net\x00') (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async, rerun: 64) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000180)=0x1, 0x4) (rerun: 64) 06:46:02 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:46:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x40, 0xb9, 0x3, {0x3, @sliced={0x0, [0x1ff, 0x2b8, 0x6, 0x9, 0x4, 0x20, 0x8000, 0x40f7, 0x1000, 0x7, 0x5, 0x3, 0x1000, 0x4, 0x1, 0x0, 0x7ff, 0x9, 0x101, 0x1c5d, 0x5, 0x800, 0x1f, 0x2, 0x2, 0x6, 0x5, 0x20, 0x21, 0x9, 0x2, 0x9, 0x4, 0x4, 0x3, 0x8001, 0x100, 0x1000, 0x2, 0x5, 0x200, 0x8001, 0x40, 0x6, 0x8, 0x1, 0x3257, 0x40], 0x3}}, 0x3}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x40, 0xb9, 0x3, {0x3, @sliced={0x0, [0x1ff, 0x2b8, 0x6, 0x9, 0x4, 0x20, 0x8000, 0x40f7, 0x1000, 0x7, 0x5, 0x3, 0x1000, 0x4, 0x1, 0x0, 0x7ff, 0x9, 0x101, 0x1c5d, 0x5, 0x800, 0x1f, 0x2, 0x2, 0x6, 0x5, 0x20, 0x21, 0x9, 0x2, 0x9, 0x4, 0x4, 0x3, 0x8001, 0x100, 0x1000, 0x2, 0x5, 0x200, 0x8001, 0x40, 0x6, 0x8, 0x1, 0x3257, 0x40], 0x3}}, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0xd7, 0x20, 0x4, 0x0, 0xc6, 0x3, 0x81, 0x2, 0x5, 0x0, 0x2, 0x27, 0x0, 0x1, 0x400, 0x67, 0x3, 0x1, 0x4, '\x00', 0x4, 0x7a72}) 06:46:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5e6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @vbi={0x7a07, 0x5, 0x6c1, 0x30314247, [0x0, 0x80], [0x1000, 0x3], 0x1}}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) 06:46:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:02 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_clone(0x40064100, &(0x7f00000000c0)="2779bde47b7de41749526fa6376628e93fc65e1961e2137b35b86093ba65393577f4d51ccf", 0x25, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b25af526f805570960e93cb06a68222c1c1d57af7d398049236815020715d08f269e208b997d5736f57d9f6b88043ed5eb74dff77f8e51d7af5d24ba599086eabd95a0031b97f400e54aa2928a8742e22d54850825dc6e33a3d3f2e7ea7733168a8bc3fc5d663206307a13c62870341b0cee20799f5f21f8a36835e7dba82aa95a409f82b9263c45ecedabc8a510a00fe17490c3dc96c1619c679e3aa1ca49d359976bb2f2cdc02237a86b26715975c580df9924962c4ab2178be8f179dfae6f57ea209b8d000f1dd28abeb7edc260c63ab06bae31c30bd1f25b214b3b39ec343d67bcc2e71522b7df24b044a836f165c9f1525a2070d1") sched_rr_get_interval(r0, &(0x7f0000000280)) 06:46:02 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:46:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x40, 0xb9, 0x3, {0x3, @sliced={0x0, [0x1ff, 0x2b8, 0x6, 0x9, 0x4, 0x20, 0x8000, 0x40f7, 0x1000, 0x7, 0x5, 0x3, 0x1000, 0x4, 0x1, 0x0, 0x7ff, 0x9, 0x101, 0x1c5d, 0x5, 0x800, 0x1f, 0x2, 0x2, 0x6, 0x5, 0x20, 0x21, 0x9, 0x2, 0x9, 0x4, 0x4, 0x3, 0x8001, 0x100, 0x1000, 0x2, 0x5, 0x200, 0x8001, 0x40, 0x6, 0x8, 0x1, 0x3257, 0x40], 0x3}}, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0xd7, 0x20, 0x4, 0x0, 0xc6, 0x3, 0x81, 0x2, 0x5, 0x0, 0x2, 0x27, 0x0, 0x1, 0x400, 0x67, 0x3, 0x1, 0x4, '\x00', 0x4, 0x7a72}) 06:46:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2514.566580] IPVS: ftp: loaded support on port[0] = 21 06:46:02 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:46:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x7ff, {r1, r2/1000+60000}, {0x4, 0x3, 0xcc, 0x9, 0x2, 0x0, "bf188475"}, 0x20, 0x2, {&(0x7f00000002c0)=[{0x4, 0x2, {&(0x7f00000000c0)}, 0x3b1d}, {0x10002, 0xfffffff7, {&(0x7f0000000100)}, 0x8000}]}, 0x1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) [ 2519.538899] oom_reaper: reaped process 30821 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2519.565744] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2519.581806] in:imklog cpuset=/ mems_allowed=0-1 [ 2519.586504] CPU: 1 PID: 30726 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2519.593948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2519.603306] Call Trace: [ 2519.605894] dump_stack+0x1fc/0x2ef [ 2519.609524] dump_header+0x15d/0xc3f [ 2519.613234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2519.618336] ? ___ratelimit+0x319/0x590 [ 2519.622317] oom_kill_process.cold+0x10/0x692 [ 2519.626816] ? check_preemption_disabled+0x41/0x280 [ 2519.631837] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2519.637109] out_of_memory+0x1072/0x1390 [ 2519.641174] ? oom_killer_disable+0x270/0x270 [ 2519.645668] ? mutex_trylock+0x15f/0x1a0 [ 2519.649730] __alloc_pages_nodemask+0x23a2/0x2890 [ 2519.654590] ? find_get_entry+0x4cd/0x8a0 [ 2519.658742] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2519.663615] alloc_pages_current+0x193/0x2a0 [ 2519.668025] filemap_fault+0x146e/0x2180 [ 2519.672101] ext4_filemap_fault+0x84/0xb0 [ 2519.676229] __do_fault+0x10b/0x4b0 [ 2519.679848] __handle_mm_fault+0x273b/0x41c0 [ 2519.681760] syz-executor.5: vmalloc: allocation failure, allocated 1026195456 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2519.684258] ? vm_insert_page+0x9c0/0x9c0 [ 2519.698512] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2519.702612] ? lock_downgrade+0x720/0x720 [ 2519.711839] ? check_preemption_disabled+0x41/0x280 [ 2519.716850] handle_mm_fault+0x436/0xb10 [ 2519.720908] __do_page_fault+0x68e/0xd60 [ 2519.724966] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2519.729979] ? spurious_fault+0x840/0x840 [ 2519.734120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2519.738963] ? page_fault+0x8/0x30 [ 2519.742501] page_fault+0x1e/0x30 [ 2519.745943] RIP: 0033:0x7fa44507c22d [ 2519.749645] Code: Bad RIP value. [ 2519.752994] RSP: 002b:00007fa442a18580 EFLAGS: 00010293 [ 2519.758342] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fa44507c22d [ 2519.765601] RDX: 0000000000001fa0 RSI: 00007fa442a18da0 RDI: 0000000000000004 [ 2519.772867] RBP: 0000560daee379d0 R08: 0000000000000000 R09: 0000000004000001 [ 2519.780127] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fa442a18da0 [ 2519.787388] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fa442a18ddc [ 2519.794662] CPU: 0 PID: 30821 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2519.798061] Mem-Info: [ 2519.802579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2519.802584] Call Trace: [ 2519.802604] dump_stack+0x1fc/0x2ef [ 2519.802621] warn_alloc.cold+0x7b/0x18f [ 2519.805032] active_anon:27862 inactive_anon:83987 isolated_anon:0 [ 2519.805032] active_file:31 inactive_file:22 isolated_file:0 [ 2519.805032] unevictable:0 dirty:0 writeback:21 unstable:0 [ 2519.805032] slab_reclaimable:13487 slab_unreclaimable:116734 [ 2519.805032] mapped:22136 shmem:98163 pagetables:558 bounce:0 [ 2519.805032] free:13839 free_pcp:1222 free_cma:0 [ 2519.814354] ? zone_watermark_ok_safe+0x260/0x260 [ 2519.814389] __vmalloc_area_node+0x4fd/0x780 [ 2519.816959] Node 0 active_anon:110228kB inactive_anon:179024kB active_file:72kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88456kB dirty:0kB writeback:64kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2519.820564] ? __vmalloc_node_range+0x180/0x180 [ 2519.820577] ? _raw_spin_unlock+0x29/0x40 [ 2519.820592] ? __get_vm_area_node+0x2e2/0x3a0 [ 2519.824574] Node 1 active_anon:1220kB inactive_anon:156924kB active_file:52kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:20kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2519.858391] __vmalloc_node_range+0xed/0x180 [ 2519.858407] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2519.858422] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2519.863262] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2519.867634] vmalloc_user+0x70/0xe0 [ 2519.895474] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2519.900109] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2519.900122] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2519.900136] __vb2_queue_alloc+0x472/0xe60 [ 2519.904431] Node 0 DMA32 free:17936kB min:35996kB low:44992kB high:53988kB active_anon:110228kB inactive_anon:175408kB active_file:16kB inactive_file:68kB unevictable:0kB writepending:164kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2192kB bounce:0kB free_pcp:3132kB local_pcp:1508kB free_cma:0kB [ 2519.908923] vb2_core_create_bufs+0x273/0x7e0 [ 2519.908939] ? __vb2_queue_free+0x870/0x870 [ 2519.936078] lowmem_reserve[]: 0 0 1 1 1 [ 2519.940459] ? __video_do_ioctl+0x632/0xcd0 [ 2519.940476] ? pi_state_update_owner+0x450/0x450 [ 2519.940492] ? __mutex_lock+0x368/0x1190 [ 2519.944783] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2519.950133] vb2_create_bufs+0x332/0x620 [ 2519.950148] ? mark_held_locks+0xf0/0xf0 [ 2519.950163] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2519.989158] lowmem_reserve[]: 0 0 0 0 0 [ 2519.989469] ? futex_wait_queue_me+0x404/0x5e0 [ 2519.993582] Node 1 Normal free:26528kB min:53876kB low:67344kB high:80812kB active_anon:1220kB inactive_anon:156924kB active_file:32kB inactive_file:4kB unevictable:0kB writepending:120kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:40kB bounce:0kB free_pcp:1756kB local_pcp:128kB free_cma:0kB [ 2519.997825] ? pi_state_update_owner+0x450/0x450 [ 2520.027346] lowmem_reserve[]: 0 0 0 0 0 [ 2520.031798] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2520.031819] v4l_create_bufs+0xb2/0x160 [ 2520.031837] __video_do_ioctl+0x49a/0xcd0 [ 2520.036132] Node 0 DMA: 1*4kB (U) 4*8kB (M) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10884kB [ 2520.040098] ? v4l_querycap+0x340/0x340 [ 2520.040115] ? __might_fault+0x192/0x1d0 [ 2520.040132] ? v4l_querycap+0x340/0x340 [ 2520.044426] Node 0 DMA32: 390*4kB (ME) 558*8kB (UME) 281*16kB (UME) 95*32kB (ME) 21*64kB (UME) 16*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2520.049172] video_usercopy+0x13f/0xfa0 [ 2520.049192] ? v4l_enumstd+0x60/0x60 [ 2520.049208] ? do_futex+0x171/0x1880 [ 2520.053242] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2520.079081] ? mark_held_locks+0xf0/0xf0 [ 2520.079095] ? __fget+0x356/0x510 [ 2520.079120] ? video_usercopy+0xfa0/0xfa0 [ 2520.083153] Node 1 Normal: 340*4kB (ME) 268*8kB (ME) 183*16kB (ME) 42*32kB (ME) 21*64kB (ME) 16*128kB (UM) 6*256kB (M) 1*512kB (U) 1*1024kB (E) 0*2048kB 3*4096kB (UM) = 26528kB [ 2520.087196] v4l2_ioctl+0x147/0x1a0 [ 2520.087211] ? video_devdata+0xa0/0xa0 [ 2520.092310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2520.096243] do_vfs_ioctl+0xcdb/0x12e0 [ 2520.100837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2520.129696] ? lock_downgrade+0x720/0x720 [ 2520.129711] ? check_preemption_disabled+0x41/0x280 [ 2520.129726] ? ioctl_preallocate+0x200/0x200 [ 2520.134458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2520.138415] ? __fget+0x356/0x510 [ 2520.143608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2520.147544] ? do_dup2+0x450/0x450 [ 2520.151678] 98223 total pagecache pages [ 2520.166131] ? __se_sys_futex+0x298/0x3b0 [ 2520.166154] ksys_ioctl+0x9b/0xc0 [ 2520.170121] 0 pages in swap cache [ 2520.174148] __x64_sys_ioctl+0x6f/0xb0 [ 2520.178108] Swap cache stats: add 0, delete 0, find 0/0 [ 2520.193095] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2520.193109] do_syscall_64+0xf9/0x620 [ 2520.193127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2520.197085] Free swap = 0kB [ 2520.200778] RIP: 0033:0x7f579755f0f9 [ 2520.200796] Code: Bad RIP value. [ 2520.204486] Total swap = 0kB [ 2520.215469] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.215482] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2520.215489] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2520.215496] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2520.215502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2520.215513] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2520.219578] 2097051 pages RAM [ 2520.243031] Mem-Info: [ 2520.243062] active_anon:27862 inactive_anon:83987 isolated_anon:0 [ 2520.243062] active_file:12 inactive_file:13 isolated_file:0 [ 2520.243062] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2520.243062] slab_reclaimable:13487 slab_unreclaimable:116734 [ 2520.243062] mapped:22110 shmem:98163 pagetables:558 bounce:0 [ 2520.243062] free:13889 free_pcp:1163 free_cma:0 [ 2520.270089] 0 pages HighMem/MovableOnly [ 2520.276630] Node 0 active_anon:110228kB inactive_anon:179024kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88440kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2520.287658] 369649 pages reserved [ 2520.298466] Node 1 active_anon:1220kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2520.317390] 0 pages cma reserved [ 2520.322813] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2520.327296] Unreclaimable slab info: [ 2520.330641] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2520.330663] Node 0 DMA32 free:18136kB min:35996kB low:44992kB high:53988kB active_anon:110228kB inactive_anon:175408kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2192kB bounce:0kB free_pcp:2896kB local_pcp:1388kB free_cma:0kB [ 2520.330692] lowmem_reserve[]: 0 0 1 1 1 [ 2520.344018] Name Used Total [ 2520.349593] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2520.354931] pid_2 29KB 36KB [ 2520.358339] lowmem_reserve[]: 0 0 0 0 0 [ 2520.367987] batadv_tt_change_cache 3KB 11KB [ 2520.380252] Node 1 Normal free:26528kB min:53876kB low:67344kB high:80812kB active_anon:1220kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:40kB bounce:0kB free_pcp:1756kB local_pcp:1628kB free_cma:0kB [ 2520.393541] batadv_tl_cache 7KB 20KB [ 2520.402380] lowmem_reserve[]: 0 0 0 0 0 [ 2520.415383] TIPC 18KB 37KB [ 2520.455253] Node 0 DMA: 1*4kB (U) 4*8kB (M) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10884kB [ 2520.483242] SCTPv6 24KB 49KB [ 2520.494119] Node 0 DMA32: 401*4kB (ME) 566*8kB (UME) 281*16kB (UME) 98*32kB (UME) 22*64kB (UME) 16*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18244kB [ 2520.513515] DCCPv6 20KB 45KB [ 2520.524452] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2520.543331] DCCP 19KB 42KB [ 2520.556308] Node 1 Normal: 340*4kB (ME) 268*8kB (ME) 183*16kB (ME) 42*32kB (ME) 21*64kB (ME) 16*128kB (UM) 6*256kB (M) 1*512kB (U) 1*1024kB (E) 0*2048kB 3*4096kB (UM) = 26528kB [ 2520.586070] RXRPC 21KB 45KB [ 2520.594218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2520.621528] rxrpc_call_jar 128KB 157KB [ 2520.629758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2520.666066] bridge_fdb_cache 14KB 27KB [ 2520.672475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2520.678236] fib6_nodes 236KB 308KB [ 2520.696553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2520.720170] ip6_dst_cache 778KB 825KB [ 2520.729281] 98188 total pagecache pages [ 2520.737792] RAWv6 111KB 128KB [ 2520.756954] 0 pages in swap cache [ 2520.768941] UDPv6 39KB 45KB [ 2520.783383] Swap cache stats: add 0, delete 0, find 0/0 [ 2520.798453] TCPv6 27KB 42KB [ 2520.809416] Free swap = 0kB [ 2520.809422] Total swap = 0kB [ 2520.809431] 2097051 pages RAM [ 2520.809436] 0 pages HighMem/MovableOnly [ 2520.809441] 369649 pages reserved [ 2520.809445] 0 pages cma reserved [ 2520.865060] nf_conntrack 10KB 11KB [ 2520.870529] t10_alua_lu_gp_cache 0KB 3KB [ 2520.876154] sd_ext_cdb 0KB 7KB [ 2520.888360] scsi_sense_cache 1056KB 1060KB [ 2520.893770] virtio_scsi_cmd 16KB 16KB [ 2520.905929] sgpool-128 8KB 8KB [ 2520.911330] sgpool-64 4KB 12KB [ 2520.916687] sgpool-32 2KB 15KB [ 2520.929014] sgpool-16 1KB 7KB [ 2520.934381] sgpool-8 0KB 7KB [ 2520.939800] mqueue_inode_cache 15KB 30KB [ 2520.945252] bio_post_read_ctx 14KB 15KB [ 2520.959307] bio-2 14KB 15KB [ 2520.964675] jfs_mp 7KB 7KB [ 2520.976914] cifs_small_rq 15KB 16KB [ 2520.982369] cifs_request 67KB 67KB [ 2520.987726] cifs_mpx_ids 0KB 7KB [ 2521.000497] nfs_commit_data 3KB 14KB [ 2521.005867] nfs_write_data 34KB 44KB [ 2521.011329] ext4_system_zone 1KB 7KB [ 2521.016709] bio-1 1KB 7KB [ 2521.028935] pid_namespace 3KB 11KB [ 2521.034318] rpc_buffers 17KB 25KB [ 2521.039817] rpc_tasks 2KB 7KB [ 2521.045174] UNIX 1921KB 2073KB [ 2521.057818] tcp_bind_bucket 2KB 8KB [ 2521.063278] ip_fib_trie 34KB 47KB [ 2521.075361] ip_fib_alias 167KB 213KB [ 2521.080817] ip_dst_cache 12KB 24KB [ 2521.086175] RAW 73KB 105KB [ 2521.098015] UDP 67KB 94KB [ 2521.103485] TCP 8KB 16KB [ 2521.115353] hugetlbfs_inode_cache 3KB 15KB [ 2521.121150] fscache_cookie_jar 1KB 7KB [ 2521.126594] eventpoll_pwq 19KB 43KB [ 2521.138385] eventpoll_epi 35KB 63KB [ 2521.143791] inotify_inode_mark 5KB 7KB [ 2521.155784] request_queue 199KB 199KB [ 2521.161199] blkdev_requests 1KB 3KB [ 2521.166558] blkdev_ioc 27KB 42KB [ 2521.178402] bio-0 1137KB 1155KB [ 2521.183830] biovec-max 2004KB 2021KB [ 2521.195787] biovec-64 1163KB 1370KB [ 2521.204324] biovec-16 166KB 202KB [ 2521.217662] bio_integrity_payload 1KB 8KB [ 2521.226543] khugepaged_mm_slot 7KB 19KB [ 2521.240476] uid_cache 0KB 4KB [ 2521.245854] dmaengine-unmap-2 0KB 3KB [ 2521.256021] skbuff_fclone_cache 38KB 45KB [ 2521.282148] skbuff_head_cache 10248KB 10462KB [ 2521.287538] configfs_dir_cache 3KB 7KB [ 2521.293208] file_lock_ctx 9KB 11KB [ 2521.302234] fsnotify_mark_connector 2KB 3KB [ 2521.308123] net_namespace 87KB 105KB [ 2521.313587] shmem_inode_cache 7958KB 7987KB [ 2521.322373] task_delay_info 257KB 442KB [ 2521.327744] taskstats 35KB 42KB [ 2521.333185] proc_dir_entry 938KB 1170KB [ 2521.342117] pde_opener 13KB 23KB [ 2521.347494] seq_file 281KB 350KB [ 2521.353017] sigqueue 43KB 70KB [ 2521.360318] kernfs_node_cache 18336KB 19073KB [ 2521.368248] mnt_cache 241KB 244KB [ 2521.374595] filp 7535KB 8246KB [ 2521.380121] names_cache 105047KB 105085KB [ 2521.386122] iint_cache 31KB 51KB [ 2521.396619] key_jar 4KB 7KB [ 2521.402084] uts_namespace 4KB 11KB [ 2521.408105] nsproxy 3KB 11KB [ 2521.418924] vm_area_struct 3239KB 3410KB [ 2521.424776] mm_struct 568KB 611KB [ 2521.436240] fs_cache 275KB 384KB [ 2521.442294] files_cache 1036KB 1293KB [ 2521.448277] signal_cache 2047KB 2436KB [ 2521.459061] sighand_cache 642KB 700KB [ 2521.464437] task_struct 8629KB 8704KB [ 2521.475490] cred_jar 2391KB 2944KB [ 2521.482501] anon_vma_chain 951KB 1334KB [ 2521.487958] anon_vma 131KB 231KB [ 2521.497980] pid 150KB 248KB [ 2521.504384] Acpi-Operand 156KB 198KB [ 2521.514078] Acpi-ParseExt 9KB 11KB [ 2521.521116] Acpi-Parse 41KB 47KB [ 2521.527143] Acpi-State 52KB 63KB [ 2521.536724] Acpi-Namespace 20KB 27KB [ 2521.543033] numa_policy 0KB 3KB [ 2521.552506] debug_objects_cache 2889KB 3129KB [ 2521.559972] trace_event_file 297KB 298KB [ 2521.565743] ftrace_event_field 398KB 401KB [ 2521.580264] pool_workqueue 145KB 160KB [ 2521.586157] page->ptl 532KB 1051KB [ 2521.596529] kmalloc-2097152 2050KB 2050KB [ 2521.602917] kmalloc-524288 2056KB 2056KB [ 2521.608283] kmalloc-262144 1290KB 1290KB [ 2521.620508] kmalloc-131072 650KB 650KB [ 2521.640041] kmalloc-65536 2640KB 2838KB [ 2521.645524] kmalloc-32768 2211KB 2376KB [ 2521.673826] kmalloc-16384 1353KB 1435KB [ 2521.691581] kmalloc-8192 5486KB 5577KB [ 2521.696959] kmalloc-4096 26885KB 26923KB [ 2521.720227] kmalloc-2048 17395KB 19456KB [ 2521.725721] kmalloc-1024 13434KB 14805KB [ 2521.748480] kmalloc-512 19353KB 20100KB [ 2521.753871] kmalloc-256 5659KB 6626KB [ 2521.768474] kmalloc-128 1408KB 1838KB [ 2521.773851] kmalloc-96 3964KB 5336KB [ 2521.788524] kmalloc-64 3210KB 5044KB [ 2521.793902] kmalloc-32 2065KB 3146KB [ 2521.808486] kmalloc-192 2301KB 3096KB [ 2521.813860] kmem_cache 177KB 180KB [ 2521.828644] Out of memory (oom_kill_allocating_task): Kill process 30726 (in:imklog) score 0 or sacrifice child [ 2521.844239] Killed process 30724 (rsyslogd) total-vm:254332kB, anon-rss:752kB, file-rss:0kB, shmem-rss:0kB [ 2521.861862] oom_reaper: reaped process 30724 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}], 0x9, 0x0) 06:46:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/16, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xffff, 0x3f, 0x1, {0x1, @win={{0xef, 0x3, 0x2, 0x9}, 0x7, 0x6, &(0x7f00000001c0)={{0x9, 0x0, 0xffffffe1, 0x2}, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x6}, &(0x7f0000000000)={{0x1, 0x3, 0x80000000, 0x7}}}}, 0xffffffff, &(0x7f0000000200)="7c30c41ef9ed9d423fb7c53a580b78e1d4db49f04a49d7446f149e333ef43147622d36d0ecc83d282cf5486be8b645a017a6aacd193bae732dcef5b098c7ba98f33c05c49cb626d1aa461c08a9bc517e06d5ddfc28ea42c4ca2fb892af2f2a8814226c8bfa3469a26ba4bc566d3ad8769d162fd3844ba284a8a09db12941b6ee38ff31ded417bf2ba5a9038553818f574f655b659ad78dc0bab9fc5bd2563f86c3634537a792781266eae306e6b1645923b7162bfd520dcfb006e6", 0xfe}}, 0x4000}) 06:46:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x7ff, {r1, r2/1000+60000}, {0x4, 0x3, 0xcc, 0x9, 0x2, 0x0, "bf188475"}, 0x20, 0x2, {&(0x7f00000002c0)=[{0x4, 0x2, {&(0x7f00000000c0)}, 0x3b1d}, {0x10002, 0xfffffff7, {&(0x7f0000000100)}, 0x8000}]}, 0x1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) 06:46:13 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_clone(0x40064100, &(0x7f00000000c0)="2779bde47b7de41749526fa6376628e93fc65e1961e2137b35b86093ba65393577f4d51ccf", 0x25, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b25af526f805570960e93cb06a68222c1c1d57af7d398049236815020715d08f269e208b997d5736f57d9f6b88043ed5eb74dff77f8e51d7af5d24ba599086eabd95a0031b97f400e54aa2928a8742e22d54850825dc6e33a3d3f2e7ea7733168a8bc3fc5d663206307a13c62870341b0cee20799f5f21f8a36835e7dba82aa95a409f82b9263c45ecedabc8a510a00fe17490c3dc96c1619c679e3aa1ca49d359976bb2f2cdc02237a86b26715975c580df9924962c4ab2178be8f179dfae6f57ea209b8d000f1dd28abeb7edc260c63ab06bae31c30bd1f25b214b3b39ec343d67bcc2e71522b7df24b044a836f165c9f1525a2070d1") sched_rr_get_interval(r0, &(0x7f0000000280)) clock_gettime(0x4, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) syz_clone(0x40064100, &(0x7f00000000c0)="2779bde47b7de41749526fa6376628e93fc65e1961e2137b35b86093ba65393577f4d51ccf", 0x25, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b25af526f805570960e93cb06a68222c1c1d57af7d398049236815020715d08f269e208b997d5736f57d9f6b88043ed5eb74dff77f8e51d7af5d24ba599086eabd95a0031b97f400e54aa2928a8742e22d54850825dc6e33a3d3f2e7ea7733168a8bc3fc5d663206307a13c62870341b0cee20799f5f21f8a36835e7dba82aa95a409f82b9263c45ecedabc8a510a00fe17490c3dc96c1619c679e3aa1ca49d359976bb2f2cdc02237a86b26715975c580df9924962c4ab2178be8f179dfae6f57ea209b8d000f1dd28abeb7edc260c63ab06bae31c30bd1f25b214b3b39ec343d67bcc2e71522b7df24b044a836f165c9f1525a2070d1") (async) sched_rr_get_interval(r0, &(0x7f0000000280)) (async) 06:46:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5e6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @vbi={0x7a07, 0x5, 0x6c1, 0x30314247, [0x0, 0x80], [0x1000, 0x3], 0x1}}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) 06:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}], 0x8, 0x0) 06:46:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/16, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xffff, 0x3f, 0x1, {0x1, @win={{0xef, 0x3, 0x2, 0x9}, 0x7, 0x6, &(0x7f00000001c0)={{0x9, 0x0, 0xffffffe1, 0x2}, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x6}, &(0x7f0000000000)={{0x1, 0x3, 0x80000000, 0x7}}}}, 0xffffffff, &(0x7f0000000200)="7c30c41ef9ed9d423fb7c53a580b78e1d4db49f04a49d7446f149e333ef43147622d36d0ecc83d282cf5486be8b645a017a6aacd193bae732dcef5b098c7ba98f33c05c49cb626d1aa461c08a9bc517e06d5ddfc28ea42c4ca2fb892af2f2a8814226c8bfa3469a26ba4bc566d3ad8769d162fd3844ba284a8a09db12941b6ee38ff31ded417bf2ba5a9038553818f574f655b659ad78dc0bab9fc5bd2563f86c3634537a792781266eae306e6b1645923b7162bfd520dcfb006e6", 0xfe}}, 0x4000}) 06:46:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1d, 0x2, 0x2}) 06:46:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x7ff, {r1, r2/1000+60000}, {0x4, 0x3, 0xcc, 0x9, 0x2, 0x0, "bf188475"}, 0x20, 0x2, {&(0x7f00000002c0)=[{0x4, 0x2, {&(0x7f00000000c0)}, 0x3b1d}, {0x10002, 0xfffffff7, {&(0x7f0000000100)}, 0x8000}]}, 0x1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x7ff, {r1, r2/1000+60000}, {0x4, 0x3, 0xcc, 0x9, 0x2, 0x0, "bf188475"}, 0x20, 0x2, {&(0x7f00000002c0)=[{0x4, 0x2, {&(0x7f00000000c0)}, 0x3b1d}, {0x10002, 0xfffffff7, {&(0x7f0000000100)}, 0x8000}]}, 0x1}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) (async) 06:46:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}], 0x8, 0x0) 06:46:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/16, 0x10) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xffff, 0x3f, 0x1, {0x1, @win={{0xef, 0x3, 0x2, 0x9}, 0x7, 0x6, &(0x7f00000001c0)={{0x9, 0x0, 0xffffffe1, 0x2}, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x6}, &(0x7f0000000000)={{0x1, 0x3, 0x80000000, 0x7}}}}, 0xffffffff, &(0x7f0000000200)="7c30c41ef9ed9d423fb7c53a580b78e1d4db49f04a49d7446f149e333ef43147622d36d0ecc83d282cf5486be8b645a017a6aacd193bae732dcef5b098c7ba98f33c05c49cb626d1aa461c08a9bc517e06d5ddfc28ea42c4ca2fb892af2f2a8814226c8bfa3469a26ba4bc566d3ad8769d162fd3844ba284a8a09db12941b6ee38ff31ded417bf2ba5a9038553818f574f655b659ad78dc0bab9fc5bd2563f86c3634537a792781266eae306e6b1645923b7162bfd520dcfb006e6", 0xfe}}, 0x4000}) 06:46:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1d, 0x2, 0x2}) [ 2525.270103] IPVS: ftp: loaded support on port[0] = 21 06:46:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) [ 2525.376331] IPVS: ftp: loaded support on port[0] = 21 06:46:13 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) r0 = syz_clone(0x40064100, &(0x7f00000000c0)="2779bde47b7de41749526fa6376628e93fc65e1961e2137b35b86093ba65393577f4d51ccf", 0x25, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b25af526f805570960e93cb06a68222c1c1d57af7d398049236815020715d08f269e208b997d5736f57d9f6b88043ed5eb74dff77f8e51d7af5d24ba599086eabd95a0031b97f400e54aa2928a8742e22d54850825dc6e33a3d3f2e7ea7733168a8bc3fc5d663206307a13c62870341b0cee20799f5f21f8a36835e7dba82aa95a409f82b9263c45ecedabc8a510a00fe17490c3dc96c1619c679e3aa1ca49d359976bb2f2cdc02237a86b26715975c580df9924962c4ab2178be8f179dfae6f57ea209b8d000f1dd28abeb7edc260c63ab06bae31c30bd1f25b214b3b39ec343d67bcc2e71522b7df24b044a836f165c9f1525a2070d1") sched_rr_get_interval(r0, &(0x7f0000000280)) 06:46:13 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001300)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000000)={0xffffffffffffff75, 0x8, 0x100000001}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x6, [0x2, 0x5, 0x9, 0x6f, 0x8, 0x9]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:46:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:13 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1d, 0x2, 0x2}) 06:46:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}], 0x8, 0x0) 06:46:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/199, 0xc7}, {0x0}], 0x9, 0x0) 06:46:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x1000, 0x9f, {0x77359400}, {0x2, 0x2, 0xa0, 0x3f, 0x6, 0xde, "addb02fc"}, 0x7, 0x3, {&(0x7f00000000c0)=[{0x4, 0x6, {0x20}, 0x9}, {0x8, 0x1000, {0xffffffff}, 0x7}]}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x3, @sdr={0x34324d59, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) [ 2525.577725] IPVS: ftp: loaded support on port[0] = 21 06:46:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x220203) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000240)="e4604259ccc212f384743d952ac6575c57d17bb7a0bd9104b306c45bedffbd0c6ecbd3dbe4d754ca2a8b6c19fb20405239a25532216b719c2d0afd4e0397b854f008b8c0350cd23a6d7d4d96f9238600de12d65e30e07b5e03bae0c35e6d2af0844b", &(0x7f00000002c0)=""/205}, 0x20) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf7, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x84000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="9b9ac21d022b42dacc5a94d723e02e96fc98850a322201ede73898f02c50d3fc190192e1e5", &(0x7f0000000400)=@udp=r4, 0x1}, 0x20) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x0, {}, {0x1, 0x8, 0x20, 0x0, 0xff, 0x1, "9c9825c2"}, 0x8, 0x1, {&(0x7f0000000080)=[{0x7, 0xf, {0x2}, 0x800}, {0x7, 0x0, {0x1}, 0x1d}]}, 0xfffffffa, 0x0, r3}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000004c0)={0x4, 0x0, [{}, {}, {}, {}]}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000700), 0x4000) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x7, 0x0, r6, 0x8441, '\x00', r8, r1, 0x2, 0x4, 0x40000002, 0x3}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x4, 0x10000, 0x200, r1, 0x5, '\x00', 0x0, r3, 0x3, 0x2, 0x4, 0x2}, 0x48) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00', r7}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e40)={&(0x7f0000000a40)="72f80175c12a0c93d5e791d21d2d932fbe651cbacf7e64ff841bcacc55cd607d4f39a75276d322f2e2d069d9250428a2e986585de92c94b0da917da23dff986156533c21132e9dd4fa8f83e18454bb6c623630343fadc9583db5ce287603c2563a37e48ca6584fdb9c708a075f20ff44792ddfb1a9641bd30afd3d80c26547bf39792c04ee1c9aab9df0ed77444de3c427e78eca0017fee138ab382ba45ed57bc2674b3f17df33211ca84906131915c0908960943c2a995fa4040e19fd29e85b3e4d0512c25a", &(0x7f0000000b40)=""/253, &(0x7f0000000c40)="def168218db236517f32c9afe07284d473c02779d54076034aa0be19b880b228843af764a0a744dc3cf4b38ebeec3bb9fe73cc4f442a84612610ec975c5bd0de4b7c626f4cef5e1f0481603770e3afdc29b40a1cd44c7925d425fbb12fb42f7894088bb66bf0c7d913de51dcda68489d708aa97bd96a6eb2979d2d700bb8c044ab0af887c5cb7091cd88dc900ab3ea9564d78232d4a9a7acaa14daf7bbd474f1cd3962434f0de4f4cea3c9ed2e7390fc2576e5513b5b77f7429873c91e79e4d5cedc7cac818a2c31bfe562c87fc29f3531aeb2810f9d7a6962185c13ab95cf193444c98d248c8b60111428b25227e7b4ff", &(0x7f0000000d40)="eb9137bbf9a9d70186a3415a708b7ab98fda8a12f9738167987e7765b2c216692332a73916e259bd5366985c1cea9ec28d6ec7abdfba6cac8c03851dab1a271a9d0144b7f30e9c1b920472144ed72405c9eadeefa58c28cc63d760c8a3fe6c58783651162fa0fcc9cd566bb645b3064307e59142dedd990792ec5b82e994125eab30ee852b5dd16849963f082e4a2cbdb36e14390fb7e76125a88e752db3d16b80c74031bbda1cb1789c8607c2f8074197f064772b0f135f1386a0cabf2eb6b17cf65f5bc8f096abbd984db6004e18cfd794b96124d6484e5b9b1b22d5673dd2ffbdab40605cb95d5703", 0x1000, 0x1, 0x4}, 0x38) ioctl$KVM_GET_MSRS(r11, 0xc008ae88, 0x0) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r13, 0xc008ae88, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit]}, &(0x7f00000005c0)='GPL\x00', 0x40, 0xca, &(0x7f0000000600)=""/202, 0x40f00, 0x6, '\x00', 0x0, 0x1a, r6, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x7, 0x1ff, 0x9}, 0x10, 0x29cd4, r7, 0x0, &(0x7f0000000900)=[r9, r3, r3, r10, r11, r1, r3, r12, r1, r13]}, 0x80) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x2) 06:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}], 0x8, 0x0) [ 2529.910708] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.916278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.015807] oom_reaper: reaped process 30994 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2531.062026] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2531.075427] systemd-journal cpuset=/ mems_allowed=0-1 [ 2531.080683] CPU: 1 PID: 30792 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2531.088648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2531.097996] Call Trace: [ 2531.100590] dump_stack+0x1fc/0x2ef [ 2531.104220] dump_header+0x15d/0xc3f [ 2531.107935] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2531.113039] ? ___ratelimit+0x319/0x590 [ 2531.117015] oom_kill_process.cold+0x10/0x692 [ 2531.121510] ? check_preemption_disabled+0x41/0x280 [ 2531.126530] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2531.131810] out_of_memory+0x1072/0x1390 [ 2531.135875] ? oom_killer_disable+0x270/0x270 [ 2531.140377] ? mutex_trylock+0x15f/0x1a0 [ 2531.144437] __alloc_pages_nodemask+0x23a2/0x2890 [ 2531.149282] ? find_get_entry+0x4cd/0x8a0 [ 2531.153438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2531.158303] alloc_pages_current+0x193/0x2a0 [ 2531.162711] filemap_fault+0x146e/0x2180 [ 2531.166780] ext4_filemap_fault+0x84/0xb0 [ 2531.170923] __do_fault+0x10b/0x4b0 [ 2531.174546] __handle_mm_fault+0x273b/0x41c0 [ 2531.178937] ? vm_insert_page+0x9c0/0x9c0 [ 2531.183073] ? check_preemption_disabled+0x41/0x280 [ 2531.188082] handle_mm_fault+0x436/0xb10 [ 2531.192143] __do_page_fault+0x68e/0xd60 [ 2531.195313] syz-executor.5: vmalloc: allocation failure, allocated 1022922752 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2531.196205] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2531.214242] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2531.214969] ? spurious_fault+0x840/0x840 [ 2531.224180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2531.229022] ? page_fault+0x8/0x30 [ 2531.232556] page_fault+0x1e/0x30 [ 2531.235998] RIP: 0033:0x7fe47dadf2e3 [ 2531.239700] Code: Bad RIP value. [ 2531.243051] RSP: 002b:00007ffea0c92bb8 EFLAGS: 00010246 [ 2531.248408] RAX: 0000000000000001 RBX: 000055a3095631e0 RCX: 00007fe47dadf2e3 [ 2531.255671] RDX: 0000000000000012 RSI: 00007ffea0c92bc0 RDI: 000000000000000b [ 2531.262936] RBP: 00007ffea0c92da0 R08: 0000000000989680 R09: 00000288fb146bfb [ 2531.270195] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea0c92bc0 [ 2531.277456] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d111c4a295 [ 2531.284733] CPU: 0 PID: 30994 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2531.288679] Mem-Info: [ 2531.292620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2531.295029] active_anon:27983 inactive_anon:83987 isolated_anon:0 [ 2531.295029] active_file:49 inactive_file:0 isolated_file:0 [ 2531.295029] unevictable:0 dirty:2 writeback:17 unstable:0 [ 2531.295029] slab_reclaimable:13606 slab_unreclaimable:117223 [ 2531.295029] mapped:22154 shmem:98163 pagetables:558 bounce:0 [ 2531.295029] free:13832 free_pcp:1168 free_cma:0 [ 2531.304341] Call Trace: [ 2531.304363] dump_stack+0x1fc/0x2ef [ 2531.304401] warn_alloc.cold+0x7b/0x18f [ 2531.347852] ? zone_watermark_ok_safe+0x260/0x260 [ 2531.350460] Node 0 active_anon:110812kB inactive_anon:179024kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88604kB dirty:8kB writeback:56kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2531.352723] ? retint_kernel+0x2d/0x2d [ 2531.380587] Node 1 active_anon:1120kB inactive_anon:156924kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:12kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2531.384425] __vmalloc_area_node+0x4fd/0x780 [ 2531.411568] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2531.415972] ? __vmalloc_node_range+0x180/0x180 [ 2531.442540] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2531.447274] ? _raw_spin_unlock+0x29/0x40 [ 2531.452282] Node 0 DMA32 free:17696kB min:35996kB low:44992kB high:53988kB active_anon:110812kB inactive_anon:175408kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:264kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2232kB bounce:0kB free_pcp:1628kB local_pcp:1380kB free_cma:0kB [ 2531.456403] ? __get_vm_area_node+0x2e2/0x3a0 [ 2531.485629] lowmem_reserve[]: 0 0 1 1 1 [ 2531.490188] __vmalloc_node_range+0xed/0x180 [ 2531.490207] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2531.494155] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2531.498573] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2531.498586] vmalloc_user+0x70/0xe0 [ 2531.498601] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2531.502910] lowmem_reserve[]: 0 0 0 0 0 [ 2531.528746] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2531.528762] __vb2_queue_alloc+0x472/0xe60 [ 2531.528788] vb2_core_create_bufs+0x273/0x7e0 [ 2531.534114] Node 1 Normal free:26764kB min:53876kB low:67344kB high:80812kB active_anon:1120kB inactive_anon:156924kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:0kB bounce:0kB free_pcp:3044kB local_pcp:1308kB free_cma:0kB [ 2531.537741] ? __vb2_queue_free+0x870/0x870 [ 2531.542053] lowmem_reserve[]: 0 0 0 0 0 [ 2531.546014] ? __video_do_ioctl+0x632/0xcd0 [ 2531.550138] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2531.554343] ? pi_state_update_owner+0x450/0x450 [ 2531.558822] Node 0 DMA32: 562*4kB (UME) 434*8kB (UME) 303*16kB (ME) 87*32kB (UME) 15*64kB (ME) 12*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 2531.587606] ? __mutex_lock+0x368/0x1190 [ 2531.587630] vb2_create_bufs+0x332/0x620 [ 2531.591937] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2531.595888] ? mark_held_locks+0xf0/0xf0 [ 2531.600192] Node 1 Normal: 469*4kB (ME) 247*8kB (ME) 182*16kB (UME) 30*32kB (UME) 7*64kB (ME) 15*128kB (UM) 6*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (U) 3*4096kB (UM) = 26988kB [ 2531.614375] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2531.614389] ? futex_wait_queue_me+0x404/0x5e0 [ 2531.614405] ? pi_state_update_owner+0x450/0x450 [ 2531.619151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2531.634544] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2531.634560] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2531.634581] v4l_create_bufs+0xb2/0x160 [ 2531.638629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2531.642670] __video_do_ioctl+0x49a/0xcd0 [ 2531.653668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2531.657693] ? v4l_querycap+0x340/0x340 [ 2531.673638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2531.678705] ? __might_fault+0x192/0x1d0 [ 2531.678726] ? v4l_querycap+0x340/0x340 [ 2531.683277] 98209 total pagecache pages [ 2531.688019] video_usercopy+0x13f/0xfa0 [ 2531.688044] ? v4l_enumstd+0x60/0x60 [ 2531.696849] 0 pages in swap cache [ 2531.701934] ? do_futex+0x171/0x1880 [ 2531.701951] ? mark_held_locks+0xf0/0xf0 [ 2531.701969] ? debug_check_no_obj_freed+0x201/0x490 [ 2531.707127] Swap cache stats: add 0, delete 0, find 0/0 [ 2531.711086] ? video_usercopy+0xfa0/0xfa0 [ 2531.711102] v4l2_ioctl+0x147/0x1a0 [ 2531.719661] Free swap = 0kB [ 2531.723779] ? video_devdata+0xa0/0xa0 [ 2531.732599] Total swap = 0kB [ 2531.736546] do_vfs_ioctl+0xcdb/0x12e0 [ 2531.745126] 2097051 pages RAM [ 2531.749231] ? lock_downgrade+0x720/0x720 [ 2531.749246] ? check_preemption_disabled+0x41/0x280 [ 2531.749262] ? ioctl_preallocate+0x200/0x200 [ 2531.753205] 0 pages HighMem/MovableOnly [ 2531.757164] ? __fget+0x356/0x510 [ 2531.761127] 369649 pages reserved [ 2531.764809] ? do_dup2+0x450/0x450 [ 2531.768251] 0 pages cma reserved [ 2531.771934] ? __se_sys_futex+0x298/0x3b0 [ 2531.775976] Unreclaimable slab info: [ 2531.780983] ksys_ioctl+0x9b/0xc0 [ 2531.781005] __x64_sys_ioctl+0x6f/0xb0 [ 2531.786335] Name Used Total [ 2531.790469] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2531.790483] do_syscall_64+0xf9/0x620 [ 2531.790506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2531.794100] pid_2 40KB 44KB [ 2531.797095] RIP: 0033:0x7f579755f0f9 [ 2531.801035] batadv_tt_change_cache 3KB 11KB [ 2531.803955] Code: Bad RIP value. [ 2531.807826] batadv_tl_cache 7KB 20KB [ 2531.810901] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2531.810915] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2531.810923] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 2531.810933] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2531.815074] TIPC 19KB 37KB [ 2531.820046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2531.820055] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2531.846371] Mem-Info: [ 2531.856889] SCTPv6 28KB 55KB [ 2531.862749] active_anon:27960 inactive_anon:83987 isolated_anon:0 [ 2531.862749] active_file:14 inactive_file:15 isolated_file:0 [ 2531.862749] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2531.862749] slab_reclaimable:13606 slab_unreclaimable:117205 [ 2531.862749] mapped:22151 shmem:98163 pagetables:558 bounce:0 [ 2531.862749] free:14002 free_pcp:1168 free_cma:0 [ 2531.863805] DCCPv6 20KB 52KB [ 2531.868579] Node 0 active_anon:110720kB inactive_anon:179024kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88604kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2531.881198] DCCP 19KB 49KB [ 2531.887352] Node 1 active_anon:1120kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:157940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2531.899770] RXRPC 22KB 45KB [ 2531.906437] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2531.919172] rxrpc_call_jar 151KB 165KB [ 2531.931448] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2531.939507] bridge_fdb_cache 14KB 27KB [ 2531.946565] Node 0 DMA32 free:18152kB min:35996kB low:44992kB high:53988kB active_anon:110720kB inactive_anon:175408kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2232kB bounce:0kB free_pcp:1628kB local_pcp:248kB free_cma:0kB [ 2531.959477] fib6_nodes 228KB 308KB [ 2531.965681] lowmem_reserve[]: 0 0 1 1 1 [ 2532.003883] ip6_dst_cache 656KB 813KB [ 2532.034483] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2532.069503] RAWv6 141KB 148KB [ 2532.096618] lowmem_reserve[]: 0 0 0 0 0 [ 2532.104203] UDPv6 43KB 45KB [ 2532.107561] Node 1 Normal free:26988kB min:53876kB low:67344kB high:80812kB active_anon:1120kB inactive_anon:156924kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:0kB bounce:0kB free_pcp:3044kB local_pcp:1736kB free_cma:0kB [ 2532.146219] TCPv6 24KB 42KB [ 2532.153408] lowmem_reserve[]: 0 0 0 0 0 [ 2532.182630] nf_conntrack 11KB 11KB [ 2532.195333] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2532.226081] t10_alua_lu_gp_cache 0KB 3KB [ 2532.241936] Node 0 DMA32: 562*4kB (UME) 434*8kB (UME) 303*16kB (ME) 87*32kB (UME) 15*64kB (ME) 12*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 2532.256682] sd_ext_cdb 0KB 7KB [ 2532.262426] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2532.285997] scsi_sense_cache 1056KB 1060KB [ 2532.294872] Node 1 Normal: 469*4kB (ME) 247*8kB (ME) 182*16kB (UME) 30*32kB (UME) 7*64kB (ME) 15*128kB (UM) 6*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (U) 3*4096kB (UM) = 26988kB [ 2532.297888] virtio_scsi_cmd 16KB 16KB [ 2532.316697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2532.329192] sgpool-128 8KB 8KB [ 2532.329203] sgpool-64 4KB 12KB [ 2532.329213] sgpool-32 2KB 15KB [ 2532.329222] sgpool-16 1KB 7KB [ 2532.329232] sgpool-8 0KB 7KB [ 2532.329250] mqueue_inode_cache 10KB 30KB [ 2532.329267] bio_post_read_ctx 14KB 15KB [ 2532.329337] bio-2 14KB 15KB [ 2532.338263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2532.350425] jfs_mp 7KB 7KB [ 2532.350863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2532.356160] cifs_small_rq 15KB 16KB [ 2532.369246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2532.378884] cifs_request 67KB 67KB [ 2532.387140] 98192 total pagecache pages [ 2532.401664] cifs_mpx_ids 0KB 7KB [ 2532.416822] 0 pages in swap cache [ 2532.425128] nfs_commit_data 3KB 14KB [ 2532.425139] nfs_write_data 34KB 44KB [ 2532.425183] ext4_system_zone 1KB 7KB [ 2532.425213] bio-1 1KB 7KB [ 2532.425225] pid_namespace 2KB 11KB [ 2532.425245] rpc_buffers 17KB 25KB [ 2532.425254] rpc_tasks 2KB 7KB [ 2532.425263] UNIX 1751KB 1920KB [ 2532.425277] UDP-Lite 1KB 6KB [ 2532.425286] tcp_bind_bucket 2KB 8KB [ 2532.425304] ip_fib_trie 33KB 47KB [ 2532.425312] ip_fib_alias 162KB 213KB [ 2532.425322] ip_dst_cache 10KB 24KB [ 2532.425334] RAW 91KB 112KB [ 2532.425343] UDP 77KB 94KB [ 2532.425357] TCP 11KB 16KB [ 2532.425369] hugetlbfs_inode_cache 3KB 15KB [ 2532.425379] fscache_cookie_jar 1KB 7KB [ 2532.425389] eventpoll_pwq 17KB 43KB [ 2532.425398] eventpoll_epi 32KB 63KB [ 2532.425407] inotify_inode_mark 5KB 7KB [ 2532.425418] request_queue 199KB 199KB [ 2532.425428] blkdev_requests 1KB 3KB [ 2532.425438] blkdev_ioc 29KB 42KB [ 2532.425454] bio-0 1111KB 1158KB [ 2532.425464] biovec-max 2301KB 2384KB [ 2532.425475] biovec-64 1006KB 1157KB [ 2532.425485] biovec-16 148KB 202KB [ 2532.425494] bio_integrity_payload 1KB 8KB [ 2532.425504] khugepaged_mm_slot 8KB 19KB [ 2532.425521] uid_cache 0KB 4KB [ 2532.425531] dmaengine-unmap-2 0KB 3KB [ 2532.425543] skbuff_fclone_cache 48KB 56KB [ 2532.425552] skbuff_head_cache 9312KB 9952KB [ 2532.425562] configfs_dir_cache 3KB 7KB [ 2532.425573] file_lock_ctx 9KB 11KB [ 2532.425583] fsnotify_mark_connector 2KB 3KB [ 2532.425592] net_namespace 113KB 131KB [ 2532.425602] shmem_inode_cache 7935KB 7987KB [ 2532.425612] task_delay_info 262KB 442KB [ 2532.425621] taskstats 46KB 49KB [ 2532.425630] proc_dir_entry 1072KB 1170KB [ 2532.425640] pde_opener 11KB 23KB [ 2532.425649] seq_file 280KB 350KB [ 2532.425659] sigqueue 36KB 70KB [ 2532.425669] kernfs_node_cache 18357KB 19073KB [ 2532.425677] mnt_cache 246KB 260KB [ 2532.425684] filp 7555KB 8242KB [ 2532.425693] names_cache 106874KB 106934KB [ 2532.425700] iint_cache 32KB 51KB [ 2532.425709] key_jar 4KB 7KB [ 2532.425717] uts_namespace 2KB 11KB [ 2532.425726] nsproxy 3KB 11KB [ 2532.425734] vm_area_struct 3311KB 3403KB [ 2532.425743] mm_struct 572KB 611KB [ 2532.425752] fs_cache 261KB 384KB [ 2532.425761] files_cache 983KB 1290KB [ 2532.425770] signal_cache 1949KB 2429KB [ 2532.425779] sighand_cache 640KB 700KB [ 2532.425788] task_struct 9077KB 9115KB [ 2532.425797] cred_jar 2367KB 2944KB [ 2532.425806] anon_vma_chain 993KB 1334KB [ 2532.425815] anon_vma 123KB 231KB [ 2532.425825] pid 141KB 248KB [ 2532.425834] Acpi-Operand 156KB 198KB [ 2532.425843] Acpi-ParseExt 9KB 11KB [ 2532.425852] Acpi-Parse 41KB 47KB [ 2532.425861] Acpi-State 52KB 63KB [ 2532.425870] Acpi-Namespace 20KB 27KB [ 2532.425882] numa_policy 0KB 3KB [ 2532.425891] debug_objects_cache 2878KB 3129KB [ 2532.425900] trace_event_file 297KB 298KB [ 2532.425909] ftrace_event_field 398KB 401KB [ 2532.425919] pool_workqueue 143KB 160KB [ 2532.425931] page->ptl 551KB 1047KB [ 2532.437962] Swap cache stats: add 0, delete 0, find 0/0 [ 2532.446855] kmalloc-2097152 2050KB 2050KB [ 2532.451315] Free swap = 0kB [ 2532.457887] kmalloc-524288 2056KB 2056KB [ 2532.465518] Total swap = 0kB [ 2532.467410] kmalloc-262144 1290KB 1290KB [ 2532.472840] 2097051 pages RAM [ 2532.472845] 0 pages HighMem/MovableOnly [ 2532.472850] 369649 pages reserved [ 2532.472855] 0 pages cma reserved [ 2532.892754] kmalloc-131072 650KB 650KB [ 2532.912819] kmalloc-65536 2640KB 2706KB [ 2532.924728] kmalloc-32768 2376KB 2541KB [ 2532.946726] kmalloc-16384 1386KB 1468KB [ 2532.957111] kmalloc-8192 5271KB 5387KB [ 2532.977725] kmalloc-4096 27149KB 27191KB [ 2532.983290] kmalloc-2048 17244KB 19322KB [ 2533.003488] kmalloc-1024 12570KB 14773KB [ 2533.014908] kmalloc-512 18420KB 19417KB [ 2533.034862] kmalloc-256 5596KB 6622KB [ 2533.056968] kmalloc-128 1376KB 1838KB [ 2533.066441] kmalloc-96 3904KB 5336KB [ 2533.086863] kmalloc-64 3240KB 5044KB [ 2533.095462] kmalloc-32 2091KB 3146KB [ 2533.116008] kmalloc-192 2257KB 3096KB [ 2533.123068] kmem_cache 177KB 180KB [ 2533.134534] Out of memory (oom_kill_allocating_task): Kill process 30792 (systemd-journal) score 0 or sacrifice child [ 2533.153873] Killed process 30792 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1532kB [ 2533.166981] oom_reaper: reaped process 30792 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1532kB [ 2533.368578] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2533.389677] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2533.413640] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2533.427256] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2533.436838] systemd[1]: Stopped Journal Service. [ 2533.463647] systemd[1]: Starting Journal Service... [ 2533.624944] systemd-journald[31038]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2534.141661] systemd[1]: Started Journal Service. 06:46:25 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001300)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000000)={0xffffffffffffff75, 0x8, 0x100000001}) (async) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x6, [0x2, 0x5, 0x9, 0x6f, 0x8, 0x9]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:46:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x220203) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000240)="e4604259ccc212f384743d952ac6575c57d17bb7a0bd9104b306c45bedffbd0c6ecbd3dbe4d754ca2a8b6c19fb20405239a25532216b719c2d0afd4e0397b854f008b8c0350cd23a6d7d4d96f9238600de12d65e30e07b5e03bae0c35e6d2af0844b", &(0x7f00000002c0)=""/205}, 0x20) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf7, 0x2) (async, rerun: 32) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x84000) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="9b9ac21d022b42dacc5a94d723e02e96fc98850a322201ede73898f02c50d3fc190192e1e5", &(0x7f0000000400)=@udp=r4, 0x1}, 0x20) (async) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x0, {}, {0x1, 0x8, 0x20, 0x0, 0xff, 0x1, "9c9825c2"}, 0x8, 0x1, {&(0x7f0000000080)=[{0x7, 0xf, {0x2}, 0x800}, {0x7, 0x0, {0x1}, 0x1d}]}, 0xfffffffa, 0x0, r3}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) (rerun: 32) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000004c0)={0x4, 0x0, [{}, {}, {}, {}]}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000700), 0x4000) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x7, 0x0, r6, 0x8441, '\x00', r8, r1, 0x2, 0x4, 0x40000002, 0x3}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x4, 0x10000, 0x200, r1, 0x5, '\x00', 0x0, r3, 0x3, 0x2, 0x4, 0x2}, 0x48) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00', r7}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e40)={&(0x7f0000000a40)="72f80175c12a0c93d5e791d21d2d932fbe651cbacf7e64ff841bcacc55cd607d4f39a75276d322f2e2d069d9250428a2e986585de92c94b0da917da23dff986156533c21132e9dd4fa8f83e18454bb6c623630343fadc9583db5ce287603c2563a37e48ca6584fdb9c708a075f20ff44792ddfb1a9641bd30afd3d80c26547bf39792c04ee1c9aab9df0ed77444de3c427e78eca0017fee138ab382ba45ed57bc2674b3f17df33211ca84906131915c0908960943c2a995fa4040e19fd29e85b3e4d0512c25a", &(0x7f0000000b40)=""/253, &(0x7f0000000c40)="def168218db236517f32c9afe07284d473c02779d54076034aa0be19b880b228843af764a0a744dc3cf4b38ebeec3bb9fe73cc4f442a84612610ec975c5bd0de4b7c626f4cef5e1f0481603770e3afdc29b40a1cd44c7925d425fbb12fb42f7894088bb66bf0c7d913de51dcda68489d708aa97bd96a6eb2979d2d700bb8c044ab0af887c5cb7091cd88dc900ab3ea9564d78232d4a9a7acaa14daf7bbd474f1cd3962434f0de4f4cea3c9ed2e7390fc2576e5513b5b77f7429873c91e79e4d5cedc7cac818a2c31bfe562c87fc29f3531aeb2810f9d7a6962185c13ab95cf193444c98d248c8b60111428b25227e7b4ff", &(0x7f0000000d40)="eb9137bbf9a9d70186a3415a708b7ab98fda8a12f9738167987e7765b2c216692332a73916e259bd5366985c1cea9ec28d6ec7abdfba6cac8c03851dab1a271a9d0144b7f30e9c1b920472144ed72405c9eadeefa58c28cc63d760c8a3fe6c58783651162fa0fcc9cd566bb645b3064307e59142dedd990792ec5b82e994125eab30ee852b5dd16849963f082e4a2cbdb36e14390fb7e76125a88e752db3d16b80c74031bbda1cb1789c8607c2f8074197f064772b0f135f1386a0cabf2eb6b17cf65f5bc8f096abbd984db6004e18cfd794b96124d6484e5b9b1b22d5673dd2ffbdab40605cb95d5703", 0x1000, 0x1, 0x4}, 0x38) (async) ioctl$KVM_GET_MSRS(r11, 0xc008ae88, 0x0) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) (async) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r13, 0xc008ae88, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit]}, &(0x7f00000005c0)='GPL\x00', 0x40, 0xca, &(0x7f0000000600)=""/202, 0x40f00, 0x6, '\x00', 0x0, 0x1a, r6, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x7, 0x1ff, 0x9}, 0x10, 0x29cd4, r7, 0x0, &(0x7f0000000900)=[r9, r3, r3, r10, r11, r1, r3, r12, r1, r13]}, 0x80) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x2) (rerun: 64) 06:46:25 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:25 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}], 0x8, 0x0) 06:46:25 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) (async, rerun: 64) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x1000, 0x9f, {0x77359400}, {0x2, 0x2, 0xa0, 0x3f, 0x6, 0xde, "addb02fc"}, 0x7, 0x3, {&(0x7f00000000c0)=[{0x4, 0x6, {0x20}, 0x9}, {0x8, 0x1000, {0xffffffff}, 0x7}]}, 0x8, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async, rerun: 32) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x3, @sdr={0x34324d59, 0x2}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:46:25 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8084) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 06:46:25 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}], 0x8, 0x0) 06:46:25 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:25 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8084) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 06:46:25 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/69, 0x45}, {0x0}, {0x0}], 0x9, 0x0) 06:46:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x220203) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000240)="e4604259ccc212f384743d952ac6575c57d17bb7a0bd9104b306c45bedffbd0c6ecbd3dbe4d754ca2a8b6c19fb20405239a25532216b719c2d0afd4e0397b854f008b8c0350cd23a6d7d4d96f9238600de12d65e30e07b5e03bae0c35e6d2af0844b", &(0x7f00000002c0)=""/205}, 0x20) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf7, 0x2) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x84000) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="9b9ac21d022b42dacc5a94d723e02e96fc98850a322201ede73898f02c50d3fc190192e1e5", &(0x7f0000000400)=@udp=r4, 0x1}, 0x20) (async) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x0, {}, {0x1, 0x8, 0x20, 0x0, 0xff, 0x1, "9c9825c2"}, 0x8, 0x1, {&(0x7f0000000080)=[{0x7, 0xf, {0x2}, 0x800}, {0x7, 0x0, {0x1}, 0x1d}]}, 0xfffffffa, 0x0, r3}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000004c0)={0x4, 0x0, [{}, {}, {}, {}]}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000700), 0x4000) (async, rerun: 32) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x7, 0x0, r6, 0x8441, '\x00', r8, r1, 0x2, 0x4, 0x40000002, 0x3}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x4, 0x10000, 0x200, r1, 0x5, '\x00', 0x0, r3, 0x3, 0x2, 0x4, 0x2}, 0x48) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00', r7}, 0x10) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e40)={&(0x7f0000000a40)="72f80175c12a0c93d5e791d21d2d932fbe651cbacf7e64ff841bcacc55cd607d4f39a75276d322f2e2d069d9250428a2e986585de92c94b0da917da23dff986156533c21132e9dd4fa8f83e18454bb6c623630343fadc9583db5ce287603c2563a37e48ca6584fdb9c708a075f20ff44792ddfb1a9641bd30afd3d80c26547bf39792c04ee1c9aab9df0ed77444de3c427e78eca0017fee138ab382ba45ed57bc2674b3f17df33211ca84906131915c0908960943c2a995fa4040e19fd29e85b3e4d0512c25a", &(0x7f0000000b40)=""/253, &(0x7f0000000c40)="def168218db236517f32c9afe07284d473c02779d54076034aa0be19b880b228843af764a0a744dc3cf4b38ebeec3bb9fe73cc4f442a84612610ec975c5bd0de4b7c626f4cef5e1f0481603770e3afdc29b40a1cd44c7925d425fbb12fb42f7894088bb66bf0c7d913de51dcda68489d708aa97bd96a6eb2979d2d700bb8c044ab0af887c5cb7091cd88dc900ab3ea9564d78232d4a9a7acaa14daf7bbd474f1cd3962434f0de4f4cea3c9ed2e7390fc2576e5513b5b77f7429873c91e79e4d5cedc7cac818a2c31bfe562c87fc29f3531aeb2810f9d7a6962185c13ab95cf193444c98d248c8b60111428b25227e7b4ff", &(0x7f0000000d40)="eb9137bbf9a9d70186a3415a708b7ab98fda8a12f9738167987e7765b2c216692332a73916e259bd5366985c1cea9ec28d6ec7abdfba6cac8c03851dab1a271a9d0144b7f30e9c1b920472144ed72405c9eadeefa58c28cc63d760c8a3fe6c58783651162fa0fcc9cd566bb645b3064307e59142dedd990792ec5b82e994125eab30ee852b5dd16849963f082e4a2cbdb36e14390fb7e76125a88e752db3d16b80c74031bbda1cb1789c8607c2f8074197f064772b0f135f1386a0cabf2eb6b17cf65f5bc8f096abbd984db6004e18cfd794b96124d6484e5b9b1b22d5673dd2ffbdab40605cb95d5703", 0x1000, 0x1, 0x4}, 0x38) (async) ioctl$KVM_GET_MSRS(r11, 0xc008ae88, 0x0) (async) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r13, 0xc008ae88, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit]}, &(0x7f00000005c0)='GPL\x00', 0x40, 0xca, &(0x7f0000000600)=""/202, 0x40f00, 0x6, '\x00', 0x0, 0x1a, r6, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x7, 0x1ff, 0x9}, 0x10, 0x29cd4, r7, 0x0, &(0x7f0000000900)=[r9, r3, r3, r10, r11, r1, r3, r12, r1, r13]}, 0x80) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x2) 06:46:25 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:25 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8084) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8084) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) [ 2541.601639] oom_reaper: reaped process 31062 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2541.625618] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2541.639326] in:imklog cpuset=/ mems_allowed=0-1 [ 2541.644051] CPU: 1 PID: 30883 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2541.651496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2541.660842] Call Trace: [ 2541.663431] dump_stack+0x1fc/0x2ef [ 2541.667065] dump_header+0x15d/0xc3f [ 2541.670788] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2541.675893] ? ___ratelimit+0x319/0x590 [ 2541.680129] oom_kill_process.cold+0x10/0x692 [ 2541.684657] ? check_preemption_disabled+0x41/0x280 [ 2541.689669] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2541.694925] out_of_memory+0x1072/0x1390 [ 2541.698985] ? oom_killer_disable+0x270/0x270 [ 2541.703482] ? mutex_trylock+0x15f/0x1a0 [ 2541.704056] syz-executor.5: vmalloc: allocation failure, allocated 1024172032 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2541.707540] __alloc_pages_nodemask+0x23a2/0x2890 [ 2541.707562] ? find_get_entry+0x4cd/0x8a0 [ 2541.707582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2541.728162] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2541.730355] alloc_pages_current+0x193/0x2a0 [ 2541.744634] filemap_fault+0x146e/0x2180 [ 2541.748710] ext4_filemap_fault+0x84/0xb0 [ 2541.752854] __do_fault+0x10b/0x4b0 [ 2541.756492] __handle_mm_fault+0x273b/0x41c0 [ 2541.760900] ? vm_insert_page+0x9c0/0x9c0 [ 2541.765043] ? lock_downgrade+0x720/0x720 [ 2541.769197] ? check_preemption_disabled+0x41/0x280 [ 2541.774212] handle_mm_fault+0x436/0xb10 [ 2541.778274] __do_page_fault+0x68e/0xd60 [ 2541.782332] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2541.787340] ? spurious_fault+0x840/0x840 [ 2541.791484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2541.796322] ? page_fault+0x8/0x30 [ 2541.799856] page_fault+0x1e/0x30 [ 2541.803300] RIP: 0033:0x7f7f9378622d [ 2541.807002] Code: Bad RIP value. [ 2541.810354] RSP: 002b:00007f7f91122580 EFLAGS: 00010293 [ 2541.815706] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f7f9378622d [ 2541.822964] RDX: 0000000000001fa0 RSI: 00007f7f91122da0 RDI: 0000000000000004 [ 2541.830235] RBP: 0000558d7d2a69d0 R08: 00007f7f928ff940 R09: 0000000000000000 [ 2541.837504] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f7f91122da0 [ 2541.844776] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7f91122dd8 [ 2541.852068] CPU: 0 PID: 31062 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2541.855522] Mem-Info: [ 2541.859955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2541.859961] Call Trace: [ 2541.859981] dump_stack+0x1fc/0x2ef [ 2541.859997] warn_alloc.cold+0x7b/0x18f [ 2541.860016] ? zone_watermark_ok_safe+0x260/0x260 [ 2541.862421] active_anon:28034 inactive_anon:86019 isolated_anon:0 [ 2541.862421] active_file:14 inactive_file:14 isolated_file:0 [ 2541.862421] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2541.862421] slab_reclaimable:13724 slab_unreclaimable:115638 [ 2541.862421] mapped:22111 shmem:100211 pagetables:574 bounce:0 [ 2541.862421] free:13905 free_pcp:274 free_cma:0 [ 2541.871747] ? retint_kernel+0x2d/0x2d [ 2541.871781] __vmalloc_area_node+0x4fd/0x780 [ 2541.874355] Node 0 active_anon:110524kB inactive_anon:178960kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2541.877957] ? __vmalloc_node_range+0x180/0x180 [ 2541.877976] ? _raw_spin_unlock+0x29/0x40 [ 2541.881943] Node 1 active_anon:1612kB inactive_anon:165116kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2541.886866] ? __get_vm_area_node+0x2e2/0x3a0 [ 2541.920290] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2541.924137] __vmalloc_node_range+0xed/0x180 [ 2541.928526] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2541.956286] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2541.956301] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2541.956313] vmalloc_user+0x70/0xe0 [ 2541.956327] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2541.956340] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2541.956353] __vb2_queue_alloc+0x472/0xe60 [ 2541.956374] vb2_core_create_bufs+0x273/0x7e0 [ 2541.956388] ? __vb2_queue_free+0x870/0x870 [ 2541.956406] ? pi_state_update_owner+0x450/0x450 [ 2541.956420] ? _raw_spin_unlock+0x29/0x40 [ 2541.956429] ? __mutex_lock+0x368/0x1190 [ 2541.956446] vb2_create_bufs+0x332/0x620 [ 2541.956463] ? mark_held_locks+0xf0/0xf0 [ 2541.956479] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2541.956489] ? futex_wait_queue_me+0x404/0x5e0 [ 2541.956502] ? pi_state_update_owner+0x450/0x450 [ 2541.956515] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2541.956531] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2541.956553] v4l_create_bufs+0xb2/0x160 [ 2541.956571] __video_do_ioctl+0x49a/0xcd0 [ 2541.956592] ? v4l_querycap+0x340/0x340 [ 2541.956610] ? __might_fault+0x192/0x1d0 [ 2541.956626] ? v4l_querycap+0x340/0x340 [ 2541.956642] video_usercopy+0x13f/0xfa0 [ 2541.956663] ? v4l_enumstd+0x60/0x60 [ 2541.956676] ? do_futex+0x171/0x1880 [ 2541.956691] ? mark_held_locks+0xf0/0xf0 [ 2541.956707] ? debug_check_no_obj_freed+0x201/0x490 [ 2541.956730] ? video_usercopy+0xfa0/0xfa0 [ 2541.956742] v4l2_ioctl+0x147/0x1a0 [ 2541.956754] ? video_devdata+0xa0/0xa0 [ 2541.956769] do_vfs_ioctl+0xcdb/0x12e0 [ 2541.956784] ? lock_downgrade+0x720/0x720 [ 2541.956798] ? check_preemption_disabled+0x41/0x280 [ 2541.956812] ? ioctl_preallocate+0x200/0x200 [ 2541.956830] ? __fget+0x356/0x510 [ 2541.956845] ? do_dup2+0x450/0x450 [ 2541.956858] ? __se_sys_futex+0x298/0x3b0 [ 2541.956879] ksys_ioctl+0x9b/0xc0 [ 2541.956895] __x64_sys_ioctl+0x6f/0xb0 [ 2541.956909] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2541.956922] do_syscall_64+0xf9/0x620 [ 2541.956940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2541.956951] RIP: 0033:0x7f579755f0f9 [ 2541.956966] Code: Bad RIP value. [ 2541.956973] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2541.956985] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2541.956993] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 2541.957001] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2541.957008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2541.957016] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2541.966557] Mem-Info: [ 2541.966929] Node 0 DMA32 free:17904kB min:35996kB low:44992kB high:53988kB active_anon:110524kB inactive_anon:175344kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2196kB bounce:0kB free_pcp:596kB local_pcp:348kB free_cma:0kB [ 2541.997349] active_anon:28034 inactive_anon:86019 isolated_anon:0 [ 2541.997349] active_file:14 inactive_file:14 isolated_file:0 [ 2541.997349] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2541.997349] slab_reclaimable:13724 slab_unreclaimable:115638 [ 2541.997349] mapped:22111 shmem:100211 pagetables:574 bounce:0 [ 2541.997349] free:13905 free_pcp:274 free_cma:0 [ 2542.003445] lowmem_reserve[]: 0 0 1 1 1 [ 2542.032686] Node 0 active_anon:110524kB inactive_anon:178960kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2542.034352] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2542.038768] Node 1 active_anon:1612kB inactive_anon:165116kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2542.046237] lowmem_reserve[]: 0 0 0 0 0 [ 2542.051048] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2542.053718] Node 1 Normal free:26848kB min:53876kB low:67344kB high:80812kB active_anon:1612kB inactive_anon:165116kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:100kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 2542.057931] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2542.067086] lowmem_reserve[]: 0 0 0 0 0 [ 2542.074206] Node 0 DMA32 free:17904kB min:35996kB low:44992kB high:53988kB active_anon:110524kB inactive_anon:175344kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2196kB bounce:0kB free_pcp:596kB local_pcp:248kB free_cma:0kB [ 2542.075870] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2542.084455] lowmem_reserve[]: 0 0 1 1 1 [ 2542.088233] Node 0 DMA32: 482*4kB (ME) 384*8kB (UME) 323*16kB (UME) 110*32kB (UME) 19*64kB (UME) 12*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2542.094279] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2542.097397] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2542.107642] lowmem_reserve[]: 0 0 0 0 0 [ 2542.111935] Node 1 Normal: 484*4kB (UME) 380*8kB (ME) 187*16kB (ME) 62*32kB (UME) 26*64kB (ME) 15*128kB (UM) 4*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (UM) 1*4096kB (U) = 26848kB [ 2542.121738] Node 1 Normal free:26848kB min:53876kB low:67344kB high:80812kB active_anon:1612kB inactive_anon:165116kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:100kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 2542.125315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2542.132397] lowmem_reserve[]: 0 0 0 0 0 [ 2542.133299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2542.137331] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2542.145580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2542.151837] Node 0 DMA32: 482*4kB (ME) 384*8kB (UME) 323*16kB (UME) 110*32kB (UME) 19*64kB (UME) 12*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2542.154952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2542.162142] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2542.165624] 100239 total pagecache pages [ 2542.172704] Node 1 Normal: 484*4kB (UME) 380*8kB (ME) 187*16kB (ME) 62*32kB (UME) 26*64kB (ME) 15*128kB (UM) 4*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (UM) 1*4096kB (U) = 26848kB [ 2542.173393] 0 pages in swap cache [ 2542.177664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2542.187344] Swap cache stats: add 0, delete 0, find 0/0 [ 2542.193616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2542.193931] Free swap = 0kB [ 2542.198101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2542.198111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2542.198134] 100239 total pagecache pages [ 2542.198166] 0 pages in swap cache [ 2542.205276] Total swap = 0kB [ 2542.205496] Swap cache stats: add 0, delete 0, find 0/0 [ 2542.210106] 2097051 pages RAM [ 2542.216237] Free swap = 0kB [ 2542.223606] 0 pages HighMem/MovableOnly [ 2542.229492] Total swap = 0kB [ 2542.242399] 369649 pages reserved [ 2542.243852] 2097051 pages RAM [ 2542.257340] 0 pages cma reserved [ 2542.261633] 0 pages HighMem/MovableOnly [ 2542.265652] Unreclaimable slab info: [ 2542.272953] 369649 pages reserved [ 2542.312215] Name Used Total [ 2542.350552] 0 pages cma reserved [ 2542.384380] pid_2 45KB 48KB [ 2542.860918] batadv_tt_change_cache 3KB 11KB [ 2542.868487] batadv_tl_cache 7KB 20KB [ 2542.873870] SMC 4KB 6KB [ 2542.879352] TIPC 19KB 37KB [ 2542.884723] SCTPv6 28KB 55KB [ 2542.890193] DCCPv6 17KB 45KB [ 2542.895556] DCCP 16KB 42KB [ 2542.900994] RXRPC 22KB 45KB [ 2542.906354] rxrpc_call_jar 150KB 165KB [ 2542.911763] bridge_fdb_cache 12KB 27KB [ 2542.917128] fib6_nodes 224KB 308KB [ 2542.922533] ip6_dst_cache 625KB 806KB [ 2542.927925] RAWv6 141KB 148KB [ 2542.933281] UDPv6 41KB 45KB [ 2542.938685] TCPv6 30KB 36KB [ 2542.944055] nf_conntrack 11KB 11KB [ 2542.949497] t10_alua_lu_gp_cache 0KB 3KB [ 2542.955119] sd_ext_cdb 0KB 7KB [ 2542.960520] scsi_sense_cache 1056KB 1060KB [ 2542.965875] virtio_scsi_cmd 16KB 16KB [ 2542.973197] sgpool-128 8KB 8KB [ 2542.978615] sgpool-64 4KB 12KB [ 2542.983971] sgpool-32 2KB 15KB [ 2542.989379] sgpool-16 1KB 7KB [ 2542.994736] sgpool-8 0KB 7KB [ 2543.000172] mqueue_inode_cache 10KB 30KB [ 2543.005629] bio_post_read_ctx 14KB 15KB [ 2543.011130] bio-2 14KB 15KB [ 2543.016487] jfs_mp 7KB 7KB [ 2543.021922] cifs_small_rq 15KB 16KB [ 2543.027327] cifs_request 67KB 67KB [ 2543.032769] cifs_mpx_ids 0KB 7KB [ 2543.038199] nfs_commit_data 3KB 14KB [ 2543.043559] nfs_write_data 34KB 44KB [ 2543.048979] ext4_system_zone 1KB 7KB [ 2543.054359] bio-1 1KB 7KB [ 2543.059958] pid_namespace 2KB 11KB [ 2543.065325] rpc_buffers 17KB 25KB [ 2543.070733] rpc_tasks 2KB 7KB [ 2543.077859] UNIX 1663KB 1852KB [ 2543.083230] UDP-Lite 6KB 13KB [ 2543.088644] tcp_bind_bucket 1KB 8KB [ 2543.094012] ip_fib_trie 33KB 47KB [ 2543.099415] ip_fib_alias 160KB 213KB [ 2543.104772] ip_dst_cache 9KB 24KB [ 2543.110383] RAW 90KB 112KB [ 2543.115741] UDP 70KB 94KB [ 2543.121161] TCP 11KB 16KB [ 2543.126563] hugetlbfs_inode_cache 3KB 15KB [ 2543.132350] fscache_cookie_jar 1KB 7KB [ 2543.137845] eventpoll_pwq 19KB 43KB [ 2543.143201] eventpoll_epi 36KB 63KB [ 2543.148591] inotify_inode_mark 5KB 7KB [ 2543.154040] request_queue 199KB 199KB [ 2543.159439] blkdev_requests 1KB 3KB [ 2543.164799] blkdev_ioc 29KB 42KB [ 2543.170200] bio-0 1217KB 1222KB [ 2543.177580] biovec-max 2359KB 2384KB [ 2543.182958] biovec-64 1063KB 1157KB [ 2543.188354] biovec-16 134KB 202KB [ 2543.193714] bio_integrity_payload 1KB 8KB [ 2543.199493] khugepaged_mm_slot 9KB 19KB [ 2543.204943] uid_cache 0KB 4KB [ 2543.210339] dmaengine-unmap-2 0KB 3KB [ 2543.215700] skbuff_fclone_cache 54KB 60KB [ 2543.221300] skbuff_head_cache 9977KB 10005KB [ 2543.226657] configfs_dir_cache 3KB 7KB [ 2543.232207] file_lock_ctx 9KB 11KB [ 2543.237624] fsnotify_mark_connector 2KB 3KB [ 2543.243501] net_namespace 113KB 131KB [ 2543.248900] shmem_inode_cache 7921KB 7983KB [ 2543.254259] task_delay_info 270KB 442KB [ 2543.259687] taskstats 52KB 53KB [ 2543.265042] proc_dir_entry 1071KB 1170KB [ 2543.270559] pde_opener 11KB 23KB [ 2543.277709] seq_file 300KB 350KB [ 2543.283079] sigqueue 56KB 70KB [ 2543.288480] kernfs_node_cache 18268KB 19069KB [ 2543.293841] mnt_cache 238KB 260KB [ 2543.299241] filp 7484KB 8238KB [ 2543.304598] names_cache 102947KB 102998KB [ 2543.310026] iint_cache 34KB 51KB [ 2543.315388] key_jar 4KB 7KB [ 2543.320811] uts_namespace 2KB 11KB [ 2543.326164] nsproxy 2KB 11KB [ 2543.331690] vm_area_struct 3520KB 3538KB [ 2543.337052] mm_struct 606KB 617KB [ 2543.342486] fs_cache 272KB 384KB [ 2543.348511] files_cache 1000KB 1290KB [ 2543.353876] signal_cache 1960KB 2429KB [ 2543.359291] sighand_cache 622KB 700KB [ 2543.364649] task_struct 9361KB 9386KB [ 2543.370063] cred_jar 2211KB 2940KB [ 2543.375422] anon_vma_chain 1048KB 1334KB [ 2543.382671] anon_vma 121KB 231KB [ 2543.388147] pid 140KB 248KB [ 2543.393502] Acpi-Operand 156KB 198KB [ 2543.402666] Acpi-ParseExt 9KB 11KB [ 2543.408086] Acpi-Parse 41KB 47KB [ 2543.413467] Acpi-State 52KB 63KB [ 2543.422532] Acpi-Namespace 20KB 27KB [ 2543.428294] numa_policy 0KB 3KB [ 2543.433657] debug_objects_cache 2858KB 3129KB [ 2543.442846] trace_event_file 297KB 298KB [ 2543.448286] ftrace_event_field 398KB 401KB [ 2543.453728] pool_workqueue 140KB 160KB [ 2543.459283] page->ptl 589KB 1047KB [ 2543.464921] kmalloc-2097152 2050KB 2050KB [ 2543.470958] kmalloc-524288 2056KB 2056KB [ 2543.476856] kmalloc-262144 1290KB 1290KB [ 2543.484840] kmalloc-131072 650KB 650KB [ 2543.490928] kmalloc-65536 2640KB 2706KB [ 2543.496984] kmalloc-32768 2376KB 2541KB [ 2543.502825] kmalloc-16384 1369KB 1419KB [ 2543.508829] kmalloc-8192 5205KB 5304KB [ 2543.514957] kmalloc-4096 27263KB 27302KB [ 2543.520898] kmalloc-2048 17395KB 19309KB [ 2543.526796] kmalloc-1024 12840KB 14773KB [ 2543.532732] kmalloc-512 19732KB 19837KB [ 2543.538504] kmalloc-256 5693KB 6622KB [ 2543.544374] kmalloc-128 1353KB 1838KB [ 2543.550272] kmalloc-96 4069KB 5336KB [ 2543.555710] kmalloc-64 3327KB 5044KB [ 2543.561131] kmalloc-32 2162KB 3146KB [ 2543.566497] kmalloc-192 2227KB 3096KB [ 2543.571887] kmem_cache 177KB 180KB [ 2543.577298] Out of memory (oom_kill_allocating_task): Kill process 30883 (in:imklog) score 0 or sacrifice child [ 2543.589273] Killed process 30881 (rsyslogd) total-vm:254332kB, anon-rss:692kB, file-rss:0kB, shmem-rss:0kB [ 2543.600893] oom_reaper: reaped process 30881 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:46:35 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x1000, 0x9f, {0x77359400}, {0x2, 0x2, 0xa0, 0x3f, 0x6, 0xde, "addb02fc"}, 0x7, 0x3, {&(0x7f00000000c0)=[{0x4, 0x6, {0x20}, 0x9}, {0x8, 0x1000, {0xffffffff}, 0x7}]}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x3, @sdr={0x34324d59, 0x2}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x3, @sdr={0x34324d59, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:46:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x56555959}) 06:46:35 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}], 0x8, 0x0) 06:46:35 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:35 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001300)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000000)={0xffffffffffffff75, 0x8, 0x100000001}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x6, [0x2, 0x5, 0x9, 0x6f, 0x8, 0x9]}) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (rerun: 32) 06:46:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x201) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x400440) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3f, 0x9, 0x1, 0x100, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x1, 0x4, 0x2}, 0x48) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000080)) 06:46:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x56555959}) 06:46:35 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}], 0x8, 0x0) 06:46:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x201) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x400440) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3f, 0x9, 0x1, 0x100, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x1, 0x4, 0x2}, 0x48) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) clock_gettime(0x4, &(0x7f0000000080)) 06:46:35 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000300)=0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r4, 0x8) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x40, 0x9, {0x77359400}, {0x5, 0x0, 0x81, 0x20, 0x7, 0x2, "a03520be"}, 0x7, 0x2, {&(0x7f00000001c0)=[{0x7, 0x6, {&(0x7f0000000140)}, 0x8}, {0x1000, 0x0, {&(0x7f0000000180)}, 0xad}]}, 0x4, 0x0, r4}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x4, 0x9}) 06:46:35 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x56555959}) 06:46:35 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}], 0x8, 0x0) 06:46:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x201) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x400440) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3f, 0x9, 0x1, 0x100, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x1, 0x4, 0x2}, 0x48) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000080)) (async) clock_gettime(0x4, &(0x7f0000000080)) 06:46:35 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x34363248}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0xa10, [0x3, 0x40, 0x20, 0x4, 0x4, 0x0, 0x3, 0x533, 0xbb5e, 0x3, 0x0, 0x5, 0x6, 0x5, 0x7, 0x0, 0x3ff, 0x1c9c, 0x2, 0xdb1, 0x7, 0x3, 0x5f2a, 0x60, 0x3, 0x9, 0x1, 0x9, 0x0, 0x9, 0x3, 0x5, 0x4, 0x5, 0x7, 0x7, 0x4, 0x0, 0x7, 0xffff, 0x1, 0x12c2, 0x100, 0x509, 0xfffe, 0x57, 0x101, 0x5], 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x7, 0x2, 0x10000, 0x400, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xc}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000240)}, 0x10) [ 2551.681555] oom_reaper: reaped process 31107 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2551.714252] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2551.730828] in:imklog cpuset=/ mems_allowed=0-1 [ 2551.735532] CPU: 0 PID: 31092 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2551.742978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2551.752321] Call Trace: [ 2551.754893] dump_stack+0x1fc/0x2ef [ 2551.758504] dump_header+0x15d/0xc3f [ 2551.762219] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2551.767304] ? ___ratelimit+0x319/0x590 [ 2551.771264] oom_kill_process.cold+0x10/0x692 [ 2551.775848] ? check_preemption_disabled+0x41/0x280 [ 2551.780864] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2551.786123] out_of_memory+0x1072/0x1390 [ 2551.790167] ? oom_killer_disable+0x270/0x270 [ 2551.794644] ? mutex_trylock+0x15f/0x1a0 [ 2551.798687] __alloc_pages_nodemask+0x23a2/0x2890 [ 2551.803530] ? find_get_entry+0x4cd/0x8a0 [ 2551.807664] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2551.812501] alloc_pages_current+0x193/0x2a0 [ 2551.816891] filemap_fault+0x146e/0x2180 [ 2551.820940] ext4_filemap_fault+0x84/0xb0 [ 2551.825083] __do_fault+0x10b/0x4b0 [ 2551.828692] __handle_mm_fault+0x273b/0x41c0 [ 2551.833080] ? vm_insert_page+0x9c0/0x9c0 [ 2551.837209] ? lock_downgrade+0x720/0x720 [ 2551.841348] ? check_preemption_disabled+0x41/0x280 [ 2551.846346] handle_mm_fault+0x436/0xb10 [ 2551.850392] __do_page_fault+0x68e/0xd60 [ 2551.854437] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2551.859433] ? spurious_fault+0x840/0x840 [ 2551.863562] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2551.868391] ? page_fault+0x8/0x30 [ 2551.871914] page_fault+0x1e/0x30 [ 2551.875345] RIP: 0033:0x7f57045be22d [ 2551.879040] Code: Bad RIP value. [ 2551.882401] RSP: 002b:00007f5701f5a580 EFLAGS: 00010293 [ 2551.887746] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f57045be22d [ 2551.894993] RDX: 0000000000001fa0 RSI: 00007f5701f5ada0 RDI: 0000000000000004 [ 2551.902246] RBP: 00005568e045b9d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.909515] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f5701f5ada0 [ 2551.916939] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f5701f5c6c7 [ 2551.929320] Mem-Info: [ 2551.931850] active_anon:28062 inactive_anon:86019 isolated_anon:0 [ 2551.931850] active_file:17 inactive_file:9 isolated_file:0 [ 2551.931850] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2551.931850] slab_reclaimable:13819 slab_unreclaimable:116127 [ 2551.931850] mapped:22151 shmem:100211 pagetables:559 bounce:0 [ 2551.931850] free:13805 free_pcp:966 free_cma:0 [ 2551.947026] syz-executor.5: vmalloc: allocation failure, allocated 1019465728 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2551.968479] Node 0 active_anon:110132kB inactive_anon:178960kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2551.991261] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2552.011984] Node 1 active_anon:2040kB inactive_anon:165116kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2552.012715] CPU: 1 PID: 31107 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2552.042511] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2552.047040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2552.047045] Call Trace: [ 2552.047068] dump_stack+0x1fc/0x2ef [ 2552.047085] warn_alloc.cold+0x7b/0x18f [ 2552.047100] ? zone_watermark_ok_safe+0x260/0x260 [ 2552.047117] ? rcu_nmi_exit+0xb3/0x180 [ 2552.076719] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2552.082857] __vmalloc_area_node+0x4fd/0x780 [ 2552.082876] ? __vmalloc_node_range+0x180/0x180 [ 2552.082889] ? _raw_spin_unlock+0x29/0x40 [ 2552.082902] ? __get_vm_area_node+0x2e2/0x3a0 [ 2552.082921] __vmalloc_node_range+0xed/0x180 [ 2552.082935] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2552.082950] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2552.082962] vmalloc_user+0x70/0xe0 [ 2552.082976] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2552.082988] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2552.083001] __vb2_queue_alloc+0x472/0xe60 [ 2552.083027] vb2_core_create_bufs+0x273/0x7e0 [ 2552.083041] ? __vb2_queue_free+0x870/0x870 [ 2552.083057] ? __video_do_ioctl+0x632/0xcd0 [ 2552.083074] ? pi_state_update_owner+0x450/0x450 [ 2552.083088] ? __mutex_lock+0x368/0x1190 [ 2552.083105] vb2_create_bufs+0x332/0x620 [ 2552.083121] ? mark_held_locks+0xf0/0xf0 [ 2552.083134] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2552.083146] ? futex_wait_queue_me+0x404/0x5e0 [ 2552.083161] ? pi_state_update_owner+0x450/0x450 [ 2552.083174] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2552.083188] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2552.083207] v4l_create_bufs+0xb2/0x160 [ 2552.083225] __video_do_ioctl+0x49a/0xcd0 [ 2552.083245] ? v4l_querycap+0x340/0x340 [ 2552.083263] ? __might_fault+0x192/0x1d0 [ 2552.083286] ? v4l_querycap+0x340/0x340 [ 2552.083301] video_usercopy+0x13f/0xfa0 [ 2552.083321] ? v4l_enumstd+0x60/0x60 [ 2552.083334] ? do_futex+0x171/0x1880 [ 2552.083349] ? mark_held_locks+0xf0/0xf0 [ 2552.083366] ? debug_check_no_obj_freed+0x201/0x490 [ 2552.083388] ? video_usercopy+0xfa0/0xfa0 [ 2552.083399] v4l2_ioctl+0x147/0x1a0 [ 2552.083411] ? video_devdata+0xa0/0xa0 [ 2552.083426] do_vfs_ioctl+0xcdb/0x12e0 [ 2552.083441] ? lock_downgrade+0x720/0x720 [ 2552.083456] ? check_preemption_disabled+0x41/0x280 [ 2552.083469] ? ioctl_preallocate+0x200/0x200 [ 2552.083486] ? __fget+0x356/0x510 [ 2552.083502] ? do_dup2+0x450/0x450 [ 2552.083516] ? __se_sys_futex+0x298/0x3b0 [ 2552.083536] ksys_ioctl+0x9b/0xc0 [ 2552.083552] __x64_sys_ioctl+0x6f/0xb0 [ 2552.083566] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2552.083579] do_syscall_64+0xf9/0x620 [ 2552.083597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2552.083608] RIP: 0033:0x7f579755f0f9 [ 2552.083622] Code: Bad RIP value. [ 2552.083629] RSP: 002b:00007f5795ab0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2552.083641] RAX: ffffffffffffffda RBX: 00007f579767f050 RCX: 00007f579755f0f9 [ 2552.083648] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 2552.083656] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2552.083663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2552.083671] R13: 00007ffd5ade33ef R14: 00007f5795ab0300 R15: 0000000000022000 [ 2552.088902] Mem-Info: [ 2552.090794] Node 0 DMA32 free:17724kB min:35996kB low:44992kB high:53988kB active_anon:110132kB inactive_anon:175344kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2060kB bounce:0kB free_pcp:1688kB local_pcp:1288kB free_cma:0kB [ 2552.094776] active_anon:28043 inactive_anon:86019 isolated_anon:0 [ 2552.094776] active_file:11 inactive_file:15 isolated_file:0 [ 2552.094776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2552.094776] slab_reclaimable:13819 slab_unreclaimable:116127 [ 2552.094776] mapped:22151 shmem:100211 pagetables:559 bounce:0 [ 2552.094776] free:13805 free_pcp:967 free_cma:0 [ 2552.102813] lowmem_reserve[]: 0 0 1 1 1 [ 2552.105791] Node 0 active_anon:110132kB inactive_anon:178960kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2552.108598] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2552.108623] lowmem_reserve[]: 0 0 0 0 0 [ 2552.108643] Node 1 Normal free:26628kB min:53876kB low:67344kB high:80812kB active_anon:2040kB inactive_anon:165116kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:176kB bounce:0kB free_pcp:2180kB local_pcp:548kB free_cma:0kB [ 2552.108673] lowmem_reserve[]: 0 0 0 0 0 [ 2552.108692] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2552.115466] Node 1 active_anon:2040kB inactive_anon:165116kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2552.120986] Node 0 DMA32: 319*4kB (ME) 314*8kB (UME) 288*16kB (UME) 103*32kB (UME) 19*64kB (ME) 10*128kB (UM) 4*256kB (M) 1*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 17772kB [ 2552.124213] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2552.126573] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2552.126628] Node 1 Normal: 441*4kB (UME) 284*8kB (ME) 192*16kB (UME) 58*32kB (UME) 30*64kB (ME) 5*128kB (M) 1*256kB (M) 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26628kB [ 2552.133282] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2552.135368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2552.143201] Node 0 DMA32 free:17724kB min:35996kB low:44992kB high:53988kB active_anon:110132kB inactive_anon:175344kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2060kB bounce:0kB free_pcp:1688kB local_pcp:400kB free_cma:0kB [ 2552.147055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2552.151182] lowmem_reserve[]: 0 0 1 1 1 [ 2552.152858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2552.159320] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2552.162366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2552.165893] lowmem_reserve[]: 0 0 0 0 0 [ 2552.170267] 100237 total pagecache pages [ 2552.170280] 0 pages in swap cache [ 2552.176473] Node 1 Normal free:26628kB min:53876kB low:67344kB high:80812kB active_anon:2040kB inactive_anon:165116kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:176kB bounce:0kB free_pcp:2180kB local_pcp:1632kB free_cma:0kB [ 2552.182251] Swap cache stats: add 0, delete 0, find 0/0 [ 2552.183121] lowmem_reserve[]: 0 0 0 0 0 [ 2552.188857] Free swap = 0kB [ 2552.196688] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2552.200089] Total swap = 0kB [ 2552.201629] Node 0 DMA32: 319*4kB (ME) 314*8kB (UME) 288*16kB (UME) 103*32kB (UME) 19*64kB (ME) 10*128kB (UM) 4*256kB (M) 1*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 17772kB [ 2552.211309] 2097051 pages RAM [ 2552.212239] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2552.216151] 0 pages HighMem/MovableOnly [ 2552.216160] 369649 pages reserved [ 2552.220483] Node 1 Normal: 441*4kB (UME) 284*8kB (ME) 192*16kB (UME) 58*32kB (UME) 30*64kB (ME) 5*128kB (M) 1*256kB (M) 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26628kB [ 2552.226756] 0 pages cma reserved [ 2552.232787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2552.236382] Unreclaimable slab info: [ 2552.240110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2552.240120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2552.240131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2552.244837] Name Used Total [ 2552.252288] 100237 total pagecache pages [ 2552.252914] pid_2 48KB 52KB [ 2552.257438] 0 pages in swap cache [ 2552.257446] Swap cache stats: add 0, delete 0, find 0/0 [ 2552.257451] Free swap = 0kB [ 2552.257455] Total swap = 0kB [ 2552.257468] 2097051 pages RAM [ 2552.263698] batadv_tt_change_cache 2KB 11KB [ 2552.264943] 0 pages HighMem/MovableOnly [ 2552.268876] batadv_tl_cache 6KB 20KB [ 2552.268904] TIPC 19KB 37KB [ 2552.276460] 369649 pages reserved [ 2552.278793] SCTPv6 26KB 49KB [ 2552.282415] 0 pages cma reserved [ 2552.285857] DCCPv6 17KB 45KB [ 2552.991154] DCCP 16KB 42KB [ 2553.001261] RXRPC 22KB 45KB [ 2553.009229] rxrpc_call_jar 150KB 165KB [ 2553.015146] bridge_fdb_cache 12KB 27KB [ 2553.025104] fib6_nodes 212KB 308KB [ 2553.035740] ip6_dst_cache 608KB 802KB [ 2553.045033] RAWv6 141KB 148KB [ 2553.052341] UDPv6 41KB 45KB [ 2553.062076] TCPv6 30KB 42KB [ 2553.069157] nf_conntrack 12KB 15KB [ 2553.074687] t10_alua_lu_gp_cache 0KB 3KB [ 2553.083592] sd_ext_cdb 0KB 7KB [ 2553.094174] scsi_sense_cache 1056KB 1060KB [ 2553.102790] virtio_scsi_cmd 16KB 16KB [ 2553.111533] sgpool-128 8KB 8KB [ 2553.121440] sgpool-64 4KB 12KB [ 2553.129360] sgpool-32 2KB 15KB [ 2553.135268] sgpool-16 1KB 7KB [ 2553.143890] sgpool-8 0KB 7KB [ 2553.152983] mqueue_inode_cache 10KB 30KB [ 2553.163596] bio_post_read_ctx 14KB 15KB [ 2553.172204] bio-2 14KB 15KB [ 2553.180779] jfs_mp 7KB 7KB [ 2553.186182] cifs_small_rq 15KB 16KB [ 2553.193226] cifs_request 67KB 67KB [ 2553.202204] cifs_mpx_ids 0KB 7KB [ 2553.241363] nfs_commit_data 3KB 14KB [ 2553.247232] nfs_write_data 34KB 44KB [ 2553.252635] ext4_system_zone 1KB 7KB [ 2553.281160] bio-1 1KB 7KB [ 2553.286594] pid_namespace 2KB 11KB [ 2553.291973] rpc_buffers 17KB 25KB [ 2553.312634] rpc_tasks 2KB 7KB [ 2553.328346] UNIX 1653KB 1841KB [ 2553.361149] UDP-Lite 5KB 13KB [ 2553.367006] tcp_bind_bucket 1KB 8KB [ 2553.372389] ip_fib_trie 31KB 47KB [ 2553.386853] ip_fib_alias 151KB 213KB [ 2553.392240] ip_dst_cache 9KB 24KB [ 2553.414958] RAW 90KB 112KB [ 2553.431391] UDP 77KB 94KB [ 2553.442231] TCP 11KB 22KB [ 2553.448767] hugetlbfs_inode_cache 3KB 15KB [ 2553.454487] fscache_cookie_jar 1KB 7KB [ 2553.465919] eventpoll_pwq 16KB 43KB [ 2553.472395] eventpoll_epi 30KB 63KB [ 2553.483017] inotify_inode_mark 5KB 7KB [ 2553.489092] request_queue 199KB 199KB [ 2553.494466] blkdev_requests 1KB 3KB [ 2553.505556] blkdev_ioc 31KB 42KB [ 2553.511824] bio-0 1339KB 1342KB [ 2553.523065] biovec-max 2400KB 2400KB [ 2553.529018] biovec-64 1116KB 1157KB [ 2553.534386] biovec-16 133KB 198KB [ 2553.545520] bio_integrity_payload 1KB 8KB [ 2553.551875] khugepaged_mm_slot 11KB 19KB [ 2553.562943] uid_cache 0KB 4KB [ 2553.569234] dmaengine-unmap-2 0KB 3KB [ 2553.574788] skbuff_fclone_cache 57KB 63KB [ 2553.585938] skbuff_head_cache 9972KB 10083KB [ 2553.594209] configfs_dir_cache 3KB 7KB [ 2553.604916] file_lock_ctx 9KB 11KB [ 2553.610969] fsnotify_mark_connector 2KB 3KB [ 2553.623014] net_namespace 113KB 131KB [ 2553.628959] shmem_inode_cache 7917KB 7983KB [ 2553.634331] task_delay_info 266KB 442KB [ 2553.645319] taskstats 53KB 57KB [ 2553.652312] proc_dir_entry 1063KB 1170KB [ 2553.663341] pde_opener 10KB 23KB [ 2553.675302] seq_file 293KB 350KB [ 2553.686770] sigqueue 51KB 70KB [ 2553.692158] kernfs_node_cache 18238KB 19069KB [ 2553.702502] mnt_cache 236KB 256KB [ 2553.709234] filp 7497KB 8238KB [ 2553.714604] names_cache 110266KB 110266KB [ 2553.725489] iint_cache 37KB 51KB [ 2553.732228] key_jar 4KB 7KB [ 2553.742072] uts_namespace 2KB 11KB [ 2553.749019] nsproxy 1KB 11KB [ 2553.754387] vm_area_struct 3404KB 3538KB [ 2553.764867] mm_struct 612KB 630KB [ 2553.771563] fs_cache 255KB 384KB [ 2553.781392] files_cache 930KB 1278KB [ 2553.788076] signal_cache 1644KB 2364KB [ 2553.793443] sighand_cache 638KB 700KB [ 2553.803656] task_struct 7379KB 7461KB [ 2553.810339] cred_jar 2232KB 2940KB [ 2553.815706] anon_vma_chain 993KB 1334KB [ 2553.827331] anon_vma 130KB 231KB [ 2553.832969] pid 136KB 248KB [ 2553.842385] Acpi-Operand 156KB 198KB [ 2553.849886] Acpi-ParseExt 9KB 11KB [ 2553.855256] Acpi-Parse 41KB 47KB [ 2553.864947] Acpi-State 52KB 63KB [ 2553.872504] Acpi-Namespace 20KB 27KB [ 2553.881651] numa_policy 0KB 3KB [ 2553.889143] debug_objects_cache 2841KB 3129KB [ 2553.894685] trace_event_file 297KB 298KB [ 2553.904276] ftrace_event_field 398KB 401KB [ 2553.911861] pool_workqueue 139KB 160KB [ 2553.920888] page->ptl 586KB 1047KB [ 2553.928995] kmalloc-2097152 2050KB 2050KB [ 2553.934367] kmalloc-524288 2056KB 2056KB [ 2553.944728] kmalloc-262144 1290KB 1290KB [ 2553.952241] kmalloc-131072 650KB 650KB [ 2553.961219] kmalloc-65536 2376KB 2574KB [ 2553.968965] kmalloc-32768 2310KB 2475KB [ 2553.974334] kmalloc-16384 1353KB 1402KB [ 2553.984050] kmalloc-8192 5098KB 5214KB [ 2553.996065] kmalloc-4096 23944KB 23982KB [ 2554.005060] kmalloc-2048 16796KB 19233KB [ 2554.012561] kmalloc-1024 12246KB 14765KB [ 2554.021603] kmalloc-512 19638KB 19875KB [ 2554.029723] kmalloc-256 5454KB 6622KB [ 2554.035097] kmalloc-128 1333KB 1838KB [ 2554.044458] kmalloc-96 4144KB 5336KB [ 2554.052019] kmalloc-64 3282KB 5044KB [ 2554.061049] kmalloc-32 2143KB 3146KB [ 2554.069604] kmalloc-192 2178KB 3096KB [ 2554.074989] kmem_cache 177KB 180KB [ 2554.084568] Out of memory (oom_kill_allocating_task): Kill process 31092 (in:imklog) score 0 or sacrifice child [ 2554.097352] Killed process 31090 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 2554.112712] oom_reaper: reaped process 31090 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:46:45 executing program 5: r0 = socket$inet(0x2, 0x5, 0x101) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:46:45 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000300)=0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) r3 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r4, 0x8) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x40, 0x9, {0x77359400}, {0x5, 0x0, 0x81, 0x20, 0x7, 0x2, "a03520be"}, 0x7, 0x2, {&(0x7f00000001c0)=[{0x7, 0x6, {&(0x7f0000000140)}, 0x8}, {0x1000, 0x0, {&(0x7f0000000180)}, 0xad}]}, 0x4, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x4, 0x9}) 06:46:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:45 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) 06:46:45 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/48, 0x30}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x34363248}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0xa10, [0x3, 0x40, 0x20, 0x4, 0x4, 0x0, 0x3, 0x533, 0xbb5e, 0x3, 0x0, 0x5, 0x6, 0x5, 0x7, 0x0, 0x3ff, 0x1c9c, 0x2, 0xdb1, 0x7, 0x3, 0x5f2a, 0x60, 0x3, 0x9, 0x1, 0x9, 0x0, 0x9, 0x3, 0x5, 0x4, 0x5, 0x7, 0x7, 0x4, 0x0, 0x7, 0xffff, 0x1, 0x12c2, 0x100, 0x509, 0xfffe, 0x57, 0x101, 0x5], 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x7, 0x2, 0x10000, 0x400, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xc}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x7, 0x2, 0x10000, 0x400, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xc}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000240)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000240)}, 0x10) 06:46:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:45 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000300)=0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r4, 0x8) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x40, 0x9, {0x77359400}, {0x5, 0x0, 0x81, 0x20, 0x7, 0x2, "a03520be"}, 0x7, 0x2, {&(0x7f00000001c0)=[{0x7, 0x6, {&(0x7f0000000140)}, 0x8}, {0x1000, 0x0, {&(0x7f0000000180)}, 0xad}]}, 0x4, 0x0, r4}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x4, 0x9}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fffffff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000002c0), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000300)=0x1) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, 0x0) (async) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r4, 0x8) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x40, 0x9, {0x77359400}, {0x5, 0x0, 0x81, 0x20, 0x7, 0x2, "a03520be"}, 0x7, 0x2, {&(0x7f00000001c0)=[{0x7, 0x6, {&(0x7f0000000140)}, 0x8}, {0x1000, 0x0, {&(0x7f0000000180)}, 0xad}]}, 0x4, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x4, 0x9}) (async) 06:46:45 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) (async) clock_getres(0x1, &(0x7f0000000040)) 06:46:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x34363248}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0xa10, [0x3, 0x40, 0x20, 0x4, 0x4, 0x0, 0x3, 0x533, 0xbb5e, 0x3, 0x0, 0x5, 0x6, 0x5, 0x7, 0x0, 0x3ff, 0x1c9c, 0x2, 0xdb1, 0x7, 0x3, 0x5f2a, 0x60, 0x3, 0x9, 0x1, 0x9, 0x0, 0x9, 0x3, 0x5, 0x4, 0x5, 0x7, 0x7, 0x4, 0x0, 0x7, 0xffff, 0x1, 0x12c2, 0x100, 0x509, 0xfffe, 0x57, 0x101, 0x5], 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x7, 0x2, 0x10000, 0x400, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xc}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000240)}, 0x10) 06:46:45 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:45 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) (async) clock_getres(0x1, &(0x7f0000000040)) [ 2561.531354] oom_reaper: reaped process 31167 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2561.580709] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2561.593702] systemd-journal cpuset=/ mems_allowed=0-1 [ 2561.599009] CPU: 0 PID: 31038 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2561.606975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2561.616321] Call Trace: [ 2561.618913] dump_stack+0x1fc/0x2ef [ 2561.622539] dump_header+0x15d/0xc3f [ 2561.626255] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2561.631356] ? ___ratelimit+0x319/0x590 [ 2561.635332] oom_kill_process.cold+0x10/0x692 [ 2561.639827] ? check_preemption_disabled+0x41/0x280 [ 2561.644849] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2561.650122] out_of_memory+0x1072/0x1390 [ 2561.654192] ? oom_killer_disable+0x270/0x270 [ 2561.658687] ? mutex_trylock+0x15f/0x1a0 [ 2561.662752] __alloc_pages_nodemask+0x23a2/0x2890 [ 2561.667603] ? find_get_entry+0x4cd/0x8a0 [ 2561.671756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2561.676621] alloc_pages_current+0x193/0x2a0 [ 2561.681028] filemap_fault+0x146e/0x2180 [ 2561.685098] ext4_filemap_fault+0x84/0xb0 [ 2561.689245] __do_fault+0x10b/0x4b0 [ 2561.692869] __handle_mm_fault+0x273b/0x41c0 [ 2561.697280] ? vm_insert_page+0x9c0/0x9c0 [ 2561.701443] ? check_preemption_disabled+0x41/0x280 [ 2561.706463] handle_mm_fault+0x436/0xb10 [ 2561.710515] __do_page_fault+0x68e/0xd60 [ 2561.714561] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2561.719566] ? spurious_fault+0x840/0x840 [ 2561.723699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2561.725735] syz-executor.5: vmalloc: allocation failure, allocated 1017540608 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2561.728529] ? page_fault+0x8/0x30 [ 2561.745844] page_fault+0x1e/0x30 [ 2561.747470] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2561.749286] RIP: 0033:0x7f62748782e3 [ 2561.758063] Code: Bad RIP value. [ 2561.761416] RSP: 002b:00007ffe857acf78 EFLAGS: 00010246 [ 2561.766765] RAX: 0000000000000001 RBX: 000055ba3a1c51e0 RCX: 00007f62748782e3 [ 2561.774022] RDX: 0000000000000012 RSI: 00007ffe857acf80 RDI: 000000000000000b [ 2561.781277] RBP: 00007ffe857ad160 R08: 00007ffe857f5000 R09: 0000028f623cba08 [ 2561.788533] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe857acf80 [ 2561.795792] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d113421ace [ 2561.803073] CPU: 1 PID: 31167 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2561.810958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2561.811142] Mem-Info: [ 2561.820299] Call Trace: [ 2561.820321] dump_stack+0x1fc/0x2ef [ 2561.820340] warn_alloc.cold+0x7b/0x18f [ 2561.822748] active_anon:28068 inactive_anon:86019 isolated_anon:0 [ 2561.822748] active_file:15 inactive_file:15 isolated_file:0 [ 2561.822748] unevictable:0 dirty:11 writeback:10 unstable:0 [ 2561.822748] slab_reclaimable:13986 slab_unreclaimable:116364 [ 2561.822748] mapped:22228 shmem:100211 pagetables:558 bounce:0 [ 2561.822748] free:13961 free_pcp:822 free_cma:0 [ 2561.825304] ? zone_watermark_ok_safe+0x260/0x260 [ 2561.828944] Node 0 active_anon:110600kB inactive_anon:178960kB active_file:52kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87164kB dirty:52kB writeback:20kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2561.832873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2561.866388] Node 1 active_anon:1672kB inactive_anon:165116kB active_file:8kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1748kB dirty:0kB writeback:20kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2561.871191] __vmalloc_area_node+0x4fd/0x780 [ 2561.899100] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2561.903827] ? __vmalloc_node_range+0x180/0x180 [ 2561.932600] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2561.935425] ? _raw_spin_unlock+0x29/0x40 [ 2561.961803] Node 0 DMA32 free:18136kB min:35996kB low:44992kB high:53988kB active_anon:110600kB inactive_anon:175344kB active_file:48kB inactive_file:40kB unevictable:0kB writepending:272kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2132kB bounce:0kB free_pcp:1552kB local_pcp:248kB free_cma:0kB [ 2561.966427] ? __get_vm_area_node+0x2e2/0x3a0 [ 2561.966453] __vmalloc_node_range+0xed/0x180 [ 2561.971431] lowmem_reserve[]: 0 0 1 1 1 [ 2561.975568] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2562.004939] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2562.009385] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2562.009404] vmalloc_user+0x70/0xe0 [ 2562.015377] lowmem_reserve[]: 0 0 0 0 0 [ 2562.017749] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2562.017764] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2562.017780] __vb2_queue_alloc+0x472/0xe60 [ 2562.022078] Node 1 Normal free:26832kB min:53876kB low:67344kB high:80812kB active_anon:1672kB inactive_anon:165116kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:100kB bounce:0kB free_pcp:1736kB local_pcp:1484kB free_cma:0kB [ 2562.047933] vb2_core_create_bufs+0x273/0x7e0 [ 2562.047954] ? __vb2_queue_free+0x870/0x870 [ 2562.053288] lowmem_reserve[]: 0 0 0 0 0 [ 2562.056916] ? __video_do_ioctl+0x632/0xcd0 [ 2562.056940] ? __mutex_lock+0x368/0x1190 [ 2562.056959] vb2_create_bufs+0x332/0x620 [ 2562.060903] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2562.065214] ? mark_held_locks+0xf0/0xf0 [ 2562.069350] Node 0 DMA32: 571*4kB (M) 364*8kB (UME) 265*16kB (UME) 121*32kB (UME) 23*64kB (UME) 4*128kB (M) 6*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18364kB [ 2562.073553] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2562.102515] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2562.106980] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2562.106996] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2562.107018] v4l_create_bufs+0xb2/0x160 [ 2562.111315] Node 1 Normal: 360*4kB (ME) 286*8kB (UME) 188*16kB (UME) 60*32kB (UME) 30*64kB (ME) 15*128kB (UM) 2*256kB (UM) 1*512kB (M) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26832kB [ 2562.115286] __video_do_ioctl+0x49a/0xcd0 [ 2562.121177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2562.123652] ? v4l_querycap+0x340/0x340 [ 2562.128178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2562.142600] ? __might_fault+0x192/0x1d0 [ 2562.142619] ? v4l_querycap+0x340/0x340 [ 2562.142636] video_usercopy+0x13f/0xfa0 [ 2562.146696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2562.162531] ? v4l_enumstd+0x60/0x60 [ 2562.162545] ? do_futex+0x171/0x1880 [ 2562.162564] ? mark_held_locks+0xf0/0xf0 [ 2562.167663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2562.178637] ? debug_check_no_obj_freed+0x201/0x490 [ 2562.178661] ? video_usercopy+0xfa0/0xfa0 [ 2562.183732] 100272 total pagecache pages [ 2562.189025] v4l2_ioctl+0x147/0x1a0 [ 2562.189039] ? video_devdata+0xa0/0xa0 [ 2562.189055] do_vfs_ioctl+0xcdb/0x12e0 [ 2562.189074] ? lock_downgrade+0x720/0x720 [ 2562.193026] 0 pages in swap cache [ 2562.209671] ? check_preemption_disabled+0x41/0x280 [ 2562.209685] ? ioctl_preallocate+0x200/0x200 [ 2562.209701] ? __fget+0x356/0x510 [ 2562.209717] ? do_dup2+0x450/0x450 [ 2562.213844] Swap cache stats: add 0, delete 0, find 0/0 [ 2562.222664] ? __se_sys_futex+0x298/0x3b0 [ 2562.222684] ksys_ioctl+0x9b/0xc0 [ 2562.222702] __x64_sys_ioctl+0x6f/0xb0 [ 2562.222717] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2562.222729] do_syscall_64+0xf9/0x620 [ 2562.222747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2562.222758] RIP: 0033:0x7f579755f0f9 [ 2562.222772] Code: Bad RIP value. [ 2562.222779] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2562.222792] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2562.222801] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2562.222809] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2562.222816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2562.222824] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2562.240619] Mem-Info: [ 2562.257543] Free swap = 0kB [ 2562.262983] active_anon:28068 inactive_anon:86019 isolated_anon:0 [ 2562.262983] active_file:14 inactive_file:14 isolated_file:0 [ 2562.262983] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2562.262983] slab_reclaimable:13987 slab_unreclaimable:116354 [ 2562.262983] mapped:22182 shmem:100211 pagetables:558 bounce:0 [ 2562.262983] free:13997 free_pcp:822 free_cma:0 [ 2562.275371] Total swap = 0kB [ 2562.283832] Node 0 active_anon:110600kB inactive_anon:178960kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:234712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2562.297254] 2097051 pages RAM [ 2562.303875] Node 1 active_anon:1672kB inactive_anon:165116kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1660kB dirty:0kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2562.316791] 0 pages HighMem/MovableOnly [ 2562.329502] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2562.341151] 369649 pages reserved [ 2562.342310] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2562.349369] 0 pages cma reserved [ 2562.355255] Node 0 DMA32 free:18280kB min:35996kB low:44992kB high:53988kB active_anon:110600kB inactive_anon:175344kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2132kB bounce:0kB free_pcp:1548kB local_pcp:1304kB free_cma:0kB [ 2562.366120] Unreclaimable slab info: [ 2562.371723] lowmem_reserve[]: 0 0 1 1 1 [ 2562.374594] Name Used Total [ 2562.381894] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2562.381927] lowmem_reserve[]: 0 0 0 0 0 [ 2562.381947] Node 1 Normal free:26832kB min:53876kB low:67344kB high:80812kB active_anon:1672kB inactive_anon:165116kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:100kB bounce:0kB free_pcp:1736kB local_pcp:252kB free_cma:0kB [ 2562.381977] lowmem_reserve[]: 0 0 0 0 0 [ 2562.398802] pid_2 54KB 56KB [ 2562.409085] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2562.414404] batadv_tt_change_cache 2KB 11KB [ 2562.417321] Node 0 DMA32: 571*4kB (M) 364*8kB (UME) 265*16kB (UME) 121*32kB (UME) 23*64kB (UME) 4*128kB (M) 6*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18364kB [ 2562.461116] batadv_tl_cache 6KB 20KB [ 2562.486274] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2562.520837] TIPC 19KB 37KB [ 2562.546482] Node 1 Normal: 360*4kB (ME) 286*8kB (UME) 188*16kB (UME) 60*32kB (UME) 30*64kB (ME) 15*128kB (UM) 2*256kB (UM) 1*512kB (M) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26832kB [ 2562.556543] SCTPv6 26KB 49KB [ 2562.589720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2562.601536] DCCPv6 17KB 45KB [ 2562.634696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2562.662319] DCCP 16KB 42KB [ 2562.678686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2562.684656] RXRPC 22KB 45KB [ 2562.692033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2562.706253] rxrpc_call_jar 150KB 165KB [ 2562.719248] 100239 total pagecache pages [ 2562.722692] bridge_fdb_cache 12KB 27KB [ 2562.724803] 0 pages in swap cache [ 2562.746717] fib6_nodes 208KB 308KB [ 2562.759244] Swap cache stats: add 0, delete 0, find 0/0 [ 2562.764781] ip6_dst_cache 617KB 802KB [ 2562.774656] Free swap = 0kB [ 2562.778808] RAWv6 133KB 148KB [ 2562.793259] Total swap = 0kB [ 2562.801682] UDPv6 41KB 45KB [ 2562.803844] 2097051 pages RAM [ 2562.807928] TCPv6 30KB 42KB [ 2562.807948] nf_conntrack 13KB 15KB [ 2562.808012] t10_alua_lu_gp_cache 0KB 3KB [ 2562.823092] 0 pages HighMem/MovableOnly [ 2562.830711] sd_ext_cdb 0KB 7KB [ 2562.832908] 369649 pages reserved [ 2562.832914] 0 pages cma reserved [ 2562.890685] scsi_sense_cache 1056KB 1060KB [ 2562.896115] virtio_scsi_cmd 16KB 16KB [ 2562.901476] sgpool-128 8KB 8KB [ 2562.910460] sgpool-64 4KB 12KB [ 2562.915980] sgpool-32 2KB 15KB [ 2562.921340] sgpool-16 1KB 7KB [ 2562.930328] sgpool-8 0KB 7KB [ 2562.937501] mqueue_inode_cache 10KB 30KB [ 2562.942962] bio_post_read_ctx 14KB 15KB [ 2562.951852] bio-2 14KB 15KB [ 2562.957285] jfs_mp 7KB 7KB [ 2562.962678] cifs_small_rq 15KB 16KB [ 2562.971566] cifs_request 67KB 67KB [ 2562.980613] cifs_mpx_ids 0KB 7KB [ 2562.989689] nfs_commit_data 3KB 14KB [ 2562.995060] nfs_write_data 34KB 44KB [ 2563.003837] ext4_system_zone 1KB 7KB [ 2563.012611] bio-1 1KB 7KB [ 2563.021664] pid_namespace 2KB 11KB [ 2563.030667] rpc_buffers 17KB 25KB [ 2563.041470] rpc_tasks 2KB 7KB [ 2563.051252] UNIX 1597KB 1800KB [ 2563.063923] UDP-Lite 5KB 13KB [ 2563.073537] tcp_bind_bucket 1KB 8KB [ 2563.090643] ip_fib_trie 30KB 47KB [ 2563.102468] ip_fib_alias 147KB 213KB [ 2563.112764] ip_dst_cache 9KB 24KB [ 2563.124778] RAW 90KB 112KB [ 2563.134940] UDP 82KB 94KB [ 2563.153901] TCP 8KB 16KB [ 2563.162459] hugetlbfs_inode_cache 3KB 15KB [ 2563.179548] fscache_cookie_jar 1KB 7KB [ 2563.185029] eventpoll_pwq 16KB 43KB [ 2563.195415] eventpoll_epi 30KB 63KB [ 2563.211398] inotify_inode_mark 5KB 7KB [ 2563.219259] request_queue 199KB 199KB [ 2563.224632] blkdev_requests 1KB 3KB [ 2563.238276] blkdev_ioc 31KB 42KB [ 2563.245763] bio-0 1516KB 1518KB [ 2563.251135] biovec-max 2450KB 2450KB [ 2563.260087] biovec-64 1213KB 1267KB [ 2563.265460] biovec-16 140KB 198KB [ 2563.270921] bio_integrity_payload 1KB 8KB [ 2563.280195] khugepaged_mm_slot 12KB 19KB [ 2563.285855] uid_cache 0KB 4KB [ 2563.291212] dmaengine-unmap-2 0KB 3KB [ 2563.300340] skbuff_fclone_cache 60KB 63KB [ 2563.305935] skbuff_head_cache 10366KB 10368KB [ 2563.311296] configfs_dir_cache 3KB 7KB [ 2563.320413] file_lock_ctx 9KB 11KB [ 2563.325813] fsnotify_mark_connector 2KB 3KB [ 2563.331693] net_namespace 113KB 131KB [ 2563.340772] shmem_inode_cache 7920KB 7983KB [ 2563.348288] task_delay_info 239KB 442KB [ 2563.353657] taskstats 58KB 61KB [ 2563.362593] proc_dir_entry 1042KB 1166KB [ 2563.368010] pde_opener 10KB 23KB [ 2563.373369] seq_file 309KB 350KB [ 2563.382415] sigqueue 48KB 70KB [ 2563.387896] kernfs_node_cache 18231KB 19069KB [ 2563.393259] mnt_cache 236KB 256KB [ 2563.402119] filp 7517KB 8238KB [ 2563.407535] names_cache 111562KB 111600KB [ 2563.413100] iint_cache 40KB 51KB [ 2563.422370] key_jar 4KB 7KB [ 2563.428217] uts_namespace 2KB 11KB [ 2563.433582] nsproxy 1KB 11KB [ 2563.442419] vm_area_struct 3536KB 3546KB [ 2563.450501] mm_struct 619KB 630KB [ 2563.462394] fs_cache 231KB 384KB [ 2563.469415] files_cache 747KB 1162KB [ 2563.474791] signal_cache 1420KB 2328KB [ 2563.487203] sighand_cache 617KB 700KB [ 2563.492640] task_struct 6577KB 6659KB [ 2563.502142] cred_jar 2130KB 2940KB [ 2563.512136] anon_vma_chain 1041KB 1334KB [ 2563.521591] anon_vma 121KB 231KB [ 2563.528001] pid 111KB 248KB [ 2563.534715] Acpi-Operand 156KB 198KB [ 2563.544244] Acpi-ParseExt 9KB 11KB [ 2563.552933] Acpi-Parse 41KB 47KB [ 2563.562466] Acpi-State 52KB 63KB [ 2563.569200] Acpi-Namespace 20KB 27KB [ 2563.574958] numa_policy 0KB 3KB [ 2563.586605] debug_objects_cache 2840KB 3129KB [ 2563.592815] trace_event_file 297KB 298KB [ 2563.602157] ftrace_event_field 398KB 401KB [ 2563.608464] pool_workqueue 139KB 160KB [ 2563.614051] page->ptl 608KB 1047KB [ 2563.623638] kmalloc-2097152 2050KB 2050KB [ 2563.629858] kmalloc-524288 2056KB 2056KB [ 2563.635219] kmalloc-262144 1290KB 1290KB [ 2563.644829] kmalloc-131072 650KB 650KB [ 2563.651059] kmalloc-65536 2376KB 2442KB [ 2563.662927] kmalloc-32768 2244KB 2442KB [ 2563.671415] kmalloc-16384 1353KB 1402KB [ 2563.683347] kmalloc-8192 5049KB 5148KB [ 2563.691220] kmalloc-4096 22197KB 22236KB [ 2563.702159] kmalloc-2048 16388KB 19099KB [ 2563.708711] kmalloc-1024 12376KB 14765KB [ 2563.714077] kmalloc-512 20571KB 20572KB [ 2563.723647] kmalloc-256 5428KB 6618KB [ 2563.730014] kmalloc-128 1299KB 1838KB [ 2563.740694] kmalloc-96 4309KB 5336KB [ 2563.747775] kmalloc-64 3270KB 5044KB [ 2563.753153] kmalloc-32 2155KB 3146KB [ 2563.764944] kmalloc-192 2112KB 3096KB [ 2563.772779] kmem_cache 177KB 180KB [ 2563.783390] Out of memory (oom_kill_allocating_task): Kill process 31038 (systemd-journal) score 0 or sacrifice child [ 2563.796037] Killed process 31038 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1544kB [ 2563.811923] oom_reaper: reaped process 31038 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1668kB [ 2563.943742] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2563.959659] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2563.982010] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2563.992122] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2564.000776] systemd[1]: Stopped Journal Service. [ 2564.022525] systemd[1]: Starting Journal Service... [ 2564.193509] systemd-journald[31203]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2564.678334] systemd[1]: Started Journal Service. 06:46:55 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:55 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:55 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x180, 0xc6, 0x3, {0x1, @pix={0x1d, 0x9, 0x35323645, 0x8, 0xffff, 0x401, 0x7, 0xfffffffc, 0x0, 0x2, 0x0, 0x1}}, 0x1}) 06:46:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:46:55 executing program 5: r0 = socket$inet(0x2, 0x5, 0x101) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:46:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000340)=0x3) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000640)={0x2, @vbi={0x101, 0xffff, 0x0, 0x35303553, [0x10001, 0x1], [0x7ff, 0x100], 0x2}}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000380)=0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ac, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x32}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9a70}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x89c}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4081}, 0x24008843) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0xffffff7f, 0x494e4f4b, 0x1, @discrete={0x5, 0x4}}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000003c0)={0x1, 0x6, [{0x7}]}) 06:46:55 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:46:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000340)=0x3) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000640)={0x2, @vbi={0x101, 0xffff, 0x0, 0x35303553, [0x10001, 0x1], [0x7ff, 0x100], 0x2}}) (async, rerun: 64) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000380)=0x2) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ac, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x32}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9a70}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x89c}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4081}, 0x24008843) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0xffffff7f, 0x494e4f4b, 0x1, @discrete={0x5, 0x4}}) (async) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000003c0)={0x1, 0x6, [{0x7}]}) 06:46:55 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:46:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:46:55 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async) clock_gettime(0x4, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x180, 0xc6, 0x3, {0x1, @pix={0x1d, 0x9, 0x35323645, 0x8, 0xffff, 0x401, 0x7, 0xfffffffc, 0x0, 0x2, 0x0, 0x1}}, 0x1}) 06:46:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000340)=0x3) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000640)={0x2, @vbi={0x101, 0xffff, 0x0, 0x35303553, [0x10001, 0x1], [0x7ff, 0x100], 0x2}}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000380)=0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ac, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x32}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9a70}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x89c}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4081}, 0x24008843) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0xffffff7f, 0x494e4f4b, 0x1, @discrete={0x5, 0x4}}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000003c0)={0x1, 0x6, [{0x7}]}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) syz_open_dev$vim2m(&(0x7f0000000300), 0xffffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000340)=0x3) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000640)={0x2, @vbi={0x101, 0xffff, 0x0, 0x35303553, [0x10001, 0x1], [0x7ff, 0x100], 0x2}}) (async) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000380)=0x2) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ac, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x32}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9a70}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x89c}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4081}, 0x24008843) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0xffffff7f, 0x494e4f4b, 0x1, @discrete={0x5, 0x4}}) (async) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000003c0)={0x1, 0x6, [{0x7}]}) (async) 06:46:56 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2572.142428] oom_reaper: reaped process 31223 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2572.172815] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2572.190310] systemd-journal cpuset=/ mems_allowed=0-1 [ 2572.195668] CPU: 1 PID: 31203 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2572.203636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2572.213158] Call Trace: [ 2572.215750] dump_stack+0x1fc/0x2ef [ 2572.219379] dump_header+0x15d/0xc3f [ 2572.223097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2572.228196] ? ___ratelimit+0x319/0x590 [ 2572.232173] oom_kill_process.cold+0x10/0x692 [ 2572.236672] ? check_preemption_disabled+0x41/0x280 [ 2572.241697] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2572.246973] out_of_memory+0x1072/0x1390 [ 2572.251150] ? oom_killer_disable+0x270/0x270 [ 2572.256027] ? mutex_trylock+0x15f/0x1a0 [ 2572.260233] __alloc_pages_nodemask+0x23a2/0x2890 [ 2572.265271] ? find_get_entry+0x4cd/0x8a0 [ 2572.270554] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2572.275483] alloc_pages_current+0x193/0x2a0 [ 2572.279964] filemap_fault+0x146e/0x2180 [ 2572.284016] ext4_filemap_fault+0x84/0xb0 [ 2572.288145] __do_fault+0x10b/0x4b0 [ 2572.291758] __handle_mm_fault+0x273b/0x41c0 [ 2572.296154] ? vm_insert_page+0x9c0/0x9c0 [ 2572.300292] ? check_preemption_disabled+0x41/0x280 [ 2572.305312] handle_mm_fault+0x436/0xb10 [ 2572.309360] __do_page_fault+0x68e/0xd60 [ 2572.313436] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2572.319326] ? spurious_fault+0x840/0x840 [ 2572.323471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2572.328530] ? page_fault+0x8/0x30 [ 2572.332263] page_fault+0x1e/0x30 [ 2572.335705] RIP: 0033:0x7fe74aae12e3 [ 2572.339412] Code: Bad RIP value. [ 2572.342812] RSP: 002b:00007ffd38946278 EFLAGS: 00010246 [ 2572.348157] RAX: 0000000000000001 RBX: 000055e7da3f21e0 RCX: 00007fe74aae12e3 [ 2572.355416] RDX: 0000000000000012 RSI: 00007ffd38946280 RDI: 000000000000000b [ 2572.362679] RBP: 00007ffd38946460 R08: 0000000000989680 R09: 00000291e18043e3 [ 2572.369952] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd38946280 [ 2572.377203] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d113d6e0e4 [ 2572.388545] Mem-Info: [ 2572.390001] syz-executor.5: vmalloc: allocation failure, allocated 1005662208 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2572.390979] active_anon:28129 inactive_anon:88051 isolated_anon:0 [ 2572.390979] active_file:25 inactive_file:44 isolated_file:0 [ 2572.390979] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2572.390979] slab_reclaimable:14091 slab_unreclaimable:117595 [ 2572.390979] mapped:22133 shmem:102259 pagetables:560 bounce:0 [ 2572.390979] free:13938 free_pcp:141 free_cma:0 [ 2572.416372] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2572.441837] Node 0 active_anon:110852kB inactive_anon:187152kB active_file:60kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88444kB dirty:8kB writeback:0kB shmem:242904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2572.453412] CPU: 0 PID: 31223 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2572.476565] Node 1 active_anon:1664kB inactive_anon:165052kB active_file:40kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2572.479400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2572.479410] Call Trace: [ 2572.509943] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.515912] dump_stack+0x1fc/0x2ef [ 2572.515930] warn_alloc.cold+0x7b/0x18f [ 2572.515946] ? zone_watermark_ok_safe+0x260/0x260 [ 2572.515959] ? rcu_nmi_exit+0xb3/0x180 [ 2572.515990] __vmalloc_area_node+0x4fd/0x780 [ 2572.518550] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2572.545090] ? __vmalloc_node_range+0x180/0x180 [ 2572.545104] ? _raw_spin_unlock+0x29/0x40 [ 2572.545116] ? __get_vm_area_node+0x2e2/0x3a0 [ 2572.545133] __vmalloc_node_range+0xed/0x180 [ 2572.545146] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2572.545159] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2572.545169] vmalloc_user+0x70/0xe0 [ 2572.545180] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2572.545193] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2572.545207] __vb2_queue_alloc+0x472/0xe60 [ 2572.545230] vb2_core_create_bufs+0x273/0x7e0 [ 2572.545244] ? __vb2_queue_free+0x870/0x870 [ 2572.545257] ? __video_do_ioctl+0x632/0xcd0 [ 2572.545275] ? pi_state_update_owner+0x450/0x450 [ 2572.545287] ? __mutex_lock+0x368/0x1190 [ 2572.545303] vb2_create_bufs+0x332/0x620 [ 2572.545319] ? mark_held_locks+0xf0/0xf0 [ 2572.545334] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2572.553560] Node 0 DMA32 free:17964kB min:35996kB low:44992kB high:53988kB active_anon:110852kB inactive_anon:183536kB active_file:60kB inactive_file:68kB unevictable:0kB writepending:8kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2144kB bounce:0kB free_pcp:312kB local_pcp:64kB free_cma:0kB [ 2572.557719] ? futex_wait_queue_me+0x404/0x5e0 [ 2572.557734] ? pi_state_update_owner+0x450/0x450 [ 2572.557746] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2572.557760] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2572.557779] v4l_create_bufs+0xb2/0x160 [ 2572.563210] lowmem_reserve[]: 0 0 1 1 1 [ 2572.566061] __video_do_ioctl+0x49a/0xcd0 [ 2572.566081] ? v4l_querycap+0x340/0x340 [ 2572.566098] ? __might_fault+0x192/0x1d0 [ 2572.566113] ? v4l_querycap+0x340/0x340 [ 2572.566126] video_usercopy+0x13f/0xfa0 [ 2572.566145] ? v4l_enumstd+0x60/0x60 [ 2572.576384] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.579913] ? do_futex+0x171/0x1880 [ 2572.584376] lowmem_reserve[]: 0 0 0 0 0 [ 2572.588770] ? mark_held_locks+0xf0/0xf0 [ 2572.588786] ? lock_downgrade+0x720/0x720 [ 2572.588800] ? check_preemption_disabled+0x41/0x280 [ 2572.588814] ? check_preemption_disabled+0x41/0x280 [ 2572.588835] ? video_usercopy+0xfa0/0xfa0 [ 2572.594421] Node 1 Normal free:26912kB min:53876kB low:67344kB high:80812kB active_anon:1664kB inactive_anon:165052kB active_file:24kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:96kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2572.598472] v4l2_ioctl+0x147/0x1a0 [ 2572.598486] ? video_devdata+0xa0/0xa0 [ 2572.598501] do_vfs_ioctl+0xcdb/0x12e0 [ 2572.598515] ? lock_downgrade+0x720/0x720 [ 2572.598532] ? check_preemption_disabled+0x41/0x280 [ 2572.607796] lowmem_reserve[]: 0 0 0 0 0 [ 2572.610562] ? ioctl_preallocate+0x200/0x200 [ 2572.615568] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2572.619245] ? __fget+0x356/0x510 [ 2572.623533] Node 0 DMA32: 225*4kB (ME) 30*8kB (UME) 146*16kB (ME) 72*32kB (ME) 37*64kB (ME) 14*128kB (UM) 5*256kB (M) 12*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 18388kB [ 2572.627838] ? do_dup2+0x450/0x450 [ 2572.627853] ? __se_sys_futex+0x298/0x3b0 [ 2572.627872] ksys_ioctl+0x9b/0xc0 [ 2572.627888] __x64_sys_ioctl+0x6f/0xb0 [ 2572.627902] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2572.627916] do_syscall_64+0xf9/0x620 [ 2572.627933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2572.627945] RIP: 0033:0x7f579755f0f9 [ 2572.627958] Code: Bad RIP value. [ 2572.627964] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2572.627979] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2572.639045] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2572.640788] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2572.644867] Node 1 Normal: 482*4kB (ME) 375*8kB (UME) 175*16kB (UME) 46*32kB (ME) 26*64kB (UME) 17*128kB (M) 4*256kB (M) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 27376kB [ 2572.649903] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2572.649914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2572.686854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2572.688158] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2572.693241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2572.717793] Mem-Info: [ 2572.725386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2572.734425] active_anon:28129 inactive_anon:88051 isolated_anon:0 [ 2572.734425] active_file:25 inactive_file:44 isolated_file:0 [ 2572.734425] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2572.734425] slab_reclaimable:14091 slab_unreclaimable:117595 [ 2572.734425] mapped:22133 shmem:102259 pagetables:560 bounce:0 [ 2572.734425] free:13938 free_pcp:141 free_cma:0 [ 2572.762622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2572.769533] Node 0 active_anon:110852kB inactive_anon:187152kB active_file:60kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88444kB dirty:8kB writeback:0kB shmem:242904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2572.769559] Node 1 active_anon:1664kB inactive_anon:165052kB active_file:40kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:166132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2572.769564] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.769594] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2572.769611] Node 0 DMA32 free:17964kB min:35996kB low:44992kB high:53988kB active_anon:110852kB inactive_anon:183536kB active_file:60kB inactive_file:68kB unevictable:0kB writepending:8kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2144kB bounce:0kB free_pcp:312kB local_pcp:248kB free_cma:0kB [ 2572.769652] lowmem_reserve[]: 0 0 1 1 1 [ 2572.769669] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.769697] lowmem_reserve[]: 0 0 0 0 0 [ 2572.769715] Node 1 Normal free:26912kB min:53876kB low:67344kB high:80812kB active_anon:1664kB inactive_anon:165052kB active_file:24kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:96kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2572.769745] lowmem_reserve[]: 0 0 0 0 0 [ 2572.769763] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2572.769878] Node 0 DMA32: 225*4kB (ME) 30*8kB (UME) 146*16kB (ME) 72*32kB (ME) 37*64kB (ME) 14*128kB (UM) 5*256kB (M) 12*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 18388kB [ 2572.769946] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2572.769993] Node 1 Normal: 482*4kB (ME) 375*8kB (UME) 175*16kB (UME) 46*32kB (ME) 26*64kB (UME) 17*128kB (M) 4*256kB (M) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 27376kB [ 2572.770071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2572.770083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2572.774210] 102312 total pagecache pages [ 2572.785847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2572.794901] 0 pages in swap cache [ 2572.829254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2572.838964] Swap cache stats: add 0, delete 0, find 0/0 [ 2572.845463] 102290 total pagecache pages [ 2572.846076] Free swap = 0kB [ 2572.868345] 0 pages in swap cache [ 2572.887481] Total swap = 0kB [ 2572.898951] Swap cache stats: add 0, delete 0, find 0/0 [ 2572.902340] 2097051 pages RAM [ 2572.902889] Free swap = 0kB [ 2572.902897] Total swap = 0kB [ 2572.911270] 0 pages HighMem/MovableOnly [ 2572.919676] 2097051 pages RAM [ 2572.927797] 369649 pages reserved [ 2572.933549] 0 pages HighMem/MovableOnly [ 2572.942970] 0 pages cma reserved [ 2572.956223] 369649 pages reserved [ 2572.973047] Unreclaimable slab info: [ 2572.984819] 0 pages cma reserved [ 2572.998126] Name Used Total [ 2573.415116] pid_2 61KB 64KB [ 2573.420540] batadv_tt_change_cache 2KB 11KB [ 2573.426587] batadv_tl_cache 6KB 20KB [ 2573.431965] TIPC 16KB 30KB [ 2573.437419] SCTPv6 26KB 49KB [ 2573.442969] DCCPv6 17KB 45KB [ 2573.448397] DCCP 16KB 42KB [ 2573.453791] RXRPC 19KB 45KB [ 2573.459209] rxrpc_call_jar 128KB 165KB [ 2573.464611] bridge_fdb_cache 12KB 27KB [ 2573.469976] fib6_nodes 198KB 308KB [ 2573.475385] ip6_dst_cache 579KB 798KB [ 2573.480758] RAWv6 131KB 148KB [ 2573.487910] UDPv6 37KB 45KB [ 2573.493771] TCPv6 27KB 36KB [ 2573.499394] nf_conntrack 13KB 15KB [ 2573.505264] t10_alua_lu_gp_cache 0KB 3KB [ 2573.510899] sd_ext_cdb 0KB 7KB [ 2573.516340] scsi_sense_cache 1056KB 1060KB [ 2573.521702] virtio_scsi_cmd 16KB 16KB [ 2573.527122] sgpool-128 8KB 8KB [ 2573.532575] sgpool-64 4KB 12KB [ 2573.539346] sgpool-32 2KB 15KB [ 2573.544765] sgpool-16 1KB 7KB [ 2573.550126] sgpool-8 0KB 7KB [ 2573.555560] mqueue_inode_cache 10KB 30KB [ 2573.561017] bio_post_read_ctx 14KB 15KB [ 2573.566514] bio-2 14KB 15KB [ 2573.571878] jfs_mp 7KB 7KB [ 2573.577341] cifs_small_rq 15KB 16KB [ 2573.582700] cifs_request 67KB 67KB [ 2573.589896] cifs_mpx_ids 0KB 7KB [ 2573.595343] nfs_commit_data 3KB 14KB [ 2573.600705] nfs_write_data 34KB 44KB [ 2573.606156] ext4_system_zone 1KB 7KB [ 2573.611537] bio-1 1KB 7KB [ 2573.616965] pid_namespace 2KB 11KB [ 2573.622331] rpc_buffers 17KB 25KB [ 2573.627853] rpc_tasks 2KB 7KB [ 2573.633215] UNIX 1220KB 1443KB [ 2573.639211] UDP-Lite 5KB 13KB [ 2573.644634] tcp_bind_bucket 1KB 8KB [ 2573.650009] ip_fib_trie 29KB 47KB [ 2573.655976] ip_fib_alias 141KB 213KB [ 2573.661708] ip_dst_cache 9KB 24KB [ 2573.667581] RAW 84KB 112KB [ 2573.673017] UDP 79KB 94KB [ 2573.678493] TCP 8KB 11KB [ 2573.683914] hugetlbfs_inode_cache 3KB 15KB [ 2573.691425] fscache_cookie_jar 1KB 7KB [ 2573.696977] eventpoll_pwq 18KB 43KB [ 2573.702400] eventpoll_epi 34KB 63KB [ 2573.707861] inotify_inode_mark 5KB 7KB [ 2573.713365] request_queue 199KB 199KB [ 2573.718885] blkdev_requests 1KB 3KB [ 2573.724299] blkdev_ioc 35KB 42KB [ 2573.729759] bio-0 1666KB 1668KB [ 2573.735231] biovec-max 2425KB 2425KB [ 2573.740643] biovec-64 1334KB 1338KB [ 2573.746182] biovec-16 160KB 198KB [ 2573.751599] bio_integrity_payload 1KB 8KB [ 2573.757399] khugepaged_mm_slot 12KB 19KB [ 2573.762901] uid_cache 0KB 4KB [ 2573.768336] dmaengine-unmap-2 0KB 3KB [ 2573.773749] skbuff_fclone_cache 64KB 67KB [ 2573.779385] skbuff_head_cache 10221KB 10413KB [ 2573.784830] configfs_dir_cache 3KB 7KB [ 2573.792064] file_lock_ctx 9KB 11KB [ 2573.797542] fsnotify_mark_connector 2KB 3KB [ 2573.803479] net_namespace 105KB 122KB [ 2573.808946] shmem_inode_cache 7920KB 7983KB [ 2573.814362] task_delay_info 185KB 438KB [ 2573.819842] taskstats 63KB 65KB [ 2573.825483] proc_dir_entry 1005KB 1166KB [ 2573.830841] pde_opener 10KB 23KB [ 2573.836536] seq_file 331KB 350KB [ 2573.841897] sigqueue 45KB 70KB [ 2573.847541] kernfs_node_cache 18225KB 19069KB [ 2573.852902] mnt_cache 236KB 256KB [ 2573.858536] filp 7604KB 8238KB [ 2573.863899] names_cache 115893KB 115914KB [ 2573.869540] iint_cache 39KB 51KB [ 2573.875246] key_jar 4KB 7KB [ 2573.880605] uts_namespace 2KB 11KB [ 2573.886290] nsproxy 1KB 11KB [ 2573.893358] vm_area_struct 3762KB 3770KB [ 2573.899111] mm_struct 643KB 650KB [ 2573.904479] fs_cache 135KB 380KB [ 2573.910222] files_cache 563KB 1061KB [ 2573.915927] signal_cache 1221KB 2242KB [ 2573.921292] sighand_cache 622KB 700KB [ 2573.927096] task_struct 6426KB 6451KB [ 2573.932460] cred_jar 2013KB 2940KB [ 2573.938177] anon_vma_chain 1116KB 1334KB [ 2573.943543] anon_vma 113KB 231KB [ 2573.949250] pid 68KB 248KB [ 2573.955057] Acpi-Operand 156KB 198KB [ 2573.960486] Acpi-ParseExt 9KB 11KB [ 2573.966422] Acpi-Parse 41KB 47KB [ 2573.971860] Acpi-State 52KB 63KB [ 2573.977567] Acpi-Namespace 20KB 27KB [ 2573.982937] numa_policy 0KB 3KB [ 2573.988656] debug_objects_cache 2839KB 3129KB [ 2573.996318] trace_event_file 297KB 298KB [ 2574.001699] ftrace_event_field 398KB 401KB [ 2574.008769] pool_workqueue 135KB 156KB [ 2574.014153] page->ptl 644KB 1047KB [ 2574.019959] kmalloc-2097152 2050KB 2050KB [ 2574.025670] kmalloc-524288 2056KB 2056KB [ 2574.031031] kmalloc-262144 1290KB 1290KB [ 2574.036766] kmalloc-131072 650KB 650KB [ 2574.042137] kmalloc-65536 2376KB 2442KB [ 2574.047841] kmalloc-32768 2178KB 2343KB [ 2574.053204] kmalloc-16384 1336KB 1386KB [ 2574.058905] kmalloc-8192 4917KB 5016KB [ 2574.064268] kmalloc-4096 20965KB 21024KB [ 2574.069996] kmalloc-2048 15389KB 18666KB [ 2574.075685] kmalloc-1024 11660KB 14694KB [ 2574.081048] kmalloc-512 20575KB 20610KB [ 2574.086712] kmalloc-256 5212KB 6618KB [ 2574.092160] kmalloc-128 1245KB 1838KB [ 2574.099535] kmalloc-96 4384KB 5336KB [ 2574.105210] kmalloc-64 3240KB 5044KB [ 2574.110570] kmalloc-32 2170KB 3146KB [ 2574.116237] kmalloc-192 1954KB 3096KB [ 2574.121600] kmem_cache 177KB 180KB [ 2574.127285] Out of memory (oom_kill_allocating_task): Kill process 31203 (systemd-journal) score 0 or sacrifice child [ 2574.138423] Killed process 31203 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1288kB [ 2574.150492] oom_reaper: reaped process 31203 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1288kB [ 2574.340553] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2574.355009] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2574.371414] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2574.386960] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2574.407104] systemd[1]: Stopped Journal Service. [ 2574.442674] systemd[1]: Starting Journal Service... [ 2574.601308] systemd-journald[31257]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2575.125134] systemd[1]: Started Journal Service. 06:47:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:47:05 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:05 executing program 5: r0 = socket$inet(0x2, 0x5, 0x101) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) socket$inet(0x2, 0x5, 0x101) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) 06:47:05 executing program 4: clock_gettime(0x4, &(0x7f0000000080)) (async) clock_gettime(0x4, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x180, 0xc6, 0x3, {0x1, @pix={0x1d, 0x9, 0x35323645, 0x8, 0xffff, 0x401, 0x7, 0xfffffffc, 0x0, 0x2, 0x0, 0x1}}, 0x1}) 06:47:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x6, 0x80000001, 0x1, 0x4}, 0x3, 0x7, &(0x7f0000000080)={{0x4, 0x8, 0x4, 0x5}}, 0x4, &(0x7f00000000c0)="a129a3829546932f850beea53b7ff828debbf651cee6918147910dd2e9dff82f2621d3f6de54dc461973", 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x40}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3131354f}) 06:47:05 executing program 4: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000000)="924cfd02108ae33c", 0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) clock_gettime(0x4, &(0x7f0000000080)) 06:47:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:05 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x6, 0x80000001, 0x1, 0x4}, 0x3, 0x7, &(0x7f0000000080)={{0x4, 0x8, 0x4, 0x5}}, 0x4, &(0x7f00000000c0)="a129a3829546932f850beea53b7ff828debbf651cee6918147910dd2e9dff82f2621d3f6de54dc461973", 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x40}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3131354f}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x6, 0x80000001, 0x1, 0x4}, 0x3, 0x7, &(0x7f0000000080)={{0x4, 0x8, 0x4, 0x5}}, 0x4, &(0x7f00000000c0)="a129a3829546932f850beea53b7ff828debbf651cee6918147910dd2e9dff82f2621d3f6de54dc461973", 0x1}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x40}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3131354f}) (async) 06:47:05 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:05 executing program 4: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000000)="924cfd02108ae33c", 0x8) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) (async) clock_gettime(0x4, &(0x7f0000000080)) 06:47:06 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:06 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:06 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x6, 0x80000001, 0x1, 0x4}, 0x3, 0x7, &(0x7f0000000080)={{0x4, 0x8, 0x4, 0x5}}, 0x4, &(0x7f00000000c0)="a129a3829546932f850beea53b7ff828debbf651cee6918147910dd2e9dff82f2621d3f6de54dc461973", 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x40}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3131354f}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x6, 0x80000001, 0x1, 0x4}, 0x3, 0x7, &(0x7f0000000080)={{0x4, 0x8, 0x4, 0x5}}, 0x4, &(0x7f00000000c0)="a129a3829546932f850beea53b7ff828debbf651cee6918147910dd2e9dff82f2621d3f6de54dc461973", 0x1}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x40}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3131354f}) (async) [ 2582.255840] oom_reaper: reaped process 31270 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2582.290594] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2582.305688] systemd-journal cpuset=/ mems_allowed=0-1 [ 2582.310906] CPU: 1 PID: 31257 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2582.318869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2582.328212] Call Trace: [ 2582.330835] dump_stack+0x1fc/0x2ef [ 2582.334466] dump_header+0x15d/0xc3f [ 2582.338219] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2582.343317] ? ___ratelimit+0x319/0x590 [ 2582.347292] oom_kill_process.cold+0x10/0x692 [ 2582.351786] ? check_preemption_disabled+0x41/0x280 [ 2582.356815] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2582.362090] out_of_memory+0x1072/0x1390 [ 2582.366158] ? oom_killer_disable+0x270/0x270 [ 2582.370652] ? mutex_trylock+0x15f/0x1a0 [ 2582.374714] __alloc_pages_nodemask+0x23a2/0x2890 [ 2582.379556] ? find_get_entry+0x4cd/0x8a0 [ 2582.383706] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2582.388568] alloc_pages_current+0x193/0x2a0 [ 2582.392971] filemap_fault+0x146e/0x2180 [ 2582.397043] ext4_filemap_fault+0x84/0xb0 [ 2582.401188] __do_fault+0x10b/0x4b0 [ 2582.404807] __handle_mm_fault+0x273b/0x41c0 [ 2582.409197] ? vm_insert_page+0x9c0/0x9c0 [ 2582.413337] ? check_preemption_disabled+0x41/0x280 [ 2582.418349] handle_mm_fault+0x436/0xb10 [ 2582.420129] syz-executor.5: vmalloc: allocation failure, allocated 990990336 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2582.422407] __do_page_fault+0x68e/0xd60 [ 2582.440224] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2582.442430] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2582.445235] ? spurious_fault+0x840/0x840 [ 2582.445249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2582.445266] ? page_fault+0x8/0x30 [ 2582.445280] page_fault+0x1e/0x30 [ 2582.466254] RIP: 0033:0x7f31e31bc2e3 [ 2582.469959] Code: Bad RIP value. [ 2582.473306] RSP: 002b:00007ffe77007248 EFLAGS: 00010246 [ 2582.478657] RAX: 0000000000000001 RBX: 00005611c38bd1e0 RCX: 00007f31e31bc2e3 [ 2582.485915] RDX: 0000000000000012 RSI: 00007ffe77007250 RDI: 000000000000000b [ 2582.493170] RBP: 00007ffe77007430 R08: 0000000000989680 R09: 0000029491edcd9e [ 2582.500424] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe77007250 [ 2582.507681] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d11477186a [ 2582.520223] CPU: 0 PID: 31270 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2582.527786] Mem-Info: [ 2582.528138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2582.530548] active_anon:28175 inactive_anon:90083 isolated_anon:0 [ 2582.530548] active_file:46 inactive_file:0 isolated_file:0 [ 2582.530548] unevictable:0 dirty:17 writeback:1 unstable:0 [ 2582.530548] slab_reclaimable:14214 slab_unreclaimable:118420 [ 2582.530548] mapped:22142 shmem:104307 pagetables:556 bounce:0 [ 2582.530548] free:13913 free_pcp:874 free_cma:0 [ 2582.539857] Call Trace: [ 2582.539880] dump_stack+0x1fc/0x2ef [ 2582.539896] warn_alloc.cold+0x7b/0x18f [ 2582.539930] ? zone_watermark_ok_safe+0x260/0x260 [ 2582.573253] Node 0 active_anon:111472kB inactive_anon:189964kB active_file:96kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88480kB dirty:48kB writeback:4kB shmem:245780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2582.575777] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2582.575803] ? retint_kernel+0x2d/0x2d [ 2582.579414] Node 1 active_anon:1228kB inactive_anon:170368kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:20kB writeback:0kB shmem:171448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2582.583364] __vmalloc_area_node+0x4fd/0x780 [ 2582.588187] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.616059] ? __vmalloc_node_range+0x180/0x180 [ 2582.616074] ? _raw_spin_unlock+0x29/0x40 [ 2582.616086] ? __get_vm_area_node+0x2e2/0x3a0 [ 2582.616104] __vmalloc_node_range+0xed/0x180 [ 2582.616118] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2582.616130] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2582.616141] vmalloc_user+0x70/0xe0 [ 2582.616154] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2582.616168] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2582.616181] __vb2_queue_alloc+0x472/0xe60 [ 2582.616205] vb2_core_create_bufs+0x273/0x7e0 [ 2582.616220] ? __vb2_queue_free+0x870/0x870 [ 2582.616234] ? __video_do_ioctl+0x632/0xcd0 [ 2582.616250] ? pi_state_update_owner+0x450/0x450 [ 2582.616264] ? __mutex_lock+0x368/0x1190 [ 2582.616279] vb2_create_bufs+0x332/0x620 [ 2582.616296] ? mark_held_locks+0xf0/0xf0 [ 2582.616310] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2582.616321] ? futex_wait_queue_me+0x404/0x5e0 [ 2582.616336] ? pi_state_update_owner+0x450/0x450 [ 2582.616349] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2582.616364] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2582.616383] v4l_create_bufs+0xb2/0x160 [ 2582.616401] __video_do_ioctl+0x49a/0xcd0 [ 2582.616422] ? v4l_querycap+0x340/0x340 [ 2582.616440] ? __might_fault+0x192/0x1d0 [ 2582.616456] ? v4l_querycap+0x340/0x340 [ 2582.616471] video_usercopy+0x13f/0xfa0 [ 2582.616491] ? v4l_enumstd+0x60/0x60 [ 2582.616505] ? do_futex+0x171/0x1880 [ 2582.616520] ? mark_held_locks+0xf0/0xf0 [ 2582.616538] ? debug_check_no_obj_freed+0x201/0x490 [ 2582.616559] ? video_usercopy+0xfa0/0xfa0 [ 2582.616569] v4l2_ioctl+0x147/0x1a0 [ 2582.616581] ? video_devdata+0xa0/0xa0 [ 2582.616596] do_vfs_ioctl+0xcdb/0x12e0 [ 2582.616610] ? lock_downgrade+0x720/0x720 [ 2582.616630] ? check_preemption_disabled+0x41/0x280 [ 2582.616644] ? ioctl_preallocate+0x200/0x200 [ 2582.616662] ? __fget+0x356/0x510 [ 2582.616677] ? do_dup2+0x450/0x450 [ 2582.616691] ? __se_sys_futex+0x298/0x3b0 [ 2582.616712] ksys_ioctl+0x9b/0xc0 [ 2582.616727] __x64_sys_ioctl+0x6f/0xb0 [ 2582.616741] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2582.616754] do_syscall_64+0xf9/0x620 [ 2582.616771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2582.616782] RIP: 0033:0x7f579755f0f9 [ 2582.616795] Code: Bad RIP value. [ 2582.616802] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2582.616815] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2582.616822] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2582.616830] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2582.616837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2582.616845] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2582.623325] Mem-Info: [ 2582.634858] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2582.659601] active_anon:28175 inactive_anon:90083 isolated_anon:0 [ 2582.659601] active_file:46 inactive_file:0 isolated_file:0 [ 2582.659601] unevictable:0 dirty:17 writeback:1 unstable:0 [ 2582.659601] slab_reclaimable:14214 slab_unreclaimable:118420 [ 2582.659601] mapped:22142 shmem:104307 pagetables:556 bounce:0 [ 2582.659601] free:13913 free_pcp:874 free_cma:0 [ 2582.692159] Node 0 DMA32 free:17896kB min:35996kB low:44992kB high:53988kB active_anon:111472kB inactive_anon:186348kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:152kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2220kB bounce:0kB free_pcp:1932kB local_pcp:324kB free_cma:0kB [ 2582.699533] Node 0 active_anon:111472kB inactive_anon:189964kB active_file:96kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88480kB dirty:48kB writeback:4kB shmem:245780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2582.699560] Node 1 active_anon:1228kB inactive_anon:170368kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:20kB writeback:0kB shmem:171448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2582.699566] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.699598] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2582.712205] lowmem_reserve[]: 0 0 1 1 1 [ 2582.719955] Node 0 DMA32 free:17896kB min:35996kB low:44992kB high:53988kB active_anon:111472kB inactive_anon:186348kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:152kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2220kB bounce:0kB free_pcp:1932kB local_pcp:1608kB free_cma:0kB [ 2582.721672] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.725838] lowmem_reserve[]: 0 0 1 1 1 [ 2582.725856] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.725884] lowmem_reserve[]: 0 0 0 0 0 [ 2582.725900] Node 1 Normal free:26868kB min:53876kB low:67344kB high:80812kB active_anon:1228kB inactive_anon:170368kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:120kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:4kB bounce:0kB free_pcp:1564kB local_pcp:248kB free_cma:0kB [ 2582.736915] lowmem_reserve[]: 0 0 0 0 0 [ 2582.744179] lowmem_reserve[]: 0 0 0 0 0 [ 2582.751547] Node 1 Normal free:26868kB min:53876kB low:67344kB high:80812kB active_anon:1228kB inactive_anon:170368kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:120kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:4kB bounce:0kB free_pcp:1564kB local_pcp:1316kB free_cma:0kB [ 2582.753300] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10880kB [ 2582.758634] lowmem_reserve[]: 0 0 0 0 0 [ 2582.760222] Node 0 DMA32: 230*4kB (UME) 84*8kB (UME) 163*16kB (UME) 108*32kB (UME) 28*64kB (ME) 6*128kB (UM) 2*256kB (M) 12*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17896kB [ 2582.770679] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10880kB [ 2582.777810] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2582.785120] Node 0 DMA32: 230*4kB (UME) 84*8kB (UME) 163*16kB (UME) 108*32kB (UME) 28*64kB (ME) 6*128kB (UM) 2*256kB (M) 12*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17896kB [ 2582.789666] Node 1 Normal: 478*4kB (ME) 349*8kB (ME) 123*16kB (ME) 17*32kB (ME) 5*64kB (UME) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 27120kB [ 2582.793352] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2582.800549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2582.811312] Node 1 Normal: 478*4kB (ME) 349*8kB (ME) 123*16kB (ME) 17*32kB (ME) 5*64kB (UME) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 27120kB [ 2582.813183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2582.821532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2582.829177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2582.835312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2582.837890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2582.841765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2582.849133] 104332 total pagecache pages [ 2582.858441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2582.858982] 0 pages in swap cache [ 2582.862542] 104332 total pagecache pages [ 2582.869993] Swap cache stats: add 0, delete 0, find 0/0 [ 2582.873681] 0 pages in swap cache [ 2582.875184] Free swap = 0kB [ 2582.878916] Swap cache stats: add 0, delete 0, find 0/0 [ 2582.882709] Total swap = 0kB [ 2582.894439] Free swap = 0kB [ 2582.902569] 2097051 pages RAM [ 2582.904430] Total swap = 0kB [ 2582.910644] 0 pages HighMem/MovableOnly [ 2582.927980] 2097051 pages RAM [ 2582.935052] 369649 pages reserved [ 2582.939250] 0 pages HighMem/MovableOnly [ 2582.946236] 0 pages cma reserved [ 2582.953010] 369649 pages reserved [ 2583.518510] 0 pages cma reserved [ 2583.521878] Unreclaimable slab info: [ 2583.525642] Name Used Total [ 2583.531184] pid_2 67KB 72KB [ 2583.536663] batadv_tt_change_cache 2KB 11KB [ 2583.543250] batadv_tl_cache 5KB 20KB [ 2583.548681] TIPC 16KB 30KB [ 2583.554108] SCTPv6 26KB 49KB [ 2583.559478] DCCPv6 17KB 45KB [ 2583.564915] DCCP 16KB 42KB [ 2583.570307] RXRPC 19KB 45KB [ 2583.575717] rxrpc_call_jar 128KB 165KB [ 2583.581083] bridge_fdb_cache 9KB 27KB [ 2583.586483] fib6_nodes 184KB 308KB [ 2583.591841] ip6_dst_cache 536KB 795KB [ 2583.597258] RAWv6 131KB 148KB [ 2583.602621] UDPv6 33KB 41KB [ 2583.608019] TCPv6 30KB 42KB [ 2583.613385] nf_conntrack 13KB 15KB [ 2583.620527] t10_alua_lu_gp_cache 0KB 3KB [ 2583.626216] sd_ext_cdb 0KB 7KB [ 2583.631576] scsi_sense_cache 1056KB 1060KB [ 2583.636988] virtio_scsi_cmd 16KB 16KB [ 2583.642356] sgpool-128 8KB 8KB [ 2583.647794] sgpool-64 4KB 12KB [ 2583.653153] sgpool-32 2KB 15KB [ 2583.658556] sgpool-16 1KB 7KB [ 2583.663963] sgpool-8 0KB 7KB [ 2583.669330] mqueue_inode_cache 10KB 30KB [ 2583.674831] bio_post_read_ctx 14KB 15KB [ 2583.680254] bio-2 14KB 15KB [ 2583.685663] jfs_mp 7KB 7KB [ 2583.691051] cifs_small_rq 15KB 16KB [ 2583.696460] cifs_request 67KB 67KB [ 2583.701819] cifs_mpx_ids 0KB 7KB [ 2583.707233] nfs_commit_data 3KB 14KB [ 2583.712588] nfs_write_data 34KB 44KB [ 2583.718063] ext4_system_zone 1KB 7KB [ 2583.725241] bio-1 1KB 7KB [ 2583.730609] pid_namespace 2KB 11KB [ 2583.736038] rpc_buffers 17KB 25KB [ 2583.741398] rpc_tasks 2KB 7KB [ 2583.746881] UNIX 1057KB 1293KB [ 2583.752262] UDP-Lite 5KB 13KB [ 2583.757688] tcp_bind_bucket 1KB 8KB [ 2583.763055] ip_fib_trie 29KB 47KB [ 2583.768450] ip_fib_alias 133KB 213KB [ 2583.773865] ip_dst_cache 9KB 24KB [ 2583.779224] RAW 84KB 112KB [ 2583.790238] UDP 70KB 94KB [ 2583.798030] TCP 11KB 16KB [ 2583.803401] hugetlbfs_inode_cache 3KB 15KB [ 2583.815003] fscache_cookie_jar 1KB 7KB [ 2583.820458] eventpoll_pwq 19KB 43KB [ 2583.838046] eventpoll_epi 35KB 63KB [ 2583.843428] inotify_inode_mark 5KB 7KB [ 2583.852052] request_queue 199KB 199KB [ 2583.859341] blkdev_requests 1KB 3KB [ 2583.868795] blkdev_ioc 35KB 42KB [ 2583.876189] bio-0 1684KB 1740KB [ 2583.881558] biovec-max 2458KB 2458KB [ 2583.890116] biovec-64 1402KB 1425KB [ 2583.897477] biovec-16 153KB 198KB [ 2583.902844] bio_integrity_payload 1KB 8KB [ 2583.911775] khugepaged_mm_slot 13KB 19KB [ 2583.918862] uid_cache 0KB 4KB [ 2583.929009] dmaengine-unmap-2 0KB 3KB [ 2583.936007] skbuff_fclone_cache 70KB 75KB [ 2583.941554] skbuff_head_cache 10002KB 10391KB [ 2583.950276] configfs_dir_cache 3KB 7KB [ 2583.957393] file_lock_ctx 9KB 11KB [ 2583.962762] fsnotify_mark_connector 2KB 3KB [ 2583.971993] net_namespace 105KB 122KB [ 2583.979422] shmem_inode_cache 7907KB 7975KB [ 2583.987980] task_delay_info 185KB 438KB [ 2583.995536] taskstats 70KB 72KB [ 2584.000906] proc_dir_entry 999KB 1166KB [ 2584.010139] pde_opener 9KB 23KB [ 2584.019189] seq_file 318KB 350KB [ 2584.031037] sigqueue 43KB 70KB [ 2584.038246] kernfs_node_cache 18226KB 19069KB [ 2584.047063] mnt_cache 236KB 256KB [ 2584.052435] filp 7583KB 8238KB [ 2584.059620] names_cache 119969KB 120020KB [ 2584.068338] iint_cache 41KB 51KB [ 2584.075566] key_jar 4KB 7KB [ 2584.080942] uts_namespace 2KB 11KB [ 2584.089596] nsproxy 1KB 11KB [ 2584.096772] vm_area_struct 3683KB 3820KB [ 2584.102143] mm_struct 637KB 656KB [ 2584.110912] fs_cache 125KB 376KB [ 2584.118067] files_cache 507KB 1016KB [ 2584.127086] signal_cache 1167KB 2185KB [ 2584.134634] sighand_cache 619KB 700KB [ 2584.140002] task_struct 6489KB 6508KB [ 2584.145464] cred_jar 2005KB 2940KB [ 2584.150827] anon_vma_chain 1091KB 1330KB [ 2584.156479] anon_vma 132KB 231KB [ 2584.161841] pid 62KB 248KB [ 2584.167270] Acpi-Operand 156KB 198KB [ 2584.172788] Acpi-ParseExt 9KB 11KB [ 2584.178266] Acpi-Parse 41KB 47KB [ 2584.183855] Acpi-State 52KB 63KB [ 2584.189327] Acpi-Namespace 20KB 27KB [ 2584.194752] numa_policy 0KB 3KB [ 2584.200277] debug_objects_cache 2830KB 3129KB [ 2584.205885] trace_event_file 297KB 298KB [ 2584.211542] ftrace_event_field 398KB 401KB [ 2584.217049] pool_workqueue 131KB 156KB [ 2584.222585] page->ptl 648KB 1047KB [ 2584.228355] kmalloc-2097152 2050KB 2050KB [ 2584.235610] kmalloc-524288 2056KB 2056KB [ 2584.240984] kmalloc-262144 1290KB 1290KB [ 2584.246594] kmalloc-131072 650KB 650KB [ 2584.251956] kmalloc-65536 2376KB 2442KB [ 2584.257404] kmalloc-32768 2178KB 2343KB [ 2584.262937] kmalloc-16384 1270KB 1386KB [ 2584.268396] kmalloc-8192 4455KB 4554KB [ 2584.274024] kmalloc-4096 19473KB 19533KB [ 2584.279383] kmalloc-2048 14564KB 18117KB [ 2584.284845] kmalloc-1024 10917KB 14623KB [ 2584.290414] kmalloc-512 20474KB 20580KB [ 2584.295851] kmalloc-256 4896KB 6611KB [ 2584.301379] kmalloc-128 1212KB 1838KB [ 2584.306810] kmalloc-96 4399KB 5336KB [ 2584.312382] kmalloc-64 3228KB 5040KB [ 2584.317815] kmalloc-32 2173KB 3146KB [ 2584.323398] kmalloc-192 1899KB 3096KB [ 2584.329094] kmem_cache 177KB 180KB [ 2584.334539] Out of memory (oom_kill_allocating_task): Kill process 31257 (systemd-journal) score 0 or sacrifice child [ 2584.347491] Killed process 31257 (systemd-journal) total-vm:46096kB, anon-rss:456kB, file-rss:0kB, shmem-rss:1296kB [ 2584.359290] oom_reaper: reaped process 31257 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 2584.496318] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2584.521155] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2584.538201] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2584.548676] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2584.558755] systemd[1]: Stopped Journal Service. [ 2584.592642] systemd[1]: Starting Journal Service... [ 2584.751016] systemd-journald[31314]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2585.232614] systemd[1]: Started Journal Service. 06:47:16 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:16 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x2, 0x0, 0x6, 0x4, 0x100, 0xfffffffffffffff8}, @alu={0x0, 0x0, 0x5, 0x3, 0x5, 0xc, 0x8}, @ldst={0x2, 0x1, 0x1, 0x0, 0xa, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='GPL\x00', 0xd2c, 0xdf, &(0x7f00000000c0)=""/223, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0xfffffbff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, r1, 0x1, r2, r3]}, 0x80) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:47:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0x4, 0x1, 0x4, 0x40e2796f21421320, 0x4, {0x77359400}, {0x1, 0x1, 0x7, 0x1f, 0x3, 0x4, "ab8bbc27"}, 0x785, 0x4, {}, 0x0, 0x0, r1}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:47:16 executing program 2: process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000080)=""/65, 0x41}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/167, 0xa7}], 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000400)={0x2a, 0xe3, 0x6, 0x0, 0x3ff, 0x4, 0x0, 0x9d, 0xf0, 0xe0, 0x4, 0x6, 0x0, 0x7, 0x34f1d7cc, 0xff, 0x3, 0x80, 0x2, '\x00', 0xc, 0x8}) 06:47:16 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:16 executing program 4: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000000)="924cfd02108ae33c", 0x8) (async) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000000)="924cfd02108ae33c", 0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) clock_gettime(0x4, &(0x7f0000000080)) 06:47:16 executing program 2: process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000080)=""/65, 0x41}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/167, 0xa7}], 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000400)={0x2a, 0xe3, 0x6, 0x0, 0x3ff, 0x4, 0x0, 0x9d, 0xf0, 0xe0, 0x4, 0x6, 0x0, 0x7, 0x34f1d7cc, 0xff, 0x3, 0x80, 0x2, '\x00', 0xc, 0x8}) process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000080)=""/65, 0x41}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/167, 0xa7}], 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000400)={0x2a, 0xe3, 0x6, 0x0, 0x3ff, 0x4, 0x0, 0x9d, 0xf0, 0xe0, 0x4, 0x6, 0x0, 0x7, 0x34f1d7cc, 0xff, 0x3, 0x80, 0x2, '\x00', 0xc, 0x8}) (async) 06:47:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0x4, 0x1, 0x4, 0x40e2796f21421320, 0x4, {0x77359400}, {0x1, 0x1, 0x7, 0x1f, 0x3, 0x4, "ab8bbc27"}, 0x785, 0x4, {}, 0x0, 0x0, r1}) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:47:16 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:16 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:16 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:16 executing program 2: process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000080)=""/65, 0x41}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/167, 0xa7}], 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000400)={0x2a, 0xe3, 0x6, 0x0, 0x3ff, 0x4, 0x0, 0x9d, 0xf0, 0xe0, 0x4, 0x6, 0x0, 0x7, 0x34f1d7cc, 0xff, 0x3, 0x80, 0x2, '\x00', 0xc, 0x8}) 06:47:16 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:16 executing program 2: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0xffff, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:47:16 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:16 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:16 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2591.344928] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.350510] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.630978] oom_reaper: reaped process 31329 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2592.666217] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2592.678112] in:imklog cpuset=/ mems_allowed=0-1 [ 2592.682918] CPU: 0 PID: 31146 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2592.690358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2592.699705] Call Trace: [ 2592.702296] dump_stack+0x1fc/0x2ef [ 2592.705923] dump_header+0x15d/0xc3f [ 2592.709640] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2592.714741] ? ___ratelimit+0x319/0x590 [ 2592.718714] oom_kill_process.cold+0x10/0x692 [ 2592.723209] ? check_preemption_disabled+0x41/0x280 [ 2592.728231] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2592.733510] out_of_memory+0x1072/0x1390 [ 2592.737576] ? oom_killer_disable+0x270/0x270 [ 2592.742078] ? mutex_trylock+0x15f/0x1a0 [ 2592.746145] __alloc_pages_nodemask+0x23a2/0x2890 [ 2592.750994] ? find_get_entry+0x4cd/0x8a0 [ 2592.755149] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2592.760189] alloc_pages_current+0x193/0x2a0 [ 2592.764597] filemap_fault+0x146e/0x2180 [ 2592.768671] ext4_filemap_fault+0x84/0xb0 [ 2592.772820] __do_fault+0x10b/0x4b0 [ 2592.776448] __handle_mm_fault+0x273b/0x41c0 [ 2592.780872] ? vm_insert_page+0x9c0/0x9c0 [ 2592.785017] ? lock_downgrade+0x720/0x720 [ 2592.789173] ? check_preemption_disabled+0x41/0x280 [ 2592.794201] handle_mm_fault+0x436/0xb10 [ 2592.798270] __do_page_fault+0x68e/0xd60 [ 2592.802324] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2592.807319] ? spurious_fault+0x840/0x840 [ 2592.811447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2592.812645] syz-executor.5: vmalloc: allocation failure, allocated 988184576 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2592.816278] ? page_fault+0x8/0x30 [ 2592.833504] page_fault+0x1e/0x30 [ 2592.836322] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2592.836958] RIP: 0033:0x7f0dc557722d [ 2592.845739] Code: Bad RIP value. [ 2592.849087] RSP: 002b:00007f0dc2f13580 EFLAGS: 00010293 [ 2592.854440] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f0dc557722d [ 2592.861698] RDX: 0000000000001fa0 RSI: 00007f0dc2f13da0 RDI: 0000000000000004 [ 2592.868955] RBP: 000055e8969e69d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.876210] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f0dc2f13da0 [ 2592.883469] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f0dc2f13e20 [ 2592.890747] CPU: 1 PID: 31329 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2592.895021] Mem-Info: [ 2592.898626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2592.901038] active_anon:28207 inactive_anon:90083 isolated_anon:0 [ 2592.901038] active_file:17 inactive_file:16 isolated_file:0 [ 2592.901038] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2592.901038] slab_reclaimable:14390 slab_unreclaimable:119669 [ 2592.901038] mapped:22111 shmem:104307 pagetables:558 bounce:0 [ 2592.901038] free:13922 free_pcp:152 free_cma:0 [ 2592.910348] Call Trace: [ 2592.910370] dump_stack+0x1fc/0x2ef [ 2592.910413] warn_alloc.cold+0x7b/0x18f [ 2592.943742] Node 0 active_anon:111592kB inactive_anon:188552kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88444kB dirty:0kB writeback:0kB shmem:244368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2592.946278] ? zone_watermark_ok_safe+0x260/0x260 [ 2592.949887] Node 1 active_anon:1236kB inactive_anon:171780kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2592.953847] ? retint_kernel+0x2d/0x2d [ 2592.953883] __vmalloc_area_node+0x4fd/0x780 [ 2592.981663] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2592.986483] ? __vmalloc_node_range+0x180/0x180 [ 2592.986501] ? _raw_spin_unlock+0x29/0x40 [ 2593.013288] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2593.017149] ? __get_vm_area_node+0x2e2/0x3a0 [ 2593.021543] Node 0 DMA32 free:17712kB min:35996kB low:44992kB high:53988kB active_anon:111592kB inactive_anon:184936kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:356kB local_pcp:16kB free_cma:0kB [ 2593.047901] __vmalloc_node_range+0xed/0x180 [ 2593.047918] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2593.047936] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2593.052587] lowmem_reserve[]: 0 0 1 1 1 [ 2593.056706] vmalloc_user+0x70/0xe0 [ 2593.061691] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.066172] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2593.066187] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2593.066203] __vb2_queue_alloc+0x472/0xe60 [ 2593.095166] lowmem_reserve[]: 0 0 0 0 0 [ 2593.099553] vb2_core_create_bufs+0x273/0x7e0 [ 2593.103855] Node 1 Normal free:27100kB min:53876kB low:67344kB high:80812kB active_anon:1236kB inactive_anon:171780kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2593.109183] ? __vb2_queue_free+0x870/0x870 [ 2593.113144] lowmem_reserve[]: 0 0 0 0 0 [ 2593.116746] ? __video_do_ioctl+0x632/0xcd0 [ 2593.142578] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2593.146867] ? __mutex_lock+0x368/0x1190 [ 2593.150998] Node 0 DMA32: 314*4kB (ME) 137*8kB (UME) 168*16kB (UME) 112*32kB (UME) 42*64kB (ME) 24*128kB (UM) 5*256kB (UM) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17712kB [ 2593.155223] vb2_create_bufs+0x332/0x620 [ 2593.155246] ? mark_held_locks+0xf0/0xf0 [ 2593.159194] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2593.163687] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2593.163704] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2593.163720] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2593.163741] v4l_create_bufs+0xb2/0x160 [ 2593.192051] Node 1 Normal: 507*4kB (UME) 360*8kB (UME) 77*16kB (ME) 19*32kB (UME) 8*64kB (UME) 1*128kB (U) 3*256kB (UM) 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 27100kB [ 2593.196333] __video_do_ioctl+0x49a/0xcd0 [ 2593.196357] ? v4l_querycap+0x340/0x340 [ 2593.200302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2593.204607] ? __might_fault+0x192/0x1d0 [ 2593.204630] ? v4l_querycap+0x340/0x340 [ 2593.219106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2593.223131] video_usercopy+0x13f/0xfa0 [ 2593.223157] ? v4l_enumstd+0x60/0x60 [ 2593.238587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2593.242612] ? do_futex+0x171/0x1880 [ 2593.242628] ? mark_held_locks+0xf0/0xf0 [ 2593.242647] ? debug_check_no_obj_freed+0x201/0x490 [ 2593.246684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2593.258112] ? video_usercopy+0xfa0/0xfa0 [ 2593.258129] v4l2_ioctl+0x147/0x1a0 [ 2593.263229] 104340 total pagecache pages [ 2593.268303] ? video_devdata+0xa0/0xa0 [ 2593.273531] 0 pages in swap cache [ 2593.277486] do_vfs_ioctl+0xcdb/0x12e0 [ 2593.293991] Swap cache stats: add 0, delete 0, find 0/0 [ 2593.298083] ? lock_downgrade+0x720/0x720 [ 2593.302034] Free swap = 0kB [ 2593.310852] ? check_preemption_disabled+0x41/0x280 [ 2593.310866] ? ioctl_preallocate+0x200/0x200 [ 2593.310883] ? __fget+0x356/0x510 [ 2593.310899] ? do_dup2+0x450/0x450 [ 2593.310918] ? __se_sys_futex+0x298/0x3b0 [ 2593.327940] Total swap = 0kB [ 2593.331443] ksys_ioctl+0x9b/0xc0 [ 2593.335242] 2097051 pages RAM [ 2593.344034] __x64_sys_ioctl+0x6f/0xb0 [ 2593.344049] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2593.344065] do_syscall_64+0xf9/0x620 [ 2593.347751] 0 pages HighMem/MovableOnly [ 2593.351822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2593.356854] 369649 pages reserved [ 2593.365378] RIP: 0033:0x7f579755f0f9 [ 2593.365397] Code: Bad RIP value. [ 2593.369533] 0 pages cma reserved [ 2593.373138] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2593.373151] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2593.373158] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000007 [ 2593.373166] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2593.373173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.373180] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2593.401452] Mem-Info: [ 2593.406427] Unreclaimable slab info: [ 2593.427085] active_anon:28207 inactive_anon:90083 isolated_anon:0 [ 2593.427085] active_file:17 inactive_file:16 isolated_file:0 [ 2593.427085] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2593.427085] slab_reclaimable:14390 slab_unreclaimable:119669 [ 2593.427085] mapped:22111 shmem:104307 pagetables:558 bounce:0 [ 2593.427085] free:13922 free_pcp:152 free_cma:0 [ 2593.428582] Bluetooth: hci2: command 0x0406 tx timeout [ 2593.431678] Node 0 active_anon:111592kB inactive_anon:188552kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88444kB dirty:0kB writeback:0kB shmem:244368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2593.435561] Name Used Total [ 2593.435576] pid_2 73KB 76KB [ 2593.435645] batadv_tt_change_cache 0KB 11KB [ 2593.456578] Node 1 active_anon:1236kB inactive_anon:171780kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2593.456715] Bluetooth: hci4: command 0x0406 tx timeout [ 2593.460361] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.463819] Bluetooth: hci5: command 0x0406 tx timeout [ 2593.480852] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2593.482178] batadv_tl_cache 4KB 20KB [ 2593.501083] Node 0 DMA32 free:17712kB min:35996kB low:44992kB high:53988kB active_anon:111592kB inactive_anon:184936kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:356kB local_pcp:340kB free_cma:0kB [ 2593.504163] TIPC 16KB 30KB [ 2593.504185] SCTPv6 22KB 43KB [ 2593.504202] DCCPv6 17KB 45KB [ 2593.504215] DCCP 16KB 42KB [ 2593.504255] RXRPC 19KB 45KB [ 2593.504265] rxrpc_call_jar 128KB 165KB [ 2593.504278] bridge_fdb_cache 9KB 23KB [ 2593.504294] fib6_nodes 160KB 304KB [ 2593.504303] ip6_dst_cache 437KB 772KB [ 2593.504317] RAWv6 111KB 148KB [ 2593.522188] lowmem_reserve[]: 0 0 1 1 1 [ 2593.551127] UDPv6 33KB 41KB [ 2593.551141] TCPv6 30KB 42KB [ 2593.551162] nf_conntrack 9KB 15KB [ 2593.551225] t10_alua_lu_gp_cache 0KB 3KB [ 2593.551240] sd_ext_cdb 0KB 7KB [ 2593.551250] scsi_sense_cache 1056KB 1060KB [ 2593.551260] virtio_scsi_cmd 16KB 16KB [ 2593.551273] sgpool-128 8KB 8KB [ 2593.551283] sgpool-64 4KB 12KB [ 2593.551292] sgpool-32 2KB 15KB [ 2593.551301] sgpool-16 1KB 7KB [ 2593.551311] sgpool-8 0KB 7KB [ 2593.551329] mqueue_inode_cache 10KB 30KB [ 2593.551345] bio_post_read_ctx 14KB 15KB [ 2593.551416] bio-2 14KB 15KB [ 2593.551425] jfs_mp 7KB 7KB [ 2593.551465] cifs_small_rq 15KB 16KB [ 2593.551474] cifs_request 67KB 67KB [ 2593.551483] cifs_mpx_ids 0KB 7KB [ 2593.551512] nfs_commit_data 3KB 14KB [ 2593.551521] nfs_write_data 34KB 44KB [ 2593.551563] ext4_system_zone 1KB 7KB [ 2593.551594] bio-1 1KB 7KB [ 2593.551605] pid_namespace 2KB 11KB [ 2593.551626] rpc_buffers 17KB 25KB [ 2593.551635] rpc_tasks 2KB 7KB [ 2593.551644] UNIX 781KB 1016KB [ 2593.551658] UDP-Lite 5KB 13KB [ 2593.551667] tcp_bind_bucket 1KB 8KB [ 2593.551685] ip_fib_trie 23KB 47KB [ 2593.551694] ip_fib_alias 114KB 213KB [ 2593.551704] ip_dst_cache 8KB 24KB [ 2593.551715] RAW 84KB 112KB [ 2593.551725] UDP 70KB 94KB [ 2593.551738] TCP 11KB 16KB [ 2593.551750] hugetlbfs_inode_cache 3KB 15KB [ 2593.551759] fscache_cookie_jar 1KB 7KB [ 2593.551769] eventpoll_pwq 21KB 43KB [ 2593.551778] eventpoll_epi 39KB 63KB [ 2593.551788] inotify_inode_mark 5KB 7KB [ 2593.551800] request_queue 199KB 199KB [ 2593.551809] blkdev_requests 1KB 3KB [ 2593.551819] blkdev_ioc 37KB 42KB [ 2593.551828] bio-0 1893KB 1893KB [ 2593.551838] biovec-max 2499KB 2499KB [ 2593.551849] biovec-64 1647KB 1653KB [ 2593.551859] biovec-16 170KB 198KB [ 2593.551868] bio_integrity_payload 1KB 8KB [ 2593.551878] khugepaged_mm_slot 16KB 19KB [ 2593.551895] uid_cache 0KB 4KB [ 2593.551905] dmaengine-unmap-2 0KB 3KB [ 2593.551917] skbuff_fclone_cache 91KB 97KB [ 2593.551926] skbuff_head_cache 9723KB 10391KB [ 2593.551935] configfs_dir_cache 3KB 7KB [ 2593.551948] file_lock_ctx 9KB 11KB [ 2593.551957] fsnotify_mark_connector 2KB 3KB [ 2593.551967] net_namespace 105KB 122KB [ 2593.551983] shmem_inode_cache 7904KB 7975KB [ 2593.551993] task_delay_info 192KB 438KB [ 2593.552001] taskstats 75KB 76KB [ 2593.552010] proc_dir_entry 954KB 1162KB [ 2593.552020] pde_opener 7KB 23KB [ 2593.552030] seq_file 333KB 354KB [ 2593.552039] sigqueue 58KB 70KB [ 2593.552049] kernfs_node_cache 18225KB 19069KB [ 2593.552058] mnt_cache 236KB 256KB [ 2593.552068] filp 7805KB 8238KB [ 2593.552078] names_cache 126471KB 126509KB [ 2593.552087] iint_cache 43KB 51KB [ 2593.552097] key_jar 4KB 7KB [ 2593.552106] uts_namespace 2KB 11KB [ 2593.552115] nsproxy 1KB 11KB [ 2593.552125] vm_area_struct 3850KB 3859KB [ 2593.552134] mm_struct 638KB 656KB [ 2593.552144] fs_cache 124KB 376KB [ 2593.552153] files_cache 474KB 971KB [ 2593.552163] signal_cache 1147KB 2185KB [ 2593.552172] sighand_cache 638KB 700KB [ 2593.552182] task_struct 6634KB 6647KB [ 2593.552191] cred_jar 2107KB 2940KB [ 2593.552201] anon_vma_chain 1160KB 1330KB [ 2593.552210] anon_vma 132KB 231KB [ 2593.552219] pid 58KB 248KB [ 2593.552228] Acpi-Operand 156KB 198KB [ 2593.552237] Acpi-ParseExt 9KB 11KB [ 2593.552247] Acpi-Parse 41KB 47KB [ 2593.552257] Acpi-State 52KB 63KB [ 2593.552266] Acpi-Namespace 20KB 27KB [ 2593.552278] numa_policy 0KB 3KB [ 2593.552287] debug_objects_cache 2791KB 3129KB [ 2593.552296] trace_event_file 297KB 298KB [ 2593.552306] ftrace_event_field 398KB 401KB [ 2593.552316] pool_workqueue 129KB 156KB [ 2593.552327] page->ptl 672KB 1047KB [ 2593.552373] kmalloc-2097152 2050KB 2050KB [ 2593.552384] kmalloc-524288 2056KB 2056KB [ 2593.552393] kmalloc-262144 1290KB 1290KB [ 2593.552402] kmalloc-131072 650KB 650KB [ 2593.552411] kmalloc-65536 1848KB 2178KB [ 2593.552429] kmalloc-32768 1914KB 2211KB [ 2593.596390] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.602128] kmalloc-16384 1270KB 1353KB [ 2593.605799] lowmem_reserve[]: 0 0 0 0 0 [ 2593.637136] kmalloc-8192 4191KB 4306KB [ 2593.669482] Node 1 Normal free:27100kB min:53876kB low:67344kB high:80812kB active_anon:1236kB inactive_anon:171780kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2593.680883] kmalloc-4096 17357KB 17416KB [ 2593.710673] lowmem_reserve[]: 0 0 0 0 0 [ 2593.721201] kmalloc-2048 12728KB 16759KB [ 2593.722571] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2593.733452] kmalloc-1024 9687KB 14450KB [ 2593.738769] Node 0 DMA32: 314*4kB (ME) 137*8kB (UME) 168*16kB (UME) 112*32kB (UME) 42*64kB (ME) 24*128kB (UM) 5*256kB (UM) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17712kB [ 2593.756138] kmalloc-512 20390KB 20576KB [ 2593.756149] kmalloc-256 4580KB 6585KB [ 2593.756158] kmalloc-128 1089KB 1838KB [ 2593.756168] kmalloc-96 4496KB 5336KB [ 2593.756177] kmalloc-64 3115KB 5036KB [ 2593.756186] kmalloc-32 2123KB 3146KB [ 2593.756197] kmalloc-192 1791KB 3092KB [ 2593.756206] kmem_cache 177KB 180KB [ 2593.756218] Out of memory (oom_kill_allocating_task): Kill process 31146 (in:imklog) score 0 or sacrifice child [ 2593.756278] Killed process 31144 (rsyslogd) total-vm:254332kB, anon-rss:720kB, file-rss:0kB, shmem-rss:0kB [ 2593.758159] oom_reaper: reaped process 31144 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2593.763542] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2593.795739] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2593.824729] Node 1 Normal: 509*4kB (UME) 360*8kB (ME) 77*16kB (ME) 18*32kB (UME) 7*64kB (UME) 2*128kB (UM) 2*256kB (M) 2*512kB (UM) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (U) = 27396kB [ 2593.881457] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2593.890958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2593.909134] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2593.917094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2593.919173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2593.924575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2593.929855] Call Trace: [ 2593.938578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2593.940581] dump_stack+0x1fc/0x2ef [ 2593.945973] 104341 total pagecache pages [ 2593.951618] dump_header+0x15d/0xc3f [ 2593.962514] 0 pages in swap cache [ 2593.962675] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2593.968102] Swap cache stats: add 0, delete 0, find 0/0 [ 2593.973449] ? ___ratelimit+0x319/0x590 [ 2593.973466] oom_kill_process.cold+0x10/0x692 [ 2593.973482] ? check_preemption_disabled+0x41/0x280 [ 2593.973499] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2593.973515] out_of_memory+0x1072/0x1390 [ 2593.978854] Free swap = 0kB [ 2593.984326] ? oom_killer_disable+0x270/0x270 [ 2593.984342] ? mutex_trylock+0x15f/0x1a0 [ 2593.984358] __alloc_pages_nodemask+0x23a2/0x2890 [ 2593.984377] ? find_get_entry+0x4cd/0x8a0 [ 2593.984399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2593.991791] Total swap = 0kB [ 2593.995123] alloc_pages_current+0x193/0x2a0 [ 2593.995140] filemap_fault+0x146e/0x2180 [ 2593.995164] ext4_filemap_fault+0x84/0xb0 [ 2593.995178] __do_fault+0x10b/0x4b0 [ 2593.995192] __handle_mm_fault+0x273b/0x41c0 [ 2593.995209] ? vm_insert_page+0x9c0/0x9c0 [ 2594.001992] 2097051 pages RAM [ 2594.005913] ? check_preemption_disabled+0x41/0x280 [ 2594.005933] handle_mm_fault+0x436/0xb10 [ 2594.005952] __do_page_fault+0x68e/0xd60 [ 2594.005975] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2594.011312] 0 pages HighMem/MovableOnly [ 2594.016661] ? spurious_fault+0x840/0x840 [ 2594.016676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2594.016693] ? page_fault+0x8/0x30 [ 2594.016706] page_fault+0x1e/0x30 [ 2594.016717] RIP: 0033:0x46b583 [ 2594.016731] Code: Bad RIP value. [ 2594.024203] 369649 pages reserved [ 2594.027782] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2594.034564] 0 pages cma reserved [ 2594.038551] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2594.764083] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2594.771338] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2594.778611] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2594.785873] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2594.796879] Mem-Info: [ 2594.799328] active_anon:27983 inactive_anon:90083 isolated_anon:0 [ 2594.799328] active_file:13 inactive_file:21 isolated_file:0 [ 2594.799328] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2594.799328] slab_reclaimable:14389 slab_unreclaimable:119652 [ 2594.799328] mapped:22111 shmem:104307 pagetables:528 bounce:0 [ 2594.799328] free:14377 free_pcp:0 free_cma:0 [ 2594.836155] Node 0 active_anon:110740kB inactive_anon:188552kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88444kB dirty:0kB writeback:0kB shmem:244368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2594.868236] Node 1 active_anon:1192kB inactive_anon:171780kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2594.901892] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2594.928437] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2594.933528] Node 0 DMA32 free:21148kB min:35996kB low:44992kB high:53988kB active_anon:110740kB inactive_anon:184936kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2104kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 2594.962534] lowmem_reserve[]: 0 0 1 1 1 [ 2594.966525] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2594.994596] lowmem_reserve[]: 0 0 0 0 0 [ 2594.998600] Node 1 Normal free:135428kB min:53876kB low:67344kB high:80812kB active_anon:1192kB inactive_anon:171780kB active_file:108kB inactive_file:3708kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:8kB bounce:0kB free_pcp:1908kB local_pcp:488kB free_cma:0kB [ 2595.028539] lowmem_reserve[]: 0 0 0 0 0 [ 2595.036593] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2595.051809] Node 0 DMA32: 361*4kB (UME) 347*8kB (UME) 209*16kB (UME) 120*32kB (UME) 43*64kB (UME) 27*128kB (UM) 4*256kB (M) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 21196kB [ 2595.068910] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2595.080819] Node 1 Normal: 2*4kB (U) 3*8kB (UME) 38*16kB (UM) 14*32kB (UME) 6*64kB (ME) 5*128kB (UM) 14*256kB (UM) 14*512kB (UM) 14*1024kB (UME) 12*2048kB (UM) 31*4096kB (U) = 178752kB [ 2595.100432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2595.110054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2595.122742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2595.131629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2595.140693] 105783 total pagecache pages [ 2595.144977] 0 pages in swap cache [ 2595.149218] Swap cache stats: add 0, delete 0, find 0/0 [ 2595.155812] Free swap = 0kB [ 2595.159486] Total swap = 0kB [ 2595.163232] 2097051 pages RAM [ 2595.167028] 0 pages HighMem/MovableOnly [ 2595.171519] 369649 pages reserved [ 2595.175550] 0 pages cma reserved [ 2595.179331] Unreclaimable slab info: [ 2595.183111] Name Used Total [ 2595.191109] pid_2 73KB 76KB [ 2595.200030] batadv_tt_change_cache 0KB 11KB [ 2595.206704] batadv_tl_cache 4KB 20KB [ 2595.217823] TIPC 16KB 30KB [ 2595.227122] SCTPv6 22KB 43KB [ 2595.237654] DCCPv6 17KB 45KB [ 2595.243116] DCCP 16KB 42KB [ 2595.248512] RXRPC 19KB 45KB [ 2595.259871] rxrpc_call_jar 128KB 165KB [ 2595.265990] bridge_fdb_cache 9KB 23KB [ 2595.271364] fib6_nodes 158KB 304KB [ 2595.281712] ip6_dst_cache 408KB 768KB [ 2595.287186] RAWv6 111KB 141KB [ 2595.300575] UDPv6 33KB 41KB [ 2595.306048] TCPv6 24KB 36KB [ 2595.312021] nf_conntrack 5KB 15KB [ 2595.323160] t10_alua_lu_gp_cache 0KB 3KB [ 2595.339966] sd_ext_cdb 0KB 7KB [ 2595.366524] scsi_sense_cache 1056KB 1060KB [ 2595.372009] virtio_scsi_cmd 16KB 16KB [ 2595.381608] sgpool-128 8KB 8KB [ 2595.388174] sgpool-64 4KB 12KB [ 2595.405401] sgpool-32 2KB 15KB [ 2595.411583] sgpool-16 1KB 7KB [ 2595.424584] sgpool-8 0KB 7KB [ 2595.430255] mqueue_inode_cache 10KB 30KB [ 2595.443470] bio_post_read_ctx 14KB 15KB [ 2595.448914] bio-2 14KB 15KB [ 2595.458904] jfs_mp 7KB 7KB [ 2595.469767] cifs_small_rq 15KB 16KB [ 2595.479511] cifs_request 67KB 67KB [ 2595.498231] cifs_mpx_ids 0KB 7KB [ 2595.504560] nfs_commit_data 3KB 14KB [ 2595.509932] nfs_write_data 34KB 44KB [ 2595.519408] ext4_system_zone 1KB 7KB [ 2595.525667] bio-1 1KB 7KB [ 2595.531041] pid_namespace 2KB 11KB [ 2595.540471] rpc_buffers 17KB 25KB [ 2595.546916] rpc_tasks 2KB 7KB [ 2595.556266] UNIX 725KB 956KB [ 2595.561642] UDP-Lite 5KB 13KB [ 2595.567929] tcp_bind_bucket 1KB 8KB [ 2595.577299] ip_fib_trie 23KB 47KB [ 2595.583751] ip_fib_alias 113KB 213KB [ 2595.589122] ip_dst_cache 8KB 24KB [ 2595.600271] RAW 84KB 112KB [ 2595.606539] UDP 70KB 94KB [ 2595.612087] TCP 8KB 11KB [ 2595.621426] hugetlbfs_inode_cache 3KB 15KB [ 2595.628062] fscache_cookie_jar 1KB 7KB [ 2595.637797] eventpoll_pwq 27KB 43KB [ 2595.644057] eventpoll_epi 50KB 63KB [ 2595.649426] inotify_inode_mark 5KB 7KB [ 2595.658880] request_queue 199KB 199KB [ 2595.665134] blkdev_requests 1KB 3KB [ 2595.670503] blkdev_ioc 41KB 42KB [ 2595.680186] bio-0 2037KB 2040KB [ 2595.686697] biovec-max 2499KB 2499KB [ 2595.692164] biovec-64 1731KB 1732KB [ 2595.704554] biovec-16 175KB 198KB [ 2595.709932] bio_integrity_payload 1KB 8KB [ 2595.719075] khugepaged_mm_slot 14KB 19KB [ 2595.727485] uid_cache 0KB 4KB [ 2595.736045] dmaengine-unmap-2 0KB 3KB [ 2595.741423] skbuff_fclone_cache 90KB 97KB [ 2595.750375] skbuff_head_cache 9521KB 10365KB [ 2595.758691] configfs_dir_cache 3KB 7KB [ 2595.767035] file_lock_ctx 9KB 11KB [ 2595.775480] fsnotify_mark_connector 2KB 3KB [ 2595.781383] net_namespace 105KB 122KB [ 2595.789171] shmem_inode_cache 7904KB 7975KB [ 2595.797930] task_delay_info 190KB 438KB [ 2595.808470] taskstats 76KB 76KB [ 2595.816854] proc_dir_entry 936KB 1162KB [ 2595.830417] pde_opener 7KB 23KB [ 2595.842288] seq_file 339KB 354KB [ 2595.847674] sigqueue 53KB 70KB [ 2595.861150] kernfs_node_cache 18238KB 19069KB [ 2595.867111] mnt_cache 236KB 256KB [ 2595.877699] filp 7747KB 8238KB [ 2595.883636] names_cache 130798KB 130798KB [ 2595.889011] iint_cache 51KB 51KB [ 2595.900091] key_jar 4KB 7KB [ 2595.908341] uts_namespace 2KB 11KB [ 2595.921541] nsproxy 1KB 11KB [ 2595.928631] vm_area_struct 3531KB 3859KB [ 2595.939220] mm_struct 628KB 656KB [ 2595.945101] fs_cache 122KB 376KB [ 2595.950471] files_cache 465KB 960KB [ 2595.961736] signal_cache 1135KB 2170KB [ 2595.967761] sighand_cache 624KB 700KB [ 2595.978340] task_struct 6015KB 6085KB [ 2595.984285] cred_jar 2170KB 2940KB [ 2595.989663] anon_vma_chain 1116KB 1326KB [ 2596.000625] anon_vma 128KB 231KB [ 2596.006562] pid 58KB 248KB [ 2596.019402] Acpi-Operand 156KB 198KB [ 2596.025346] Acpi-ParseExt 9KB 11KB [ 2596.030722] Acpi-Parse 41KB 47KB [ 2596.041690] Acpi-State 52KB 63KB [ 2596.047612] Acpi-Namespace 20KB 27KB [ 2596.058534] numa_policy 0KB 3KB [ 2596.064459] debug_objects_cache 2785KB 3129KB [ 2596.070004] trace_event_file 297KB 298KB [ 2596.080941] ftrace_event_field 398KB 401KB [ 2596.087011] pool_workqueue 129KB 156KB [ 2596.097581] page->ptl 657KB 1047KB [ 2596.103553] kmalloc-2097152 2050KB 2050KB [ 2596.108927] kmalloc-524288 2056KB 2056KB [ 2596.122238] kmalloc-262144 1290KB 1290KB [ 2596.127619] kmalloc-131072 650KB 650KB [ 2596.138845] kmalloc-65536 1848KB 2046KB [ 2596.144790] kmalloc-32768 1914KB 2145KB [ 2596.150162] kmalloc-16384 1270KB 1320KB [ 2596.161433] kmalloc-8192 4174KB 4273KB [ 2596.167377] kmalloc-4096 16392KB 16430KB [ 2596.178053] kmalloc-2048 12155KB 16300KB [ 2596.183977] kmalloc-1024 9079KB 14277KB [ 2596.189351] kmalloc-512 20103KB 20576KB [ 2596.200300] kmalloc-256 4558KB 6585KB [ 2596.206195] kmalloc-128 1062KB 1838KB [ 2596.211567] kmalloc-96 4519KB 5336KB [ 2596.226366] kmalloc-64 3066KB 5036KB [ 2596.231756] kmalloc-32 2108KB 3146KB [ 2596.239024] kmalloc-192 1767KB 3092KB [ 2596.248975] kmem_cache 177KB 180KB [ 2596.255944] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2596.270741] Killed process 29889 (syz-executor.3) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 2596.286657] oom_reaper: reaped process 29889 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2596.921596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2596.937437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2596.960105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2596.969973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2596.981989] device bridge_slave_1 left promiscuous mode [ 2596.990690] bridge0: port 2(bridge_slave_1) entered disabled state [ 2597.001946] device bridge_slave_0 left promiscuous mode [ 2597.010876] bridge0: port 1(bridge_slave_0) entered disabled state [ 2597.026863] device veth1_macvtap left promiscuous mode [ 2597.035424] device veth0_macvtap left promiscuous mode [ 2597.040771] device veth1_vlan left promiscuous mode [ 2597.049766] device veth0_vlan left promiscuous mode [ 2597.208108] device hsr_slave_1 left promiscuous mode [ 2597.221403] device hsr_slave_0 left promiscuous mode [ 2597.248995] team0 (unregistering): Port device team_slave_1 removed [ 2597.267537] team0 (unregistering): Port device team_slave_0 removed [ 2597.281396] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2597.299965] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2597.351930] bond0 (unregistering): Released all slaves 06:47:28 executing program 2: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0xffff, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0xffff, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) 06:47:28 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0x4, 0x1, 0x4, 0x40e2796f21421320, 0x4, {0x77359400}, {0x1, 0x1, 0x7, 0x1f, 0x3, 0x4, "ab8bbc27"}, 0x785, 0x4, {}, 0x0, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@fd={0x4, 0x1, 0x4, 0x40e2796f21421320, 0x4, {0x77359400}, {0x1, 0x1, 0x7, 0x1f, 0x3, 0x4, "ab8bbc27"}, 0x785, 0x4, {}, 0x0, 0x0, r1}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:47:28 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x2, 0x0, 0x6, 0x4, 0x100, 0xfffffffffffffff8}, @alu={0x0, 0x0, 0x5, 0x3, 0x5, 0xc, 0x8}, @ldst={0x2, 0x1, 0x1, 0x0, 0xa, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='GPL\x00', 0xd2c, 0xdf, &(0x7f00000000c0)=""/223, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0xfffffbff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, r1, 0x1, r2, r3]}, 0x80) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:47:28 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:28 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:28 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:28 executing program 2: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0xffff, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:47:28 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:28 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x6, 0x80000001, 0x1, 0x4}, 0x3, 0x7, &(0x7f0000000080)={{0x4, 0x8, 0x4, 0x5}}, 0x4, &(0x7f00000000c0)="a129a3829546932f850beea53b7ff828debbf651cee6918147910dd2e9dff82f2621d3f6de54dc461973", 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x40}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x1, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x3131354f}) 06:47:28 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:28 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:47:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1f, 0x0, 0x3, {0x3, @win={{0x3, 0xfffffe00, 0x8, 0x2}, 0x5, 0x8b8, &(0x7f0000000000)={{0x68000000, 0x0, 0xfa, 0x1ff}}, 0xfffffffe, &(0x7f0000000040)="d114f0c5", 0xff}}, 0x8011}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x3, @pix_mp={0x8, 0x0, 0x36314d59, 0x8, 0x0, [{0x0, 0x9}, {0x1a8, 0x3f}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x9}, {0x2985, 0x4}, {0x8, 0x81}, {0x3244, 0x4}], 0x9, 0x8, 0x3, 0x1}}) 06:47:28 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2601.382060] IPVS: ftp: loaded support on port[0] = 21 [ 2601.633120] chnl_net:caif_netlink_parms(): no params data found [ 2601.718266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2601.725623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2601.738780] device bridge_slave_0 entered promiscuous mode [ 2601.748461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2601.760293] bridge0: port 2(bridge_slave_1) entered disabled state [ 2601.768848] device bridge_slave_1 entered promiscuous mode [ 2601.803374] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2601.813827] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2601.850174] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2601.858044] team0: Port device team_slave_0 added [ 2601.869619] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2601.878068] team0: Port device team_slave_1 added [ 2601.905816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2601.916973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2601.948580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2601.962009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2601.968324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2602.000139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2602.021263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2602.029477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2602.077200] device hsr_slave_0 entered promiscuous mode [ 2602.084513] device hsr_slave_1 entered promiscuous mode [ 2602.090874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2602.104726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2602.248262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2602.254725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2602.261394] bridge0: port 1(bridge_slave_0) entered blocking state [ 2602.267821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2602.337371] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2602.348759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2602.362461] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2602.373922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2602.382762] bridge0: port 1(bridge_slave_0) entered disabled state [ 2602.389651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2602.398548] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2602.411819] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2602.418168] 8021q: adding VLAN 0 to HW filter on device team0 [ 2602.430641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2602.439894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2602.446327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2602.464587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2602.472517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2602.478904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2602.497795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2602.516107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2602.524613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2602.533794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2602.546800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2602.558107] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2602.565706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2602.579724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2602.633756] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2602.647806] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2602.655133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2602.668363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2602.681266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2602.750233] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2602.767232] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2602.778581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2602.789085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2602.854527] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2602.867201] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2602.875295] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2602.890325] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2602.897705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2602.911681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2602.921557] device veth0_vlan entered promiscuous mode [ 2602.937743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2602.945666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2602.958932] device veth1_vlan entered promiscuous mode [ 2602.966700] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2602.999551] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2603.016290] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2603.036299] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2603.048382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2603.057594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2603.070745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2603.079844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2603.091006] device veth0_macvtap entered promiscuous mode [ 2603.098958] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2603.120149] device veth1_macvtap entered promiscuous mode [ 2603.132884] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2603.143823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2603.160633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2603.170108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2603.190324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.201019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2603.216135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.226029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2603.240942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.251090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2603.266903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.277075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2603.292441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.309806] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2603.319657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2603.331052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2603.341065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2603.353722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2603.365919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2603.377329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2603.394382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.406681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2603.420007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.429958] Bluetooth: hci4: command 0x0409 tx timeout [ 2603.440496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2603.451262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.465487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2603.475944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.486117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2603.496533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2603.508021] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2603.515849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2603.523499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2603.532767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2603.714084] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2603.720450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2603.741641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2603.761007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2603.784378] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2603.798864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2603.806727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2603.815861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:47:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x440) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @vbi={0x649af3ff, 0x20, 0x1, 0x0, [0x7, 0x1], [0x9, 0x3f], 0x1}}) 06:47:33 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:47:33 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2605.501545] Bluetooth: hci4: command 0x041b tx timeout [ 2606.022515] syz-executor.3 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2606.034390] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2606.039488] CPU: 1 PID: 31430 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2606.047357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2606.056699] Call Trace: [ 2606.059273] dump_stack+0x1fc/0x2ef [ 2606.062890] dump_header+0x15d/0xc3f [ 2606.066605] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2606.071687] ? ___ratelimit+0x319/0x590 [ 2606.075642] oom_kill_process.cold+0x10/0x692 [ 2606.080119] ? check_preemption_disabled+0x41/0x280 [ 2606.085134] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2606.090392] out_of_memory+0x1072/0x1390 [ 2606.094439] ? oom_killer_disable+0x270/0x270 [ 2606.098917] ? mutex_trylock+0x15f/0x1a0 [ 2606.102962] __alloc_pages_nodemask+0x23a2/0x2890 [ 2606.107789] ? find_get_entry+0x4cd/0x8a0 [ 2606.111924] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2606.116760] alloc_pages_current+0x193/0x2a0 [ 2606.121150] filemap_fault+0x146e/0x2180 [ 2606.125201] ext4_filemap_fault+0x84/0xb0 [ 2606.129333] __do_fault+0x10b/0x4b0 [ 2606.132963] __handle_mm_fault+0x273b/0x41c0 [ 2606.137358] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2606.142440] ? vm_insert_page+0x9c0/0x9c0 [ 2606.146571] ? check_preemption_disabled+0x41/0x280 [ 2606.151586] ? check_preemption_disabled+0x41/0x280 [ 2606.156595] handle_mm_fault+0x436/0xb10 [ 2606.160655] __do_page_fault+0x68e/0xd60 [ 2606.164711] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2606.169718] ? spurious_fault+0x840/0x840 [ 2606.173857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2606.178685] ? page_fault+0x8/0x30 [ 2606.182210] page_fault+0x1e/0x30 [ 2606.185644] RIP: 0033:0x7f82075e0768 [ 2606.189342] Code: Bad RIP value. [ 2606.192685] RSP: 002b:00007ffe14790630 EFLAGS: 00010246 [ 2606.198028] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000828 [ 2606.205293] RDX: 0000000000000002 RSI: 00007f8207673ab5 RDI: 00007ffe14790e70 [ 2606.212564] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007ffe1478fb80 [ 2606.219825] R10: 00007f8207673ab5 R11: 0000000000000207 R12: 00007f8207673ab5 [ 2606.227101] R13: 0000000000000002 R14: 00007ffe14790bd0 R15: 0000000000000002 [ 2606.236777] Mem-Info: [ 2606.239235] active_anon:28014 inactive_anon:90085 isolated_anon:0 [ 2606.239235] active_file:1 inactive_file:3 isolated_file:0 [ 2606.239235] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2606.239235] slab_reclaimable:14445 slab_unreclaimable:118078 [ 2606.239235] mapped:22178 shmem:104308 pagetables:580 bounce:0 [ 2606.239235] free:25049 free_pcp:0 free_cma:0 [ 2606.274122] Node 0 active_anon:109816kB inactive_anon:188552kB active_file:36kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88756kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2606.302270] Node 1 active_anon:2240kB inactive_anon:171788kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2606.360788] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2606.514858] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2606.519929] Node 0 DMA32 free:35532kB min:35996kB low:44992kB high:53988kB active_anon:109816kB inactive_anon:184936kB active_file:148kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2606.615420] lowmem_reserve[]: 0 0 1 1 1 [ 2606.619439] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2606.670948] lowmem_reserve[]: 0 0 0 0 0 [ 2606.674959] Node 1 Normal free:53684kB min:53876kB low:67344kB high:80812kB active_anon:2240kB inactive_anon:171788kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2606.869009] lowmem_reserve[]: 0 0 0 0 0 [ 2606.891261] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2606.985203] Node 0 DMA32: 483*4kB (UME) 205*8kB (UME) 246*16kB (ME) 146*32kB (ME) 47*64kB (ME) 23*128kB (UM) 12*256kB (M) 27*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36052kB [ 2607.073097] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2607.126532] Node 1 Normal: 613*4kB (UME) 399*8kB (UME) 102*16kB (UM) 26*32kB (ME) 15*64kB (UME) 5*128kB (UM) 3*256kB (UM) 0*512kB 2*1024kB (UE) 0*2048kB 10*4096kB (UM) = 53484kB [ 2607.200508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2607.241234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2607.249968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2607.354807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2607.378044] 104332 total pagecache pages [ 2607.388421] 0 pages in swap cache [ 2607.421582] Swap cache stats: add 0, delete 0, find 0/0 [ 2607.426971] Free swap = 0kB [ 2607.429977] Total swap = 0kB [ 2607.477772] 2097051 pages RAM [ 2607.495775] 0 pages HighMem/MovableOnly [ 2607.499758] 369649 pages reserved [ 2607.531883] 0 pages cma reserved [ 2607.535282] Out of memory (oom_kill_allocating_task): Kill process 31430 (syz-executor.3) score 0 or sacrifice child [ 2607.581068] Bluetooth: hci4: command 0x040f tx timeout [ 2607.618050] Killed process 31430 (syz-executor.3) total-vm:56708kB, anon-rss:464kB, file-rss:13564kB, shmem-rss:64kB [ 2607.669996] oom_reaper: reaped process 31430 (syz-executor.3), now anon-rss:0kB, file-rss:13560kB, shmem-rss:64kB [ 2607.734945] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2607.758567] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2607.806924] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2607.814395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2607.823740] Call Trace: [ 2607.826327] dump_stack+0x1fc/0x2ef [ 2607.829951] dump_header+0x15d/0xc3f [ 2607.833646] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2607.838726] ? ___ratelimit+0x319/0x590 [ 2607.842682] oom_kill_process.cold+0x10/0x692 [ 2607.847179] ? check_preemption_disabled+0x41/0x280 [ 2607.852192] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2607.857447] out_of_memory+0x1072/0x1390 [ 2607.861492] ? oom_killer_disable+0x270/0x270 [ 2607.865970] ? mutex_trylock+0x15f/0x1a0 [ 2607.870009] __alloc_pages_nodemask+0x23a2/0x2890 [ 2607.874837] ? find_get_entry+0x4cd/0x8a0 [ 2607.878968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2607.883829] alloc_pages_current+0x193/0x2a0 [ 2607.888217] filemap_fault+0x146e/0x2180 [ 2607.892264] ext4_filemap_fault+0x84/0xb0 [ 2607.896392] __do_fault+0x10b/0x4b0 [ 2607.899995] ? do_raw_spin_unlock+0x171/0x230 [ 2607.904472] __handle_mm_fault+0x273b/0x41c0 [ 2607.908875] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2607.913955] ? vm_insert_page+0x9c0/0x9c0 [ 2607.918088] ? check_preemption_disabled+0x41/0x280 [ 2607.923088] handle_mm_fault+0x436/0xb10 [ 2607.927132] __do_page_fault+0x68e/0xd60 [ 2607.931177] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2607.936172] ? spurious_fault+0x840/0x840 [ 2607.940300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2607.945133] ? page_fault+0x8/0x30 [ 2607.948656] page_fault+0x1e/0x30 [ 2607.952090] RIP: 0033:0x4443a7 [ 2607.955264] Code: Bad RIP value. [ 2607.958632] RSP: 002b:000000c000067f30 EFLAGS: 00010206 [ 2607.963979] RAX: 0000000001ec3878 RBX: 000000c000058000 RCX: 0000000000000043 [ 2607.971233] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c000067edc [ 2607.978488] RBP: 000000c000067f90 R08: 00007ffe2f573000 R09: 0000029c4d0eb4a6 [ 2607.985760] R10: 00006ab2e97fec32 R11: 0000000000000001 R12: 000000c000067f10 [ 2607.993011] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2608.013323] Mem-Info: [ 2608.015777] active_anon:28014 inactive_anon:90085 isolated_anon:0 [ 2608.015777] active_file:31 inactive_file:0 isolated_file:0 [ 2608.015777] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2608.015777] slab_reclaimable:14438 slab_unreclaimable:118078 [ 2608.015777] mapped:22190 shmem:104308 pagetables:580 bounce:0 [ 2608.015777] free:24995 free_pcp:0 free_cma:0 [ 2608.062084] Node 0 active_anon:109772kB inactive_anon:188552kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88744kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2608.104379] Node 1 active_anon:2200kB inactive_anon:171788kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2608.138704] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2608.173061] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2608.178109] Node 0 DMA32 free:35392kB min:35996kB low:44992kB high:53988kB active_anon:109772kB inactive_anon:184936kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2608.221626] lowmem_reserve[]: 0 0 1 1 1 [ 2608.225634] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2608.264718] lowmem_reserve[]: 0 0 0 0 0 [ 2608.268729] Node 1 Normal free:53536kB min:53876kB low:67344kB high:80812kB active_anon:2200kB inactive_anon:171788kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2608.315247] lowmem_reserve[]: 0 0 0 0 0 [ 2608.319256] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2608.346351] Node 0 DMA32: 490*4kB (UME) 203*8kB (UME) 244*16kB (ME) 148*32kB (UME) 47*64kB (UME) 22*128kB (UM) 11*256kB (M) 27*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35712kB [ 2608.374630] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2608.412950] Node 1 Normal: 610*4kB (UME) 399*8kB (UME) 102*16kB (UM) 28*32kB (ME) 15*64kB (UME) 5*128kB (UM) 3*256kB (UM) 0*512kB 2*1024kB (UE) 0*2048kB 10*4096kB (UM) = 53536kB [ 2608.518949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2608.597651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2608.644775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2608.769494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2608.827854] 104332 total pagecache pages [ 2608.878070] 0 pages in swap cache [ 2608.945805] Swap cache stats: add 0, delete 0, find 0/0 [ 2609.008397] Free swap = 0kB [ 2609.060587] Total swap = 0kB [ 2609.107311] 2097051 pages RAM [ 2609.110438] 0 pages HighMem/MovableOnly [ 2609.167536] 369649 pages reserved [ 2609.237782] 0 pages cma reserved [ 2609.248118] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2609.265723] Killed process 29890 (syz-executor.4) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 2609.306111] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2609.386849] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2609.421603] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2609.429070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2609.438408] Call Trace: [ 2609.440987] dump_stack+0x1fc/0x2ef [ 2609.444603] dump_header+0x15d/0xc3f [ 2609.448304] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2609.453393] ? ___ratelimit+0x319/0x590 [ 2609.457358] oom_kill_process.cold+0x10/0x692 [ 2609.461842] ? check_preemption_disabled+0x41/0x280 [ 2609.466936] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2609.472205] out_of_memory+0x1072/0x1390 [ 2609.476256] ? oom_killer_disable+0x270/0x270 [ 2609.480739] ? mutex_trylock+0x15f/0x1a0 [ 2609.484788] __alloc_pages_nodemask+0x23a2/0x2890 [ 2609.489621] ? find_get_entry+0x4cd/0x8a0 [ 2609.493762] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2609.498609] alloc_pages_current+0x193/0x2a0 [ 2609.503004] filemap_fault+0x146e/0x2180 [ 2609.507064] ext4_filemap_fault+0x84/0xb0 [ 2609.511211] __do_fault+0x10b/0x4b0 [ 2609.514821] ? do_raw_spin_unlock+0x171/0x230 [ 2609.519304] __handle_mm_fault+0x273b/0x41c0 [ 2609.523701] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2609.528787] ? vm_insert_page+0x9c0/0x9c0 [ 2609.532928] ? check_preemption_disabled+0x41/0x280 [ 2609.537934] handle_mm_fault+0x436/0xb10 [ 2609.541986] __do_page_fault+0x68e/0xd60 [ 2609.546038] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2609.551060] ? spurious_fault+0x840/0x840 [ 2609.555194] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2609.560022] ? page_fault+0x8/0x30 [ 2609.563548] page_fault+0x1e/0x30 [ 2609.566986] RIP: 0033:0x4443a7 [ 2609.570165] Code: Bad RIP value. [ 2609.573511] RSP: 002b:000000c000067f30 EFLAGS: 00010206 [ 2609.578860] RAX: 0000000001ec3878 RBX: 000000c000058000 RCX: 0000000000000043 [ 2609.586112] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c000067edc [ 2609.593364] RBP: 000000c000067f90 R08: 00007ffe2f573000 R09: 0000029c4d0eb4a6 [ 2609.600617] R10: 00006ab2e97fec32 R11: 0000000000000001 R12: 000000c000067f10 [ 2609.607871] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2610.025500] Mem-Info: [ 2610.028349] active_anon:27750 inactive_anon:90085 isolated_anon:0 [ 2610.028349] active_file:13 inactive_file:105 isolated_file:0 [ 2610.028349] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2610.028349] slab_reclaimable:14377 slab_unreclaimable:118125 [ 2610.028349] mapped:15049 shmem:104308 pagetables:526 bounce:0 [ 2610.028349] free:25182 free_pcp:14 free_cma:0 [ 2610.110861] Node 0 active_anon:108800kB inactive_anon:188552kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:60196kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2610.163124] Node 1 active_anon:2200kB inactive_anon:171788kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2610.198735] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.230202] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2610.235339] Node 0 DMA32 free:35736kB min:35996kB low:44992kB high:53988kB active_anon:108800kB inactive_anon:184936kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1976kB bounce:0kB free_pcp:452kB local_pcp:248kB free_cma:0kB [ 2610.272969] lowmem_reserve[]: 0 0 1 1 1 [ 2610.276970] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.310962] lowmem_reserve[]: 0 0 0 0 0 [ 2610.314961] Node 1 Normal free:53552kB min:53876kB low:67344kB high:80812kB active_anon:2200kB inactive_anon:171788kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.351029] lowmem_reserve[]: 0 0 0 0 0 [ 2610.355024] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2610.374354] Node 0 DMA32: 408*4kB (UMEH) 228*8kB (UMEH) 247*16kB (MEH) 149*32kB (UMEH) 58*64kB (UMEH) 25*128kB (UMH) 12*256kB (UM) 25*512kB (UMH) 1*1024kB (M) 0*2048kB 0*4096kB = 35984kB [ 2610.415419] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2610.426605] Node 1 Normal: 614*4kB (UME) 399*8kB (UME) 102*16kB (UM) 28*32kB (ME) 15*64kB (UME) 5*128kB (UM) 3*256kB (UM) 0*512kB 2*1024kB (UE) 0*2048kB 10*4096kB (UM) = 53552kB [ 2610.450398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2610.459353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2610.482188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2610.499454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2610.509783] 104312 total pagecache pages [ 2610.517241] 0 pages in swap cache [ 2610.522526] Swap cache stats: add 0, delete 0, find 0/0 [ 2610.527880] Free swap = 0kB [ 2610.534227] Total swap = 0kB [ 2610.537244] 2097051 pages RAM [ 2610.540342] 0 pages HighMem/MovableOnly [ 2610.547781] 369649 pages reserved [ 2610.554607] 0 pages cma reserved [ 2610.557996] Unreclaimable slab info: [ 2610.562105] Name Used Total [ 2610.567671] pid_2 66KB 80KB [ 2610.573504] batadv_tt_change_cache 1KB 7KB [ 2610.582547] batadv_tl_cache 5KB 20KB [ 2610.587941] TIPC 18KB 30KB [ 2610.596683] SCTPv6 24KB 43KB [ 2610.614164] DCCPv6 17KB 45KB [ 2610.619536] DCCP 16KB 42KB [ 2610.626689] RXRPC 21KB 45KB [ 2610.635433] rxrpc_call_jar 139KB 165KB [ 2610.642528] bridge_fdb_cache 10KB 23KB [ 2610.647894] fib6_nodes 185KB 304KB [ 2610.656956] ip6_dst_cache 308KB 708KB [ 2610.664034] RAWv6 121KB 141KB [ 2610.669392] UDPv6 37KB 41KB [ 2610.678435] TCPv6 24KB 48KB [ 2610.686316] nf_conntrack 5KB 11KB [ 2610.695378] t10_alua_lu_gp_cache 0KB 3KB [ 2610.705697] sd_ext_cdb 0KB 7KB [ 2610.720825] scsi_sense_cache 1056KB 1060KB [ 2610.726237] virtio_scsi_cmd 16KB 16KB [ 2610.737049] sgpool-128 8KB 8KB [ 2610.744653] sgpool-64 4KB 12KB [ 2610.750012] sgpool-32 2KB 15KB [ 2610.755459] sgpool-16 1KB 7KB [ 2610.760880] sgpool-8 0KB 7KB [ 2610.766249] mqueue_inode_cache 12KB 30KB [ 2610.772041] bio_post_read_ctx 14KB 15KB [ 2610.777469] bio-2 14KB 15KB [ 2610.783017] jfs_mp 7KB 7KB [ 2610.788409] cifs_small_rq 15KB 16KB [ 2610.795999] cifs_request 67KB 67KB [ 2610.810673] cifs_mpx_ids 0KB 7KB [ 2610.816860] nfs_commit_data 3KB 14KB [ 2610.825485] nfs_write_data 34KB 44KB [ 2610.837508] ext4_system_zone 1KB 7KB [ 2610.842977] bio-1 1KB 7KB [ 2610.848334] pid_namespace 2KB 11KB [ 2610.853834] rpc_buffers 17KB 25KB [ 2610.859190] rpc_tasks 2KB 7KB [ 2610.865008] UNIX 881KB 952KB [ 2610.870373] UDP-Lite 5KB 13KB [ 2610.875800] tcp_bind_bucket 1KB 8KB [ 2610.881246] ip_fib_trie 27KB 47KB [ 2610.886602] ip_fib_alias 130KB 213KB [ 2610.892010] ip_dst_cache 14KB 24KB [ 2610.897371] RAW 78KB 112KB [ 2610.902802] UDP 65KB 94KB [ 2610.908160] TCP 8KB 16KB [ 2610.920457] hugetlbfs_inode_cache 3KB 15KB [ 2610.926184] fscache_cookie_jar 1KB 7KB [ 2610.946573] eventpoll_pwq 19KB 43KB [ 2611.018351] eventpoll_epi 36KB 63KB [ 2611.044731] inotify_inode_mark 5KB 7KB [ 2611.050291] request_queue 199KB 199KB [ 2611.075532] blkdev_requests 1KB 3KB [ 2611.101341] blkdev_ioc 40KB 42KB [ 2611.106729] bio-0 1916KB 2058KB [ 2611.138250] biovec-max 2334KB 2376KB [ 2611.146544] biovec-64 1827KB 1827KB [ 2611.156522] biovec-16 195KB 206KB [ 2611.161955] bio_integrity_payload 1KB 8KB [ 2611.167661] khugepaged_mm_slot 14KB 19KB [ 2611.186448] uid_cache 0KB 4KB [ 2611.195285] dmaengine-unmap-2 0KB 3KB [ 2611.207536] skbuff_fclone_cache 86KB 105KB [ 2611.219745] skbuff_head_cache 9782KB 10338KB [ 2611.238979] configfs_dir_cache 3KB 7KB [ 2611.244520] file_lock_ctx 9KB 11KB [ 2611.249885] fsnotify_mark_connector 2KB 3KB [ 2611.269206] net_namespace 96KB 113KB [ 2611.298284] shmem_inode_cache 7921KB 7975KB [ 2611.307541] task_delay_info 208KB 438KB [ 2611.338687] taskstats 70KB 80KB [ 2611.367452] proc_dir_entry 951KB 1136KB [ 2611.379028] pde_opener 6KB 23KB [ 2611.403309] seq_file 311KB 354KB [ 2611.408691] sigqueue 53KB 70KB [ 2611.419081] kernfs_node_cache 18224KB 18250KB [ 2611.445172] mnt_cache 254KB 256KB [ 2611.457994] filp 7598KB 8238KB [ 2611.485271] names_cache 120734KB 120772KB [ 2611.498226] iint_cache 42KB 51KB [ 2611.524036] key_jar 4KB 7KB [ 2611.529414] uts_namespace 3KB 11KB [ 2611.538967] nsproxy 2KB 11KB [ 2611.568253] vm_area_struct 3398KB 3820KB [ 2611.594205] mm_struct 581KB 656KB [ 2611.599580] fs_cache 160KB 376KB [ 2611.608435] files_cache 604KB 888KB [ 2611.634070] signal_cache 1346KB 2141KB [ 2611.639446] sighand_cache 654KB 707KB [ 2611.664929] task_struct 7006KB 7063KB [ 2611.680289] cred_jar 2188KB 2940KB [ 2611.707617] anon_vma_chain 1082KB 1326KB [ 2611.716614] anon_vma 117KB 231KB [ 2611.725431] pid 79KB 244KB [ 2611.737519] Acpi-Operand 156KB 198KB [ 2611.746394] Acpi-ParseExt 9KB 11KB [ 2611.758704] Acpi-Parse 41KB 47KB [ 2611.767491] Acpi-State 52KB 63KB [ 2611.779281] Acpi-Namespace 20KB 27KB [ 2611.797280] numa_policy 0KB 3KB [ 2611.817262] debug_objects_cache 2832KB 3129KB [ 2611.837149] trace_event_file 297KB 298KB [ 2611.878273] ftrace_event_field 398KB 401KB [ 2611.888610] pool_workqueue 137KB 156KB [ 2611.897471] page->ptl 619KB 1047KB [ 2611.916726] kmalloc-2097152 2050KB 2050KB [ 2611.922153] kmalloc-524288 2056KB 2056KB [ 2611.927509] kmalloc-262144 1290KB 1290KB [ 2611.946872] kmalloc-131072 650KB 650KB [ 2611.952295] kmalloc-65536 2112KB 2178KB [ 2611.957652] kmalloc-32768 2079KB 2244KB [ 2611.976620] kmalloc-16384 1320KB 1402KB [ 2611.987377] kmalloc-8192 4620KB 4620KB [ 2612.024408] kmalloc-4096 19970KB 20009KB [ 2612.029784] kmalloc-2048 13653KB 15969KB [ 2612.067972] kmalloc-1024 10416KB 14269KB [ 2612.096308] kmalloc-512 20288KB 20572KB [ 2612.123769] kmalloc-256 4929KB 6585KB [ 2612.129149] kmalloc-128 1100KB 1838KB [ 2612.154743] kmalloc-96 4354KB 5336KB [ 2612.160126] kmalloc-64 3153KB 5036KB [ 2612.189800] kmalloc-32 2115KB 3146KB [ 2612.198586] kmalloc-192 1860KB 3092KB [ 2612.224533] kmem_cache 177KB 180KB [ 2612.229909] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2612.258982] Killed process 28460 (syz-executor.2) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2612.294404] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2612.347723] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2612.356972] CPU: 0 PID: 8078 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2612.364437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2612.373777] Call Trace: [ 2612.376352] dump_stack+0x1fc/0x2ef [ 2612.380063] dump_header+0x15d/0xc3f [ 2612.383764] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2612.388937] ? ___ratelimit+0x319/0x590 [ 2612.392904] oom_kill_process.cold+0x10/0x692 [ 2612.397412] ? check_preemption_disabled+0x41/0x280 [ 2612.402414] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2612.407673] out_of_memory+0x1072/0x1390 [ 2612.411721] ? oom_killer_disable+0x270/0x270 [ 2612.416199] ? mutex_trylock+0x15f/0x1a0 [ 2612.420247] __alloc_pages_nodemask+0x23a2/0x2890 [ 2612.425076] ? find_get_entry+0x4cd/0x8a0 [ 2612.429206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2612.434043] alloc_pages_current+0x193/0x2a0 [ 2612.438432] filemap_fault+0x146e/0x2180 [ 2612.442484] ext4_filemap_fault+0x84/0xb0 [ 2612.446618] __do_fault+0x10b/0x4b0 [ 2612.450236] __handle_mm_fault+0x273b/0x41c0 [ 2612.454639] ? vm_insert_page+0x9c0/0x9c0 [ 2612.459045] ? check_preemption_disabled+0x41/0x280 [ 2612.464047] handle_mm_fault+0x436/0xb10 [ 2612.468095] __do_page_fault+0x68e/0xd60 [ 2612.472420] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2612.477874] ? spurious_fault+0x840/0x840 [ 2612.482006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2612.486847] ? page_fault+0x8/0x30 [ 2612.490387] page_fault+0x1e/0x30 [ 2612.493912] RIP: 0033:0x4bd2f2 [ 2612.497092] Code: Bad RIP value. [ 2612.500462] RSP: 002b:000000c0007f7558 EFLAGS: 00010216 [ 2612.505911] RAX: 0000000000000000 RBX: 0000000000464697 RCX: 000000c0007da340 [ 2612.513171] RDX: 000000c000044500 RSI: 0000000000000000 RDI: 000000c0007da340 [ 2612.520420] RBP: 000000c0007f75d0 R08: 00007ffe2f573001 R09: 0000029d7060af98 [ 2612.527669] R10: 000da144d4329641 R11: 0000000000000001 R12: 000000c000065d00 [ 2612.534926] R13: 0000000000000001 R14: 000000c0007da340 R15: 00000260494a480c [ 2612.580557] Mem-Info: [ 2612.583104] active_anon:27625 inactive_anon:90085 isolated_anon:0 [ 2612.583104] active_file:131 inactive_file:142 isolated_file:32 [ 2612.583104] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2612.583104] slab_reclaimable:14364 slab_unreclaimable:117939 [ 2612.583104] mapped:11658 shmem:104308 pagetables:526 bounce:0 [ 2612.583104] free:25076 free_pcp:268 free_cma:0 [ 2612.628486] Node 0 active_anon:108300kB inactive_anon:188552kB active_file:508kB inactive_file:1056kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:46932kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2612.662137] Node 1 active_anon:2200kB inactive_anon:171788kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2612.698796] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2612.738308] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2612.747511] Node 0 DMA32 free:35608kB min:35996kB low:44992kB high:53988kB active_anon:108300kB inactive_anon:184936kB active_file:540kB inactive_file:456kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1976kB bounce:0kB free_pcp:1712kB local_pcp:252kB free_cma:0kB [ 2612.784619] lowmem_reserve[]: 0 0 1 1 1 [ 2612.788615] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2612.828272] lowmem_reserve[]: 0 0 0 0 0 [ 2612.832410] Node 1 Normal free:53552kB min:53876kB low:67344kB high:80812kB active_anon:2200kB inactive_anon:171788kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2612.872673] lowmem_reserve[]: 0 0 0 0 0 [ 2612.876682] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2612.894306] Node 0 DMA32: 421*4kB (MEH) 230*8kB (UMEH) 248*16kB (MEH) 150*32kB (UMEH) 58*64kB (UMEH) 25*128kB (UMH) 12*256kB (UM) 24*512kB (UMH) 1*1024kB (M) 0*2048kB 0*4096kB = 35588kB [ 2612.911689] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2612.922855] Node 1 Normal: 614*4kB (UME) 399*8kB (UME) 102*16kB (UM) 28*32kB (ME) 15*64kB (UME) 5*128kB (UM) 3*256kB (UM) 0*512kB 2*1024kB (UE) 0*2048kB 10*4096kB (UM) = 53552kB [ 2612.939015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2612.948860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2612.960262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2612.969112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2612.992161] 104357 total pagecache pages [ 2612.996238] 0 pages in swap cache [ 2612.999734] Swap cache stats: add 0, delete 0, find 0/0 [ 2613.008977] Free swap = 0kB [ 2613.013737] Total swap = 0kB [ 2613.016755] 2097051 pages RAM [ 2613.019854] 0 pages HighMem/MovableOnly [ 2613.027236] 369649 pages reserved [ 2613.032471] 0 pages cma reserved [ 2613.035834] Unreclaimable slab info: [ 2613.039546] Name Used Total [ 2613.048703] pid_2 66KB 80KB [ 2613.055720] batadv_tt_change_cache 1KB 7KB [ 2613.062470] batadv_tl_cache 5KB 20KB [ 2613.067848] TIPC 18KB 30KB [ 2613.073350] SCTPv6 24KB 43KB [ 2613.079255] DCCPv6 17KB 45KB [ 2613.084714] DCCP 16KB 42KB [ 2613.090109] RXRPC 21KB 45KB [ 2613.095631] rxrpc_call_jar 139KB 165KB [ 2613.101497] bridge_fdb_cache 10KB 23KB [ 2613.106879] fib6_nodes 185KB 304KB [ 2613.112333] ip6_dst_cache 316KB 708KB [ 2613.117697] RAWv6 121KB 141KB [ 2613.128067] UDPv6 37KB 41KB [ 2613.133614] TCPv6 24KB 48KB [ 2613.139015] nf_conntrack 5KB 11KB [ 2613.149466] t10_alua_lu_gp_cache 0KB 3KB [ 2613.155180] sd_ext_cdb 0KB 7KB [ 2613.165403] scsi_sense_cache 1056KB 1060KB [ 2613.170987] virtio_scsi_cmd 16KB 16KB [ 2613.176348] sgpool-128 8KB 8KB [ 2613.182651] sgpool-64 4KB 12KB [ 2613.188025] sgpool-32 2KB 15KB [ 2613.193762] sgpool-16 1KB 7KB [ 2613.199107] sgpool-8 0KB 7KB [ 2613.205813] mqueue_inode_cache 12KB 30KB [ 2613.212897] bio_post_read_ctx 14KB 15KB [ 2613.218327] bio-2 14KB 15KB [ 2613.223797] jfs_mp 7KB 7KB [ 2613.229206] cifs_small_rq 15KB 16KB [ 2613.234623] cifs_request 67KB 67KB [ 2613.239978] cifs_mpx_ids 0KB 7KB [ 2613.245429] nfs_commit_data 3KB 14KB [ 2613.251256] nfs_write_data 34KB 44KB [ 2613.256651] ext4_system_zone 1KB 7KB [ 2613.262112] bio-1 1KB 7KB [ 2613.267473] pid_namespace 2KB 11KB [ 2613.285078] rpc_buffers 17KB 25KB [ 2613.305960] rpc_tasks 2KB 7KB [ 2613.323470] UNIX 881KB 952KB [ 2613.328959] UDP-Lite 5KB 13KB [ 2613.334423] tcp_bind_bucket 1KB 8KB [ 2613.339791] ip_fib_trie 27KB 47KB [ 2613.345433] ip_fib_alias 130KB 213KB [ 2613.350873] ip_dst_cache 14KB 24KB [ 2613.356231] RAW 78KB 112KB [ 2613.361668] UDP 65KB 94KB [ 2613.367028] TCP 8KB 16KB [ 2613.372443] hugetlbfs_inode_cache 3KB 15KB [ 2613.378153] fscache_cookie_jar 1KB 7KB [ 2613.383707] eventpoll_pwq 19KB 43KB [ 2613.389065] eventpoll_epi 36KB 63KB [ 2613.394882] inotify_inode_mark 5KB 7KB [ 2613.400471] request_queue 199KB 199KB [ 2613.405826] blkdev_requests 1KB 3KB [ 2613.419390] blkdev_ioc 40KB 42KB [ 2613.425912] bio-0 1924KB 2058KB [ 2613.431661] biovec-max 2367KB 2376KB [ 2613.437023] biovec-64 1850KB 1850KB [ 2613.445542] biovec-16 198KB 210KB [ 2613.450963] bio_integrity_payload 1KB 8KB [ 2613.456669] khugepaged_mm_slot 14KB 19KB [ 2613.470178] uid_cache 0KB 4KB [ 2613.475561] dmaengine-unmap-2 0KB 3KB [ 2613.480982] skbuff_fclone_cache 86KB 105KB [ 2613.486511] skbuff_head_cache 9909KB 10338KB [ 2613.491944] configfs_dir_cache 3KB 7KB [ 2613.497395] file_lock_ctx 9KB 11KB [ 2613.503297] fsnotify_mark_connector 2KB 3KB [ 2613.509179] net_namespace 96KB 113KB [ 2613.514629] shmem_inode_cache 7921KB 7975KB [ 2613.520011] task_delay_info 208KB 438KB [ 2613.527930] taskstats 70KB 80KB [ 2613.536889] proc_dir_entry 951KB 1136KB [ 2613.544807] pde_opener 6KB 23KB [ 2613.553034] seq_file 311KB 354KB [ 2613.558394] sigqueue 53KB 70KB [ 2613.567110] kernfs_node_cache 18132KB 18246KB [ 2613.575012] mnt_cache 254KB 256KB [ 2613.583233] filp 7598KB 8238KB [ 2613.588609] names_cache 120700KB 120738KB [ 2613.596578] iint_cache 42KB 51KB [ 2613.604480] key_jar 4KB 7KB [ 2613.609842] uts_namespace 3KB 11KB [ 2613.618083] nsproxy 2KB 11KB [ 2613.623876] vm_area_struct 3370KB 3820KB [ 2613.629273] mm_struct 581KB 656KB [ 2613.634728] fs_cache 160KB 376KB [ 2613.640151] files_cache 604KB 888KB [ 2613.645512] signal_cache 1346KB 2141KB [ 2613.652180] sighand_cache 654KB 707KB [ 2613.657536] task_struct 6956KB 7013KB [ 2613.662981] cred_jar 2188KB 2940KB [ 2613.668332] anon_vma_chain 1076KB 1326KB [ 2613.678245] anon_vma 117KB 231KB [ 2613.684539] pid 79KB 244KB [ 2613.689902] Acpi-Operand 156KB 198KB [ 2613.697519] Acpi-ParseExt 9KB 11KB [ 2613.703261] Acpi-Parse 41KB 47KB [ 2613.708624] Acpi-State 52KB 63KB [ 2613.714037] Acpi-Namespace 20KB 27KB [ 2613.719397] numa_policy 0KB 3KB [ 2613.724821] debug_objects_cache 2832KB 3129KB [ 2613.730404] trace_event_file 297KB 298KB [ 2613.735764] ftrace_event_field 398KB 401KB [ 2613.741290] pool_workqueue 137KB 156KB [ 2613.746649] page->ptl 614KB 1047KB [ 2613.752101] kmalloc-2097152 2050KB 2050KB [ 2613.757459] kmalloc-524288 2056KB 2056KB [ 2613.762885] kmalloc-262144 1290KB 1290KB [ 2613.768238] kmalloc-131072 650KB 650KB [ 2613.775047] kmalloc-65536 2112KB 2178KB [ 2613.781042] kmalloc-32768 2079KB 2244KB [ 2613.787033] kmalloc-16384 1320KB 1402KB [ 2613.834543] kmalloc-8192 4620KB 4620KB [ 2613.839935] kmalloc-4096 19817KB 19856KB [ 2613.868773] kmalloc-2048 13653KB 15969KB [ 2613.897611] kmalloc-1024 10429KB 14269KB [ 2613.962551] kmalloc-512 20322KB 20572KB [ 2613.967948] kmalloc-256 4929KB 6585KB [ 2614.004904] kmalloc-128 1100KB 1838KB [ 2614.039004] kmalloc-96 4369KB 5336KB [ 2614.063842] kmalloc-64 3145KB 5036KB [ 2614.069229] kmalloc-32 2100KB 3146KB [ 2614.075638] kmalloc-192 1860KB 3092KB [ 2614.088961] kmem_cache 177KB 180KB [ 2614.117573] Out of memory (oom_kill_allocating_task): Kill process 8078 (syz-fuzzer) score 0 or sacrifice child [ 2614.135860] Killed process 23968 (syz-executor.5) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2614.276342] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2614.308888] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2614.339936] CPU: 0 PID: 9509 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2614.347406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2614.356754] Call Trace: [ 2614.359342] dump_stack+0x1fc/0x2ef [ 2614.362970] dump_header+0x15d/0xc3f [ 2614.366685] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2614.371789] ? ___ratelimit+0x319/0x590 [ 2614.375770] oom_kill_process.cold+0x10/0x692 [ 2614.380268] ? check_preemption_disabled+0x41/0x280 [ 2614.385289] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2614.390562] out_of_memory+0x1072/0x1390 [ 2614.394632] ? oom_killer_disable+0x270/0x270 [ 2614.399126] ? mutex_trylock+0x15f/0x1a0 [ 2614.403184] __alloc_pages_nodemask+0x23a2/0x2890 [ 2614.408026] ? find_get_entry+0x4cd/0x8a0 [ 2614.412184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2614.417049] alloc_pages_current+0x193/0x2a0 [ 2614.421460] filemap_fault+0x146e/0x2180 [ 2614.425548] ext4_filemap_fault+0x84/0xb0 [ 2614.429692] __do_fault+0x10b/0x4b0 [ 2614.433319] __handle_mm_fault+0x273b/0x41c0 [ 2614.437727] ? do_signal+0x49d/0x1670 [ 2614.441524] ? vm_insert_page+0x9c0/0x9c0 [ 2614.445661] ? check_preemption_disabled+0x41/0x280 [ 2614.450661] handle_mm_fault+0x436/0xb10 [ 2614.454705] __do_page_fault+0x68e/0xd60 [ 2614.458751] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2614.463747] ? spurious_fault+0x840/0x840 [ 2614.467875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2614.472703] ? page_fault+0x8/0x30 [ 2614.476239] page_fault+0x1e/0x30 [ 2614.479690] RIP: 0033:0x46b2a0 [ 2614.482864] Code: Bad RIP value. [ 2614.486210] RSP: 002b:000000c0009c7ab8 EFLAGS: 00010202 [ 2614.491558] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000403ace [ 2614.498807] RDX: 000000c0009c7ac0 RSI: 000000c0009c7bf0 RDI: 0000000000000011 [ 2614.506054] RBP: 000000c000d01548 R08: 0000000000000000 R09: 0000000000000000 [ 2614.513310] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c000d01660 [ 2614.520556] R13: 0000000000000000 R14: 000000c00109aea0 R15: 0000000000000001 [ 2614.546303] Mem-Info: [ 2614.548746] active_anon:27619 inactive_anon:90085 isolated_anon:0 [ 2614.548746] active_file:11 inactive_file:0 isolated_file:0 [ 2614.548746] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2614.548746] slab_reclaimable:14310 slab_unreclaimable:117840 [ 2614.548746] mapped:11453 shmem:104308 pagetables:499 bounce:0 [ 2614.548746] free:25117 free_pcp:109 free_cma:0 [ 2614.585475] Node 0 active_anon:108276kB inactive_anon:188552kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45812kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2614.629836] Node 1 active_anon:2200kB inactive_anon:171788kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2614.688844] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2614.758414] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2614.818539] Node 0 DMA32 free:35936kB min:35996kB low:44992kB high:53988kB active_anon:108160kB inactive_anon:184936kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1760kB bounce:0kB free_pcp:444kB local_pcp:304kB free_cma:0kB [ 2614.889011] lowmem_reserve[]: 0 0 1 1 1 [ 2614.908942] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2614.994887] lowmem_reserve[]: 0 0 0 0 0 [ 2614.998900] Node 1 Normal free:53552kB min:53876kB low:67344kB high:80812kB active_anon:2196kB inactive_anon:171788kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:128kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2615.054689] lowmem_reserve[]: 0 0 0 0 0 [ 2615.058708] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10972kB [ 2615.097473] Node 0 DMA32: 656*4kB (UMEH) 290*8kB (UMEH) 249*16kB (UMEH) 150*32kB (UMEH) 57*64kB (MEH) 25*128kB (UMH) 12*256kB (UM) 22*512kB (UMH) 1*1024kB (M) 0*2048kB 0*4096kB = 35936kB [ 2615.184816] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2615.212036] Node 1 Normal: 614*4kB (UME) 399*8kB (UME) 102*16kB (UM) 28*32kB (ME) 15*64kB (UME) 5*128kB (UM) 3*256kB (UM) 0*512kB 2*1024kB (UE) 0*2048kB 10*4096kB (UM) = 53552kB [ 2615.247516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2615.259801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2615.285166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2615.298064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2615.326628] 104332 total pagecache pages [ 2615.366731] 0 pages in swap cache [ 2615.407920] Swap cache stats: add 0, delete 0, find 0/0 [ 2615.443530] Free swap = 0kB [ 2615.446570] Total swap = 0kB [ 2615.449580] 2097051 pages RAM [ 2615.484543] 0 pages HighMem/MovableOnly [ 2615.488548] 369649 pages reserved [ 2615.499131] 0 pages cma reserved [ 2615.526006] Unreclaimable slab info: [ 2615.529735] Name Used Total [ 2615.549029] pid_2 66KB 80KB [ 2615.558045] batadv_tt_change_cache 1KB 7KB [ 2615.624030] batadv_tl_cache 5KB 20KB [ 2615.629435] TIPC 18KB 30KB [ 2615.676369] SCTPv6 24KB 43KB [ 2615.718279] DCCPv6 17KB 45KB [ 2615.748757] DCCP 16KB 42KB [ 2615.757614] RXRPC 21KB 45KB [ 2615.824523] rxrpc_call_jar 139KB 165KB [ 2615.864518] bridge_fdb_cache 10KB 23KB [ 2615.902080] fib6_nodes 185KB 304KB [ 2615.907742] ip6_dst_cache 316KB 708KB [ 2615.956729] RAWv6 121KB 141KB [ 2615.997888] UDPv6 37KB 41KB [ 2616.026032] TCPv6 24KB 48KB [ 2616.048061] nf_conntrack 5KB 11KB [ 2616.079591] t10_alua_lu_gp_cache 0KB 3KB [ 2616.118150] sd_ext_cdb 0KB 7KB [ 2616.166903] scsi_sense_cache 1056KB 1060KB [ 2616.172360] virtio_scsi_cmd 16KB 16KB [ 2616.179167] sgpool-128 8KB 8KB [ 2616.237004] sgpool-64 4KB 12KB [ 2616.266514] sgpool-32 2KB 15KB [ 2616.275299] sgpool-16 1KB 7KB [ 2616.335343] sgpool-8 0KB 7KB [ 2616.357624] mqueue_inode_cache 12KB 30KB [ 2616.424179] bio_post_read_ctx 14KB 15KB [ 2616.429625] bio-2 14KB 15KB [ 2616.504436] jfs_mp 7KB 7KB [ 2616.518114] cifs_small_rq 15KB 16KB [ 2616.595652] cifs_request 67KB 67KB [ 2616.609421] cifs_mpx_ids 0KB 7KB [ 2616.645163] nfs_commit_data 3KB 14KB [ 2616.659287] nfs_write_data 34KB 44KB [ 2616.673814] ext4_system_zone 1KB 7KB [ 2616.679202] bio-1 1KB 7KB [ 2616.687937] pid_namespace 2KB 11KB [ 2616.712710] rpc_buffers 17KB 25KB [ 2616.718087] rpc_tasks 2KB 7KB [ 2616.733897] UNIX 881KB 952KB [ 2616.739271] UDP-Lite 5KB 13KB [ 2616.744667] tcp_bind_bucket 1KB 8KB [ 2616.760170] ip_fib_trie 27KB 47KB [ 2616.765539] ip_fib_alias 130KB 213KB [ 2616.778973] ip_dst_cache 14KB 24KB [ 2616.789270] RAW 78KB 112KB [ 2616.830885] UDP 65KB 94KB [ 2616.836263] TCP 8KB 16KB [ 2616.864222] hugetlbfs_inode_cache 3KB 15KB [ 2616.946323] fscache_cookie_jar 1KB 7KB [ 2616.952992] eventpoll_pwq 19KB 43KB [ 2616.958359] eventpoll_epi 36KB 63KB [ 2617.002720] inotify_inode_mark 5KB 7KB [ 2617.008195] request_queue 199KB 199KB [ 2617.028966] blkdev_requests 1KB 3KB [ 2617.094366] blkdev_ioc 40KB 42KB [ 2617.112522] bio-0 1925KB 2058KB [ 2617.117905] biovec-max 2310KB 2376KB [ 2617.156975] biovec-64 1850KB 1850KB [ 2617.195773] biovec-16 202KB 213KB [ 2617.229057] bio_integrity_payload 1KB 8KB [ 2617.234847] khugepaged_mm_slot 14KB 19KB [ 2617.289315] uid_cache 0KB 4KB [ 2617.310314] dmaengine-unmap-2 0KB 3KB [ 2617.315701] skbuff_fclone_cache 86KB 105KB [ 2617.328421] skbuff_head_cache 9968KB 10338KB [ 2617.344171] configfs_dir_cache 3KB 7KB [ 2617.411064] file_lock_ctx 9KB 11KB [ 2617.416452] fsnotify_mark_connector 2KB 3KB [ 2617.457329] net_namespace 96KB 113KB [ 2617.467790] shmem_inode_cache 7921KB 7975KB [ 2617.539080] task_delay_info 208KB 438KB [ 2617.546325] taskstats 70KB 80KB [ 2617.563823] proc_dir_entry 951KB 1136KB [ 2617.569193] pde_opener 6KB 23KB [ 2617.633509] seq_file 311KB 354KB [ 2617.643260] sigqueue 53KB 70KB [ 2617.648628] kernfs_node_cache 18014KB 18214KB [ 2617.669015] mnt_cache 254KB 256KB [ 2617.697802] filp 7598KB 8238KB [ 2617.720571] names_cache 120700KB 120738KB [ 2617.725941] iint_cache 42KB 51KB [ 2617.738210] key_jar 4KB 7KB [ 2617.764101] uts_namespace 3KB 11KB [ 2617.769476] nsproxy 2KB 11KB [ 2617.795630] vm_area_struct 3370KB 3820KB [ 2617.804406] mm_struct 581KB 656KB [ 2617.867214] fs_cache 160KB 376KB [ 2617.882376] files_cache 604KB 888KB [ 2617.887742] signal_cache 1346KB 2141KB [ 2617.912818] sighand_cache 654KB 707KB [ 2617.954353] task_struct 6956KB 7013KB [ 2618.017670] cred_jar 2188KB 2940KB [ 2618.068497] anon_vma_chain 1076KB 1326KB [ 2618.100940] anon_vma 117KB 231KB [ 2618.106313] pid 79KB 244KB [ 2618.149121] Acpi-Operand 156KB 198KB [ 2618.163674] Acpi-ParseExt 9KB 11KB [ 2618.169050] Acpi-Parse 41KB 47KB [ 2618.213576] Acpi-State 52KB 63KB [ 2618.218970] Acpi-Namespace 20KB 27KB [ 2618.245208] numa_policy 0KB 3KB [ 2618.252841] debug_objects_cache 2832KB 3129KB [ 2618.258382] trace_event_file 297KB 298KB [ 2618.337398] ftrace_event_field 398KB 401KB [ 2618.348453] pool_workqueue 137KB 156KB [ 2618.366768] page->ptl 614KB 1047KB [ 2618.445982] kmalloc-2097152 2050KB 2050KB [ 2618.454607] kmalloc-524288 2056KB 2056KB [ 2618.463431] kmalloc-262144 1290KB 1290KB [ 2618.468817] kmalloc-131072 650KB 650KB [ 2618.524221] kmalloc-65536 2112KB 2178KB [ 2618.536955] kmalloc-32768 2079KB 2244KB [ 2618.545897] kmalloc-16384 1320KB 1402KB [ 2618.557399] kmalloc-8192 4620KB 4620KB [ 2618.587276] kmalloc-4096 19856KB 19856KB [ 2618.636961] kmalloc-2048 13653KB 15969KB [ 2618.656258] kmalloc-1024 10497KB 14269KB [ 2618.665098] kmalloc-512 20510KB 20595KB [ 2618.735894] kmalloc-256 4929KB 6585KB [ 2618.746121] kmalloc-128 1100KB 1838KB [ 2618.817774] kmalloc-96 4376KB 5336KB [ 2618.876695] kmalloc-64 3145KB 5036KB [ 2618.883776] kmalloc-32 2100KB 3146KB [ 2618.889121] kmalloc-192 1860KB 3092KB [ 2618.898929] kmem_cache 177KB 180KB [ 2618.913908] Out of memory (oom_kill_allocating_task): Kill process 9509 (syz-fuzzer) score 0 or sacrifice child [ 2618.947351] Killed process 23969 (syz-executor.0) total-vm:48512kB, anon-rss:424kB, file-rss:4kB, shmem-rss:0kB [ 2619.006597] oom_reaper: reaped process 31394 (syz-executor.5), now anon-rss:0kB, file-rss:13628kB, shmem-rss:0kB [ 2619.058006] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2619.127093] systemd-journal cpuset=/ mems_allowed=0-1 [ 2619.207365] CPU: 0 PID: 31314 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2619.215358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2619.224707] Call Trace: [ 2619.227298] dump_stack+0x1fc/0x2ef [ 2619.230925] dump_header+0x15d/0xc3f [ 2619.234640] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2619.239739] ? ___ratelimit+0x319/0x590 [ 2619.243712] oom_kill_process.cold+0x10/0x692 [ 2619.248206] ? check_preemption_disabled+0x41/0x280 [ 2619.253225] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2619.258504] out_of_memory+0x1072/0x1390 [ 2619.262575] ? oom_killer_disable+0x270/0x270 [ 2619.267072] ? mutex_trylock+0x15f/0x1a0 [ 2619.271139] __alloc_pages_nodemask+0x23a2/0x2890 [ 2619.275996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2619.280836] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2619.285686] ? kmem_cache_alloc+0x122/0x370 [ 2619.290003] ? prepare_creds+0x39/0x510 [ 2619.293976] ? do_faccessat+0x94/0x7a0 [ 2619.297874] ? ____cache_alloc_node+0x156/0x1d0 [ 2619.302541] ? cache_grow_begin+0x64/0x8a0 [ 2619.306772] cache_grow_begin+0xa4/0x8a0 [ 2619.310835] fallback_alloc+0x213/0x2e0 [ 2619.314808] kmem_cache_alloc+0x1e4/0x370 [ 2619.318955] getname_flags+0xce/0x590 [ 2619.322751] user_path_at_empty+0x2a/0x50 [ 2619.326897] do_faccessat+0x248/0x7a0 [ 2619.330699] ? __ia32_sys_fallocate+0x140/0x140 [ 2619.335373] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2619.340739] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2619.345755] ? do_syscall_64+0x21/0x620 [ 2619.349735] do_syscall_64+0xf9/0x620 [ 2619.353551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2619.358751] RIP: 0033:0x7fe1f5e259c7 [ 2619.362472] Code: Bad RIP value. [ 2619.365830] RSP: 002b:00007fff61ac7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2619.373538] RAX: ffffffffffffffda RBX: 00007fff61aca9a0 RCX: 00007fe1f5e259c7 [ 2619.380801] RDX: 00007fe1f6896a00 RSI: 0000000000000000 RDI: 0000561d171e89a3 [ 2619.388066] RBP: 00007fff61ac7ac0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.395330] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2619.402591] R13: 0000000000000000 R14: 00007fff61aca9a0 R15: 00007fff61ac7fb0 [ 2619.447329] Mem-Info: [ 2619.449828] active_anon:27364 inactive_anon:90085 isolated_anon:0 [ 2619.449828] active_file:27 inactive_file:8 isolated_file:0 [ 2619.449828] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2619.449828] slab_reclaimable:14295 slab_unreclaimable:117840 [ 2619.449828] mapped:7874 shmem:104308 pagetables:472 bounce:0 [ 2619.449828] free:20885 free_pcp:383 free_cma:0 [ 2619.604830] Node 0 active_anon:107260kB inactive_anon:188552kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31496kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2619.740878] Node 1 active_anon:2196kB inactive_anon:171788kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2619.778392] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2619.870780] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2619.875830] Node 0 DMA32 free:19944kB min:35996kB low:44992kB high:53988kB active_anon:107176kB inactive_anon:184936kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1660kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2619.931450] lowmem_reserve[]: 0 0 1 1 1 [ 2619.935451] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2619.968759] lowmem_reserve[]: 0 0 0 0 0 [ 2619.987453] Node 1 Normal free:26904kB min:53876kB low:67344kB high:80812kB active_anon:2176kB inactive_anon:171788kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2620.045510] lowmem_reserve[]: 0 0 0 0 0 [ 2620.073628] Node 0 DMA: 0*4kB 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10872kB [ 2620.214145] Node 0 DMA32: 718*4kB (UMEH) 275*8kB (UMEH) 219*16kB (MEH) 125*32kB (UMEH) 38*64kB (MEH) 11*128kB (UMH) 1*256kB (M) 3*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 18208kB [ 2620.236149] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2620.259103] Node 1 Normal: 609*4kB (UME) 398*8kB (ME) 103*16kB (M) 29*32kB (UME) 14*64kB (ME) 4*128kB (M) 2*256kB (M) 1*512kB (U) 2*1024kB (UE) 1*2048kB (U) 3*4096kB (UM) = 27012kB [ 2620.269274] syz-executor.5: vmalloc: allocation failure, allocated 1059782656 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2620.341731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2620.351189] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2620.356310] CPU: 0 PID: 31403 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2620.364182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2620.373524] Call Trace: [ 2620.376112] dump_stack+0x1fc/0x2ef [ 2620.379744] warn_alloc.cold+0x7b/0x18f [ 2620.383717] ? zone_watermark_ok_safe+0x260/0x260 [ 2620.388576] __vmalloc_area_node+0x4fd/0x780 [ 2620.388696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2620.392983] ? __vmalloc_node_range+0x180/0x180 [ 2620.392998] ? _raw_spin_unlock+0x29/0x40 [ 2620.393010] ? __get_vm_area_node+0x2e2/0x3a0 [ 2620.393030] __vmalloc_node_range+0xed/0x180 [ 2620.393044] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2620.393064] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2620.428915] vmalloc_user+0x70/0xe0 [ 2620.432546] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2620.436863] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2620.441008] __vb2_queue_alloc+0x472/0xe60 [ 2620.445252] vb2_core_create_bufs+0x273/0x7e0 [ 2620.449744] ? __vb2_queue_free+0x870/0x870 [ 2620.454063] ? __video_do_ioctl+0x632/0xcd0 [ 2620.458385] ? pi_state_update_owner+0x450/0x450 [ 2620.463135] ? __mutex_lock+0x368/0x1190 [ 2620.465365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2620.467190] vb2_create_bufs+0x332/0x620 [ 2620.480229] ? mark_held_locks+0xf0/0xf0 [ 2620.484283] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2620.489381] ? futex_wait_queue_me+0x404/0x5e0 [ 2620.493957] ? pi_state_update_owner+0x450/0x450 [ 2620.498712] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2620.503903] v4l_create_bufs+0xb2/0x160 [ 2620.507876] __video_do_ioctl+0x49a/0xcd0 [ 2620.512032] ? v4l_querycap+0x340/0x340 [ 2620.516012] ? __might_fault+0x192/0x1d0 [ 2620.520247] ? v4l_querycap+0x340/0x340 [ 2620.524219] video_usercopy+0x13f/0xfa0 [ 2620.528193] ? v4l_enumstd+0x60/0x60 [ 2620.531904] ? do_futex+0x171/0x1880 [ 2620.535613] ? mark_held_locks+0xf0/0xf0 [ 2620.539677] ? debug_check_no_obj_freed+0x201/0x490 [ 2620.544701] ? video_usercopy+0xfa0/0xfa0 [ 2620.546563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2620.548837] v4l2_ioctl+0x147/0x1a0 [ 2620.548850] ? video_devdata+0xa0/0xa0 [ 2620.564914] do_vfs_ioctl+0xcdb/0x12e0 [ 2620.568798] ? lock_downgrade+0x720/0x720 [ 2620.572942] ? check_preemption_disabled+0x41/0x280 [ 2620.577957] ? ioctl_preallocate+0x200/0x200 [ 2620.582367] ? __fget+0x356/0x510 [ 2620.585822] ? do_dup2+0x450/0x450 [ 2620.589359] ? __se_sys_futex+0x298/0x3b0 [ 2620.592936] 104332 total pagecache pages [ 2620.593505] ksys_ioctl+0x9b/0xc0 [ 2620.597546] 0 pages in swap cache [ 2620.600973] __x64_sys_ioctl+0x6f/0xb0 [ 2620.600988] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2620.601001] do_syscall_64+0xf9/0x620 [ 2620.601020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2620.601038] RIP: 0033:0x7f579755f0f9 [ 2620.601051] Code: Bad RIP value. [ 2620.601058] RSP: 002b:00007f5795ad1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2620.601071] RAX: ffffffffffffffda RBX: 00007f579767ef80 RCX: 00007f579755f0f9 [ 2620.601078] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000009 [ 2620.601086] RBP: 00007f57975baae9 R08: 0000000000000000 R09: 0000000000000000 [ 2620.601096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2620.665626] R13: 00007ffd5ade33ef R14: 00007f5795ad1300 R15: 0000000000022000 [ 2620.667898] Swap cache stats: add 0, delete 0, find 0/0 [ 2620.747747] Mem-Info: [ 2620.763311] Free swap = 0kB [ 2620.766336] Total swap = 0kB [ 2620.778660] active_anon:27338 inactive_anon:90085 isolated_anon:0 [ 2620.778660] active_file:31 inactive_file:14 isolated_file:0 [ 2620.778660] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2620.778660] slab_reclaimable:14270 slab_unreclaimable:117819 [ 2620.778660] mapped:7865 shmem:104308 pagetables:447 bounce:0 [ 2620.778660] free:13928 free_pcp:0 free_cma:0 [ 2620.828218] 2097051 pages RAM [ 2620.846605] Node 0 active_anon:107176kB inactive_anon:188552kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31460kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2620.852257] 0 pages HighMem/MovableOnly [ 2620.947443] 369649 pages reserved [ 2620.952494] Node 1 active_anon:2176kB inactive_anon:171788kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2620.958242] 0 pages cma reserved [ 2621.052051] Unreclaimable slab info: [ 2621.055788] Name Used Total [ 2621.057302] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2621.083289] pid_2 62KB 80KB [ 2621.166385] batadv_tt_change_cache 0KB 7KB [ 2621.174501] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2621.187883] batadv_tl_cache 5KB 20KB [ 2621.257021] Node 0 DMA32 free:17956kB min:35996kB low:44992kB high:53988kB active_anon:107176kB inactive_anon:184936kB active_file:32kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1660kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2621.265377] TIPC 16KB 30KB [ 2621.323241] lowmem_reserve[]: 0 0 1 1 1 [ 2621.327351] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2621.329124] SCTPv6 22KB 43KB [ 2621.428710] DCCPv6 17KB 45KB [ 2621.429905] lowmem_reserve[]: 0 0 0 0 0 [ 2621.438059] Node 1 Normal free:26760kB min:53876kB low:67344kB high:80812kB active_anon:2176kB inactive_anon:171788kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:128kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2621.441414] DCCP 16KB 42KB [ 2621.546056] lowmem_reserve[]: 0 0 0 0 0 [ 2621.547193] RXRPC 19KB 45KB [ 2621.616720] rxrpc_call_jar 133KB 165KB [ 2621.626784] Node 0 DMA: 0*4kB 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10872kB [ 2621.632928] bridge_fdb_cache 10KB 23KB [ 2621.715297] fib6_nodes 184KB 304KB [ 2621.720313] Node 0 DMA32: 717*4kB (UME) 272*8kB (ME) 219*16kB (UME) 122*32kB (ME) 38*64kB (UME) 10*128kB (UM) 1*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17956kB [ 2621.734038] ip6_dst_cache 333KB 708KB [ 2621.814040] RAWv6 113KB 141KB [ 2621.824049] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2621.835535] UDPv6 35KB 37KB [ 2621.912898] TCPv6 21KB 36KB [ 2621.918303] nf_conntrack 5KB 11KB [ 2621.927397] Node 1 Normal: 608*4kB (ME) 399*8kB (UME) 103*16kB (M) 29*32kB (UME) 14*64kB (ME) 4*128kB (M) 3*256kB (UM) 0*512kB 2*1024kB (UE) 1*2048kB (U) 3*4096kB (UM) = 26760kB [ 2621.943208] t10_alua_lu_gp_cache 0KB 3KB [ 2622.021234] sd_ext_cdb 0KB 7KB [ 2622.024111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2622.026640] scsi_sense_cache 1056KB 1060KB [ 2622.059077] net_ratelimit: 7 callbacks suppressed [ 2622.059083] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.059108] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.063973] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.070672] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.077145] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.083644] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.090185] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.096660] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.116149] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.122632] virtio_scsi_cmd 16KB 16KB [ 2622.122646] sgpool-128 8KB 8KB [ 2622.122654] sgpool-64 4KB 12KB [ 2622.122662] sgpool-32 2KB 15KB [ 2622.122673] sgpool-16 1KB 7KB [ 2622.128070] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2622.177139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2622.188711] sgpool-8 0KB 7KB [ 2622.257503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2622.260677] mqueue_inode_cache 12KB 30KB [ 2622.314037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2622.324488] bio_post_read_ctx 14KB 15KB [ 2622.338680] 104332 total pagecache pages [ 2622.407015] 0 pages in swap cache [ 2622.413927] bio-2 14KB 15KB [ 2622.417771] Swap cache stats: add 0, delete 0, find 0/0 [ 2622.455105] jfs_mp 7KB 7KB [ 2622.458373] Free swap = 0kB [ 2622.488874] cifs_small_rq 15KB 16KB [ 2622.497839] cifs_request 67KB 67KB [ 2622.505620] Total swap = 0kB [ 2622.508647] 2097051 pages RAM [ 2622.562170] cifs_mpx_ids 0KB 7KB [ 2622.567576] nfs_commit_data 3KB 14KB [ 2622.585614] 0 pages HighMem/MovableOnly [ 2622.602519] nfs_write_data 34KB 44KB [ 2622.607929] ext4_system_zone 1KB 7KB [ 2622.632581] bio-1 1KB 7KB [ 2622.637961] pid_namespace 2KB 11KB [ 2622.675564] rpc_buffers 17KB 25KB [ 2622.696391] rpc_tasks 2KB 7KB [ 2622.700613] 369649 pages reserved [ 2622.705217] 0 pages cma reserved [ 2622.706260] UNIX 879KB 952KB [ 2622.779795] UDP-Lite 5KB 13KB [ 2622.785192] tcp_bind_bucket 1KB 8KB [ 2622.987917] ip_fib_trie 27KB 47KB [ 2623.047493] ip_fib_alias 130KB 213KB [ 2623.095401] ip_dst_cache 14KB 24KB [ 2623.174205] RAW 75KB 112KB [ 2623.207952] UDP 62KB 94KB [ 2623.280181] TCP 8KB 11KB [ 2623.285577] hugetlbfs_inode_cache 3KB 15KB [ 2623.297909] fscache_cookie_jar 1KB 7KB [ 2623.306431] eventpoll_pwq 19KB 43KB [ 2623.376196] eventpoll_epi 36KB 63KB [ 2623.421936] inotify_inode_mark 5KB 7KB [ 2623.427418] request_queue 199KB 199KB [ 2623.455885] blkdev_requests 1KB 3KB [ 2623.461310] blkdev_ioc 39KB 42KB [ 2623.466672] bio-0 1925KB 2058KB [ 2623.518557] biovec-max 2310KB 2376KB [ 2623.528416] biovec-64 1850KB 1850KB [ 2623.557103] biovec-16 202KB 213KB [ 2623.627953] bio_integrity_payload 1KB 8KB [ 2623.647196] khugepaged_mm_slot 12KB 19KB [ 2623.729891] uid_cache 0KB 4KB [ 2623.735285] dmaengine-unmap-2 0KB 3KB [ 2623.778687] skbuff_fclone_cache 85KB 105KB [ 2623.787258] skbuff_head_cache 10289KB 10338KB [ 2623.869130] configfs_dir_cache 3KB 7KB [ 2623.874601] file_lock_ctx 9KB 11KB [ 2623.961521] fsnotify_mark_connector 2KB 3KB [ 2623.967443] net_namespace 87KB 113KB [ 2624.037413] shmem_inode_cache 7920KB 7975KB [ 2624.042932] task_delay_info 208KB 438KB [ 2624.048300] taskstats 63KB 80KB [ 2624.057079] proc_dir_entry 944KB 1132KB [ 2624.062496] pde_opener 6KB 23KB [ 2624.067857] seq_file 296KB 354KB [ 2624.076678] sigqueue 53KB 70KB [ 2624.082135] kernfs_node_cache 18004KB 18203KB [ 2624.087496] mnt_cache 248KB 256KB [ 2624.135266] filp 7598KB 8238KB [ 2624.155132] names_cache 120700KB 120738KB [ 2624.203659] iint_cache 42KB 51KB [ 2624.227712] key_jar 4KB 7KB [ 2624.236646] uts_namespace 3KB 11KB [ 2624.257546] nsproxy 2KB 11KB [ 2624.303401] vm_area_struct 3353KB 3820KB [ 2624.338246] mm_struct 565KB 656KB [ 2624.414118] fs_cache 160KB 376KB [ 2624.456182] files_cache 604KB 888KB [ 2624.497732] signal_cache 1346KB 2141KB [ 2624.506768] sighand_cache 654KB 707KB [ 2624.582712] task_struct 6956KB 7013KB [ 2624.588111] cred_jar 2188KB 2940KB [ 2624.626333] anon_vma_chain 1060KB 1326KB [ 2624.638297] anon_vma 106KB 231KB [ 2624.715383] pid 79KB 244KB [ 2624.754604] Acpi-Operand 156KB 198KB [ 2624.829728] Acpi-ParseExt 9KB 11KB [ 2624.835119] Acpi-Parse 41KB 47KB [ 2624.920955] Acpi-State 52KB 63KB [ 2624.926356] Acpi-Namespace 20KB 27KB [ 2625.003512] numa_policy 0KB 3KB [ 2625.045735] debug_objects_cache 2832KB 3129KB [ 2625.122338] trace_event_file 297KB 298KB [ 2625.127738] ftrace_event_field 398KB 401KB [ 2625.174208] pool_workqueue 135KB 156KB [ 2625.196644] page->ptl 601KB 1047KB [ 2625.246562] kmalloc-2097152 2050KB 2050KB [ 2625.272063] kmalloc-524288 2056KB 2056KB [ 2625.277479] kmalloc-262144 1290KB 1290KB [ 2625.328483] kmalloc-131072 650KB 650KB [ 2625.398412] kmalloc-65536 2112KB 2178KB [ 2625.464447] kmalloc-32768 2046KB 2244KB [ 2625.490212] kmalloc-16384 1287KB 1369KB [ 2625.495605] kmalloc-8192 4603KB 4620KB [ 2625.561263] kmalloc-4096 19856KB 19856KB [ 2625.566645] kmalloc-2048 13653KB 15969KB [ 2625.684566] kmalloc-1024 10659KB 14269KB [ 2625.724403] kmalloc-512 20632KB 20632KB [ 2625.799810] kmalloc-256 4929KB 6585KB [ 2625.805206] kmalloc-128 1100KB 1838KB [ 2625.844188] kmalloc-96 4376KB 5336KB [ 2625.994531] kmalloc-64 3133KB 5036KB [ 2626.091045] kmalloc-32 2100KB 3146KB [ 2626.096442] kmalloc-192 1860KB 3092KB [ 2626.206670] kmem_cache 177KB 180KB [ 2626.296394] Out of memory (oom_kill_allocating_task): Kill process 31314 (systemd-journal) score 0 or sacrifice child [ 2626.344320] Killed process 31314 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:1720kB [ 2626.366776] oom_reaper: reaped process 31314 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1720kB [ 2626.371525] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2626.438404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2626.446590] in:imklog cpuset=/ mems_allowed=0-1 [ 2626.465634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2626.465842] CPU: 0 PID: 31372 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2626.479532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2626.488881] Call Trace: [ 2626.491473] dump_stack+0x1fc/0x2ef [ 2626.495109] dump_header+0x15d/0xc3f [ 2626.498829] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2626.503934] ? ___ratelimit+0x319/0x590 [ 2626.507919] oom_kill_process.cold+0x10/0x692 [ 2626.512423] ? check_preemption_disabled+0x41/0x280 [ 2626.517459] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2626.522744] out_of_memory+0x1072/0x1390 [ 2626.526833] ? oom_killer_disable+0x270/0x270 [ 2626.531336] ? mutex_trylock+0x15f/0x1a0 [ 2626.535403] __alloc_pages_nodemask+0x23a2/0x2890 [ 2626.540257] ? find_get_entry+0x4cd/0x8a0 [ 2626.544416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2626.549286] alloc_pages_current+0x193/0x2a0 [ 2626.553702] filemap_fault+0x146e/0x2180 [ 2626.557785] ext4_filemap_fault+0x84/0xb0 [ 2626.561935] __do_fault+0x10b/0x4b0 [ 2626.565596] __handle_mm_fault+0x273b/0x41c0 [ 2626.570015] ? vm_insert_page+0x9c0/0x9c0 [ 2626.574173] ? lock_downgrade+0x720/0x720 [ 2626.578338] ? check_preemption_disabled+0x41/0x280 [ 2626.583380] handle_mm_fault+0x436/0xb10 [ 2626.587447] __do_page_fault+0x68e/0xd60 [ 2626.591511] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2626.596528] ? spurious_fault+0x840/0x840 [ 2626.600688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2626.605544] ? page_fault+0x8/0x30 [ 2626.609093] page_fault+0x1e/0x30 [ 2626.612556] RIP: 0033:0x7f7710634980 [ 2626.616272] Code: Bad RIP value. [ 2626.619633] RSP: 002b:00007f770ef202a8 EFLAGS: 00010212 [ 2626.625005] RAX: 0000000000000010 RBX: 000055f2de974530 RCX: 0000000000000000 [ 2626.632271] RDX: 0000000000000003 RSI: 000055f2de974530 RDI: 000055f2de975788 [ 2626.639551] RBP: 000055f2de975788 R08: 000055f2de975788 R09: f800000000000000 [ 2626.646822] R10: 00007f770ef20430 R11: 000000000007aec6 R12: 000055f2de974520 [ 2626.654091] R13: 000000000000000d R14: 0000000000000003 R15: 00007f770ef203d0 [ 2626.663382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2626.672668] Mem-Info: [ 2626.675289] active_anon:27238 inactive_anon:90085 isolated_anon:0 [ 2626.675289] active_file:24 inactive_file:471 isolated_file:0 [ 2626.675289] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2626.675289] slab_reclaimable:14249 slab_unreclaimable:117155 [ 2626.675289] mapped:7640 shmem:104308 pagetables:447 bounce:0 [ 2626.675289] free:99341 free_pcp:394 free_cma:0 [ 2626.688502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2626.710195] Node 0 active_anon:106776kB inactive_anon:188552kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29760kB dirty:0kB writeback:0kB shmem:244356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2626.746601] Node 1 active_anon:2176kB inactive_anon:171788kB active_file:92kB inactive_file:3820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2300kB dirty:0kB writeback:0kB shmem:172876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2626.776009] device bridge_slave_1 left promiscuous mode [ 2626.776099] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2626.798580] bridge0: port 2(bridge_slave_1) entered disabled state [ 2626.827956] device bridge_slave_0 left promiscuous mode [ 2626.829602] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2626.834361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2626.852326] Node 0 DMA32 free:18952kB min:35996kB low:44992kB high:53988kB active_anon:106720kB inactive_anon:184932kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7232kB pagetables:1568kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2626.888203] device veth1_macvtap left promiscuous mode [ 2626.898483] device veth0_macvtap left promiscuous mode [ 2626.907811] device veth1_vlan left promiscuous mode [ 2626.920937] device veth0_vlan left promiscuous mode [ 2626.954866] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2626.982502] lowmem_reserve[]: 0 0 1 1 1 [ 2626.987635] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2627.015425] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2627.065356] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2627.075044] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2627.085075] lowmem_reserve[]: 0 0 0 0 0 [ 2627.091655] systemd[1]: Stopped Journal Service. [ 2627.102717] Node 1 Normal free:629996kB min:53876kB low:67344kB high:80812kB active_anon:2464kB inactive_anon:171788kB active_file:2064kB inactive_file:10440kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:272kB bounce:0kB free_pcp:1660kB local_pcp:400kB free_cma:0kB [ 2627.155306] systemd[1]: Starting Journal Service... [ 2627.168871] lowmem_reserve[]: 0 0 0 0 0 [ 2627.173537] Node 0 DMA: 0*4kB 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10872kB [ 2627.197571] Node 0 DMA32: 710*4kB (UME) 283*8kB (UME) 240*16kB (UME) 139*32kB (UME) 39*64kB (UME) 10*128kB (UM) 1*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18960kB [ 2627.236890] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2627.285252] Node 1 Normal: 31*4kB (UE) 3*8kB (UME) 2*16kB (UM) 122*32kB (UME) 103*64kB (UME) 55*128kB (U) 49*256kB (UM) 44*512kB (UM) 33*1024kB (UE) 31*2048kB (UM) 148*4096kB (U) = 756276kB [ 2627.309220] systemd-journald[31732]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2627.325576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2627.343034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2627.354154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2627.365871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2627.377006] 108669 total pagecache pages [ 2627.383479] 0 pages in swap cache [ 2627.386942] Swap cache stats: add 0, delete 0, find 0/0 [ 2627.394914] Free swap = 0kB [ 2627.397932] Total swap = 0kB [ 2627.403523] 2097051 pages RAM [ 2627.406625] 0 pages HighMem/MovableOnly [ 2627.418441] 369649 pages reserved [ 2627.421899] 0 pages cma reserved [ 2627.425262] Out of memory (oom_kill_allocating_task): Kill process 31372 (in:imklog) score 0 or sacrifice child [ 2627.458403] Killed process 31370 (rsyslogd) total-vm:254332kB, anon-rss:760kB, file-rss:0kB, shmem-rss:0kB [ 2627.474993] oom_reaper: reaped process 31370 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2627.502479] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2627.525101] systemd[1]: rsyslog.service: Unit entered failed state. [ 2627.568861] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2627.766573] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. 06:48:00 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:48:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1f, 0x0, 0x3, {0x3, @win={{0x3, 0xfffffe00, 0x8, 0x2}, 0x5, 0x8b8, &(0x7f0000000000)={{0x68000000, 0x0, 0xfa, 0x1ff}}, 0xfffffffe, &(0x7f0000000040)="d114f0c5", 0xff}}, 0x8011}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x3, @pix_mp={0x8, 0x0, 0x36314d59, 0x8, 0x0, [{0x0, 0x9}, {0x1a8, 0x3f}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x9}, {0x2985, 0x4}, {0x8, 0x81}, {0x3244, 0x4}], 0x9, 0x8, 0x3, 0x1}}) 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:48:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x440) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @vbi={0x649af3ff, 0x20, 0x1, 0x0, [0x7, 0x1], [0x9, 0x3f], 0x1}}) 06:48:00 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x2, 0x0, 0x6, 0x4, 0x100, 0xfffffffffffffff8}, @alu={0x0, 0x0, 0x5, 0x3, 0x5, 0xc, 0x8}, @ldst={0x2, 0x1, 0x1, 0x0, 0xa, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='GPL\x00', 0xd2c, 0xdf, &(0x7f00000000c0)=""/223, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0xfffffbff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, r1, 0x1, r2, r3]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x2, 0x0, 0x6, 0x4, 0x100, 0xfffffffffffffff8}, @alu={0x0, 0x0, 0x5, 0x3, 0x5, 0xc, 0x8}, @ldst={0x2, 0x1, 0x1, 0x0, 0xa, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='GPL\x00', 0xd2c, 0xdf, &(0x7f00000000c0)=""/223, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0xfffffbff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, r1, 0x1, r2, r3]}, 0x80) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:48:00 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2632.225886] device hsr_slave_1 left promiscuous mode [ 2632.237119] device hsr_slave_0 left promiscuous mode 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2632.267499] team0 (unregistering): Port device team_slave_1 removed [ 2632.293474] team0 (unregistering): Port device team_slave_0 removed 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:48:00 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2632.314480] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2632.333126] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2632.380322] bond0 (unregistering): Released all slaves [ 2633.565654] IPVS: ftp: loaded support on port[0] = 21 [ 2633.567074] IPVS: ftp: loaded support on port[0] = 21 [ 2633.593630] IPVS: ftp: loaded support on port[0] = 21 [ 2633.632944] IPVS: ftp: loaded support on port[0] = 21 [ 2633.716236] IPVS: ftp: loaded support on port[0] = 21 [ 2634.384198] chnl_net:caif_netlink_parms(): no params data found [ 2634.414528] chnl_net:caif_netlink_parms(): no params data found [ 2634.438071] chnl_net:caif_netlink_parms(): no params data found [ 2634.947018] chnl_net:caif_netlink_parms(): no params data found [ 2634.965550] chnl_net:caif_netlink_parms(): no params data found [ 2635.540371] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.553180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2635.566367] device bridge_slave_0 entered promiscuous mode [ 2635.577432] Bluetooth: hci4: command 0x0409 tx timeout [ 2635.582757] Bluetooth: hci3: command 0x0409 tx timeout [ 2635.582800] Bluetooth: hci1: command 0x0409 tx timeout [ 2635.598586] Bluetooth: hci0: command 0x0409 tx timeout [ 2635.676264] Bluetooth: hci5: command 0x0409 tx timeout [ 2635.858409] bridge0: port 2(bridge_slave_1) entered blocking state [ 2635.864787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2635.879163] device bridge_slave_1 entered promiscuous mode [ 2635.936109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.953206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2635.963886] device bridge_slave_0 entered promiscuous mode [ 2635.976834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.987962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2635.995352] device bridge_slave_0 entered promiscuous mode [ 2636.028386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.034754] bridge0: port 2(bridge_slave_1) entered disabled state [ 2636.055110] device bridge_slave_1 entered promiscuous mode [ 2636.075464] bridge0: port 1(bridge_slave_0) entered blocking state [ 2636.084394] bridge0: port 1(bridge_slave_0) entered disabled state [ 2636.101267] device bridge_slave_0 entered promiscuous mode [ 2636.124075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2636.136286] bridge0: port 1(bridge_slave_0) entered disabled state [ 2636.150670] device bridge_slave_0 entered promiscuous mode [ 2636.164381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.173704] bridge0: port 2(bridge_slave_1) entered disabled state [ 2636.190558] device bridge_slave_1 entered promiscuous mode [ 2636.214058] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.221599] bridge0: port 2(bridge_slave_1) entered disabled state [ 2636.230491] device bridge_slave_1 entered promiscuous mode [ 2636.238583] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2636.246211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.254347] bridge0: port 2(bridge_slave_1) entered disabled state [ 2636.263344] device bridge_slave_1 entered promiscuous mode [ 2636.294710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2636.320696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2636.350995] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2636.517586] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2636.526937] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2636.538137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2636.548774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2636.558903] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2636.566312] team0: Port device team_slave_0 added [ 2636.574101] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2636.586276] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2636.775238] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2636.782899] team0: Port device team_slave_1 added [ 2636.816061] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2636.826016] team0: Port device team_slave_0 added [ 2636.832564] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2636.841314] team0: Port device team_slave_0 added [ 2637.043630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2637.053450] team0: Port device team_slave_1 added [ 2637.066581] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2637.075435] team0: Port device team_slave_1 added [ 2637.090051] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2637.105829] team0: Port device team_slave_0 added [ 2637.129467] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2637.145929] team0: Port device team_slave_0 added [ 2637.430675] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2637.438511] team0: Port device team_slave_1 added [ 2637.444424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2637.453283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2637.479611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2637.491811] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2637.500754] team0: Port device team_slave_1 added [ 2637.667122] Bluetooth: hci0: command 0x041b tx timeout [ 2637.672512] Bluetooth: hci1: command 0x041b tx timeout [ 2637.697092] Bluetooth: hci3: command 0x041b tx timeout [ 2637.711081] Bluetooth: hci4: command 0x041b tx timeout [ 2637.737161] Bluetooth: hci5: command 0x041b tx timeout [ 2637.787086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2637.793356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2637.827958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2637.848864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2637.855119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2637.890247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2637.921129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2637.936456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2637.971488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2638.263214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2638.279765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.315472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2638.328008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2638.334249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.360639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2638.376027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2638.383854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.411460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2638.427038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2638.434961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2638.447012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.478214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2638.490290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2638.496851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.523153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2638.534804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2638.541801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2638.567171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2638.581283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2638.588774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2638.595947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2638.614329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2638.621923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2638.643694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2638.651098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2638.660629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2638.683036] device hsr_slave_0 entered promiscuous mode [ 2638.689042] device hsr_slave_1 entered promiscuous mode [ 2638.704641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2638.737667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2638.760416] device hsr_slave_0 entered promiscuous mode [ 2638.766055] device hsr_slave_1 entered promiscuous mode [ 2638.775370] device hsr_slave_0 entered promiscuous mode [ 2638.782451] device hsr_slave_1 entered promiscuous mode [ 2638.791652] device hsr_slave_0 entered promiscuous mode [ 2638.797817] device hsr_slave_1 entered promiscuous mode [ 2638.803566] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2638.817040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2638.824001] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2638.831564] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2638.847476] device hsr_slave_0 entered promiscuous mode [ 2638.853277] device hsr_slave_1 entered promiscuous mode [ 2638.862512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2638.870102] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2638.877955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2638.884704] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2638.902568] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2639.259548] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2639.269302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2639.332517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2639.475778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2639.488406] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2639.509171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2639.543343] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2639.560117] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2639.688397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2639.695263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2639.710964] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2639.717231] 8021q: adding VLAN 0 to HW filter on device team0 [ 2639.725135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2639.736978] Bluetooth: hci4: command 0x040f tx timeout [ 2639.749384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2639.756110] Bluetooth: hci3: command 0x040f tx timeout [ 2639.762025] Bluetooth: hci1: command 0x040f tx timeout [ 2639.767727] Bluetooth: hci0: command 0x040f tx timeout [ 2639.769306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2639.788623] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2639.798920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2639.812442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2639.818921] Bluetooth: hci5: command 0x040f tx timeout [ 2639.823733] 8021q: adding VLAN 0 to HW filter on device team0 [ 2639.832397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2639.841651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2639.848751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2639.856198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2639.863205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2639.871968] device bridge_slave_1 left promiscuous mode [ 2639.877767] bridge0: port 2(bridge_slave_1) entered disabled state [ 2639.884692] device bridge_slave_0 left promiscuous mode [ 2639.890718] bridge0: port 1(bridge_slave_0) entered disabled state [ 2639.900708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2639.907761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2639.915237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2639.922319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2639.930915] device bridge_slave_1 left promiscuous mode [ 2639.936566] bridge0: port 2(bridge_slave_1) entered disabled state [ 2639.944283] device bridge_slave_0 left promiscuous mode [ 2639.950026] bridge0: port 1(bridge_slave_0) entered disabled state [ 2639.959670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2639.966398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2639.974463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2639.981585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2639.990225] device bridge_slave_1 left promiscuous mode [ 2639.995698] bridge0: port 2(bridge_slave_1) entered disabled state [ 2640.003149] device bridge_slave_0 left promiscuous mode [ 2640.009257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2640.019027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2640.025736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2640.034105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2640.040901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2640.049747] device bridge_slave_1 left promiscuous mode [ 2640.055181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2640.062659] device bridge_slave_0 left promiscuous mode [ 2640.068669] bridge0: port 1(bridge_slave_0) entered disabled state [ 2640.084419] device veth1_macvtap left promiscuous mode [ 2640.089812] device veth0_macvtap left promiscuous mode [ 2640.095107] device veth1_vlan left promiscuous mode [ 2640.100456] device veth0_vlan left promiscuous mode [ 2640.105732] device veth1_macvtap left promiscuous mode [ 2640.111556] device veth0_macvtap left promiscuous mode [ 2640.116994] device veth1_vlan left promiscuous mode [ 2640.122035] device veth0_vlan left promiscuous mode [ 2640.130360] device veth1_macvtap left promiscuous mode [ 2640.135650] device veth0_macvtap left promiscuous mode [ 2640.141328] device veth1_vlan left promiscuous mode [ 2640.146372] device veth0_vlan left promiscuous mode [ 2640.152077] device veth1_macvtap left promiscuous mode [ 2640.157462] device veth0_macvtap left promiscuous mode [ 2640.162778] device veth1_vlan left promiscuous mode [ 2640.168109] device veth0_vlan left promiscuous mode [ 2641.816654] Bluetooth: hci0: command 0x0419 tx timeout [ 2641.822001] Bluetooth: hci1: command 0x0419 tx timeout [ 2641.836439] Bluetooth: hci3: command 0x0419 tx timeout [ 2641.847266] Bluetooth: hci4: command 0x0419 tx timeout [ 2641.896516] Bluetooth: hci5: command 0x0419 tx timeout [ 2645.001715] device hsr_slave_1 left promiscuous mode [ 2645.009243] device hsr_slave_0 left promiscuous mode [ 2645.029240] team0 (unregistering): Port device team_slave_1 removed [ 2645.040109] team0 (unregistering): Port device team_slave_0 removed [ 2645.050042] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2645.061291] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2645.093938] bond0 (unregistering): Released all slaves [ 2645.138347] device hsr_slave_1 left promiscuous mode [ 2645.145720] device hsr_slave_0 left promiscuous mode [ 2645.160415] team0 (unregistering): Port device team_slave_1 removed [ 2645.173402] team0 (unregistering): Port device team_slave_0 removed [ 2645.183653] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2645.197244] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2645.229105] bond0 (unregistering): Released all slaves [ 2645.270931] device hsr_slave_1 left promiscuous mode [ 2645.280110] device hsr_slave_0 left promiscuous mode [ 2645.295719] team0 (unregistering): Port device team_slave_1 removed [ 2645.307529] team0 (unregistering): Port device team_slave_0 removed [ 2645.318609] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2645.328819] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2645.360316] bond0 (unregistering): Released all slaves [ 2645.404122] device hsr_slave_1 left promiscuous mode [ 2645.411742] device hsr_slave_0 left promiscuous mode [ 2645.431915] team0 (unregistering): Port device team_slave_1 removed [ 2645.441391] team0 (unregistering): Port device team_slave_0 removed [ 2645.452214] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2645.463268] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2645.494873] bond0 (unregistering): Released all slaves [ 2645.509237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2645.517202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2645.524909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.531367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.539387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2645.546584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2645.553818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2645.565220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2645.578397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2645.588251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2645.599092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2645.611218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2645.618168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2645.626272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2645.633843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.640235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.649459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2645.657327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2645.665104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.671504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.678940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2645.686959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2645.694508] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.700914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.708393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2645.715291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2645.725254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2645.734505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2645.746349] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2645.752993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2645.760139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2645.771052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2645.781771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2645.792063] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2645.798439] 8021q: adding VLAN 0 to HW filter on device team0 [ 2645.806706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2645.821287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2645.828239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2645.837920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2645.845626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2645.854285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2645.864295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2645.879458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2645.889719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2645.902316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2645.909900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2645.918157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2645.925662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2645.934224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2645.942164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2645.950255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2645.959326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2645.972418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2645.981321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2645.990613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2645.998012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2646.005132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2646.013379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2646.021363] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.027773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2646.034854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2646.041942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2646.048885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2646.056811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2646.064181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2646.072288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2646.082644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2646.092050] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2646.098520] 8021q: adding VLAN 0 to HW filter on device team0 [ 2646.109964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2646.117823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2646.124852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2646.133165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2646.140891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.147345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2646.154681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2646.163186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2646.170905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.177331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2646.186538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2646.194407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2646.205475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2646.215025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2646.222934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2646.230440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2646.238522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2646.246247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2646.253770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2646.261776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2646.271780] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2646.278438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2646.286958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2646.295693] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2646.301991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2646.316399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2646.324325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2646.333523] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.339934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2646.348199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2646.358246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2646.380563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2646.392113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2646.401533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2646.411732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2646.420318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2646.431614] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2646.442038] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2646.448610] 8021q: adding VLAN 0 to HW filter on device team0 [ 2646.458249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2646.466729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2646.473825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2646.481222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2646.489502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2646.498946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2646.509376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2646.520608] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2646.530139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2646.538038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2646.545827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2646.553398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2646.562083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2646.572300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2646.581468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2646.589981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2646.600955] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2646.609308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2646.619006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2646.627082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2646.634626] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.641031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2646.648216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2646.655814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2646.663236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2646.671227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2646.679231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2646.686022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2646.695145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2646.705849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2646.713837] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2646.722461] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2646.729294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2646.737154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2646.746290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2646.753885] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.760278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2646.767838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2646.775609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2646.782653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2646.790719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2646.799423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2646.813490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2646.823823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2646.835353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2646.844601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2646.853382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2646.864327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2646.872342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2646.880446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2646.889707] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2646.896910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2646.907381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2646.924181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2646.940410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2646.954714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2646.966564] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2646.972602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2646.984268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2646.996884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2647.007688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2647.021369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2647.028901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2647.036988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2647.058860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2647.067797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2647.075471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2647.108616] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2647.119313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2647.129216] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2647.141043] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2647.151534] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2647.159733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2647.168602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2647.181135] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2647.190958] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2647.199794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2647.210285] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2647.220218] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2647.230620] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2647.239097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2647.247103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2647.253851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2647.286741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2647.294774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2647.302910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2647.311063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2647.325409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2647.341176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2647.363084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2647.468588] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2647.482983] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2647.502662] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2647.515078] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2647.531275] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2647.542887] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2647.555351] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2647.573524] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2647.591951] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2647.611044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2647.626060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2647.638039] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2647.652125] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2647.663059] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2647.678408] device veth0_vlan entered promiscuous mode [ 2647.688864] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2647.703661] device veth0_vlan entered promiscuous mode [ 2647.710119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2647.718922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2647.726553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2647.735268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2647.743398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2647.750719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2647.757706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2647.766313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2647.779146] device veth1_vlan entered promiscuous mode [ 2647.793298] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2647.802345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2647.816337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2647.823379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2647.837899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2647.847764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2647.859491] device veth1_vlan entered promiscuous mode [ 2647.871233] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2647.883840] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2647.914566] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2647.931481] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2647.944438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2647.959514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2647.981634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2647.993425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2648.010936] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2648.019422] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2648.026877] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2648.039661] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2648.048803] device veth0_macvtap entered promiscuous mode [ 2648.055264] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2648.065030] device veth1_macvtap entered promiscuous mode [ 2648.071997] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2648.130829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2648.141162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2648.155192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2648.163503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2648.171824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2648.178961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2648.187765] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2648.198624] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2648.208260] device veth0_macvtap entered promiscuous mode [ 2648.214379] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2648.223483] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2648.238308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2648.246591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2648.254932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2648.265416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2648.274324] device veth0_vlan entered promiscuous mode [ 2648.284473] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2648.294938] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2648.303453] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2648.311277] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2648.319585] device veth1_macvtap entered promiscuous mode [ 2648.327104] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2648.333536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2648.341507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2648.349935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2648.362844] device veth1_vlan entered promiscuous mode [ 2648.369655] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2648.380461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2648.392681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2648.404805] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2648.427357] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2648.443219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2648.454079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2648.473451] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2648.481248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2648.507683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2648.517523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2648.524896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2648.541765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2648.560390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2648.573084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2648.587774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2648.607814] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2648.614681] device veth0_vlan entered promiscuous mode [ 2648.630320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2648.644339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2648.661213] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2648.668639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2648.676223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2648.686189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2648.695281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2648.705809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2648.716229] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2648.723161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2648.730207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2648.737555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2648.744435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2648.753173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2648.761428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2648.769980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2648.782727] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2648.801048] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2648.809040] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2648.822561] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2648.830850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2648.847736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2648.857269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2648.867491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2648.877909] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2648.884766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2648.894178] device veth1_vlan entered promiscuous mode [ 2648.900896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2648.909017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2648.916990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2648.924646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2648.934678] device veth0_macvtap entered promiscuous mode [ 2648.942186] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2648.976909] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2648.992578] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2649.000730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2649.009420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2649.019192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2649.029479] device veth0_vlan entered promiscuous mode [ 2649.036013] device veth1_macvtap entered promiscuous mode [ 2649.042350] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2649.053605] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2649.062573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2649.070662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2649.078202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2649.085084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2649.093346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2649.108113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2649.117141] device veth0_macvtap entered promiscuous mode [ 2649.123650] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2649.134472] device veth1_vlan entered promiscuous mode [ 2649.141639] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2649.154190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2649.164658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.174730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.185678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.195763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.204868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.214910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.225207] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2649.232692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2649.240940] device veth1_macvtap entered promiscuous mode [ 2649.248433] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2649.257397] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2649.264114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2649.277272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2649.284502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2649.292052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2649.299944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2649.308341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2649.319132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2649.330710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.346036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.355193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.365000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.374233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.384353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.394582] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2649.401611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2649.420997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2649.428578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2649.437751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2649.456451] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2649.465714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.477262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.486970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.498208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.507939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.517842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.527024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.536811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.547256] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2649.554367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2649.565059] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2649.576598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2649.585195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2649.599995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2649.609547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2649.619895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.629949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.642554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.653015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.662917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.672809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.681960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2649.691861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.702055] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2649.709226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2649.744729] device veth0_macvtap entered promiscuous mode [ 2649.758216] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2649.765926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2649.773484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2649.783566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2649.794529] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2649.817756] device veth1_macvtap entered promiscuous mode [ 2649.828340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2649.843457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2649.854488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.865072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.874678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.885457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.894571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.904653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.913915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.923675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.932817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2649.942850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2649.953156] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2649.960340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2649.979934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2649.988862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2650.004775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2650.015284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2650.024397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2650.035072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2650.044243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2650.054397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2650.064267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2650.074083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2650.083244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2650.093030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2650.103288] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2650.110590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2650.123540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2650.124767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.131843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2650.189134] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2650.206389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.221926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.241214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2650.248511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.258675] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2650.271013] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2650.281174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2650.281235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.289316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.312988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.317810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.333510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2650.350856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:48:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1f, 0x0, 0x3, {0x3, @win={{0x3, 0xfffffe00, 0x8, 0x2}, 0x5, 0x8b8, &(0x7f0000000000)={{0x68000000, 0x0, 0xfa, 0x1ff}}, 0xfffffffe, &(0x7f0000000040)="d114f0c5", 0xff}}, 0x8011}) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x3, @pix_mp={0x8, 0x0, 0x36314d59, 0x8, 0x0, [{0x0, 0x9}, {0x1a8, 0x3f}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x9}, {0x2985, 0x4}, {0x8, 0x81}, {0x3244, 0x4}], 0x9, 0x8, 0x3, 0x1}}) [ 2650.434533] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2650.448930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.471056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.503565] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2650.510706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.522771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2650.531234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.550854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2650.667979] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2650.678125] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2650.685803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.693248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.705611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.719472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2650.730243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.745727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2650.753913] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2650.762388] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2650.770219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.774224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.779342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.791028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.800286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2650.807711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2652.778735] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.784343] ieee802154 phy1 wpan1: encryption failed: -22 [ 2655.497075] oom_reaper: reaped process 626 (syz-executor.5), now anon-rss:0kB, file-rss:13568kB, shmem-rss:0kB [ 2655.519187] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2655.550244] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2655.559813] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2655.567262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2655.576610] Call Trace: [ 2655.579202] dump_stack+0x1fc/0x2ef [ 2655.582833] dump_header+0x15d/0xc3f [ 2655.586552] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2655.591652] ? ___ratelimit+0x319/0x590 [ 2655.595630] oom_kill_process.cold+0x10/0x692 [ 2655.600140] ? check_preemption_disabled+0x41/0x280 [ 2655.605160] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2655.610435] out_of_memory+0x1072/0x1390 [ 2655.614503] ? oom_killer_disable+0x270/0x270 [ 2655.618987] ? mutex_trylock+0x15f/0x1a0 [ 2655.623031] __alloc_pages_nodemask+0x23a2/0x2890 [ 2655.624489] syz-executor.5: vmalloc: allocation failure, allocated 1006731264 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2655.627865] ? find_get_entry+0x4cd/0x8a0 [ 2655.641793] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2655.645870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2655.645911] alloc_pages_current+0x193/0x2a0 [ 2655.660294] filemap_fault+0x146e/0x2180 [ 2655.664375] ext4_filemap_fault+0x84/0xb0 [ 2655.668527] __do_fault+0x10b/0x4b0 [ 2655.672148] __handle_mm_fault+0x273b/0x41c0 [ 2655.676551] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2655.681643] ? vm_insert_page+0x9c0/0x9c0 [ 2655.685797] ? check_preemption_disabled+0x41/0x280 [ 2655.690806] handle_mm_fault+0x436/0xb10 [ 2655.694866] __do_page_fault+0x68e/0xd60 [ 2655.698928] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2655.703941] ? spurious_fault+0x840/0x840 [ 2655.708084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2655.712924] ? page_fault+0x8/0x30 [ 2655.716456] page_fault+0x1e/0x30 [ 2655.719898] RIP: 0033:0x46af7d [ 2655.723105] Code: Bad RIP value. [ 2655.726459] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2655.731827] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2655.739082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2655.746341] RBP: 000000c000067f20 R08: 0000000000076337 R09: 0000000000000000 [ 2655.753595] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 2655.760857] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2655.768152] CPU: 0 PID: 626 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2655.775866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2655.782469] Mem-Info: [ 2655.785210] Call Trace: [ 2655.785229] dump_stack+0x1fc/0x2ef [ 2655.785248] warn_alloc.cold+0x7b/0x18f [ 2655.787658] active_anon:27974 inactive_anon:90083 isolated_anon:0 [ 2655.787658] active_file:28 inactive_file:0 isolated_file:0 [ 2655.787658] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2655.787658] slab_reclaimable:13223 slab_unreclaimable:116390 [ 2655.787658] mapped:22336 shmem:104308 pagetables:579 bounce:0 [ 2655.787658] free:14059 free_pcp:161 free_cma:0 [ 2655.790212] ? zone_watermark_ok_safe+0x260/0x260 [ 2655.793826] Node 0 active_anon:110280kB inactive_anon:180360kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87204kB dirty:4kB writeback:0kB shmem:236180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2655.797764] ? retint_kernel+0x2d/0x2d [ 2655.797812] __vmalloc_area_node+0x4fd/0x780 [ 2655.831052] Node 1 active_anon:1616kB inactive_anon:179972kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2140kB dirty:24kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2655.835849] ? __vmalloc_node_range+0x180/0x180 [ 2655.835867] ? _raw_spin_unlock+0x29/0x40 [ 2655.863530] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2655.867385] ? __get_vm_area_node+0x2e2/0x3a0 [ 2655.867404] __vmalloc_node_range+0xed/0x180 [ 2655.867420] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2655.871800] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2655.899025] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2655.899038] vmalloc_user+0x70/0xe0 [ 2655.899053] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2655.903695] Node 0 DMA32 free:18280kB min:35996kB low:44992kB high:53988kB active_anon:110280kB inactive_anon:176744kB active_file:116kB inactive_file:8kB unevictable:0kB writepending:404kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2224kB bounce:0kB free_pcp:360kB local_pcp:112kB free_cma:0kB [ 2655.907829] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2655.907844] __vb2_queue_alloc+0x472/0xe60 [ 2655.907868] vb2_core_create_bufs+0x273/0x7e0 [ 2655.934217] lowmem_reserve[]: 0 0 1 1 1 [ 2655.938703] ? __vb2_queue_free+0x870/0x870 [ 2655.938718] ? __video_do_ioctl+0x632/0xcd0 [ 2655.938735] ? pi_state_update_owner+0x450/0x450 [ 2655.938750] ? __mutex_lock+0x368/0x1190 [ 2655.943146] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2655.947466] vb2_create_bufs+0x332/0x620 [ 2655.947483] ? mark_held_locks+0xf0/0xf0 [ 2655.947499] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2655.952489] lowmem_reserve[]: 0 0 0 0 0 [ 2655.957852] ? futex_wait_queue_me+0x404/0x5e0 [ 2655.957867] ? pi_state_update_owner+0x450/0x450 [ 2655.957881] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2655.957905] v4l_create_bufs+0xb2/0x160 [ 2655.961496] Node 1 Normal free:27088kB min:53876kB low:67344kB high:80812kB active_anon:1616kB inactive_anon:179972kB active_file:44kB inactive_file:68kB unevictable:0kB writepending:24kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:92kB bounce:0kB free_pcp:284kB local_pcp:36kB free_cma:0kB [ 2655.965818] __video_do_ioctl+0x49a/0xcd0 [ 2655.965843] ? v4l_querycap+0x340/0x340 [ 2655.995783] lowmem_reserve[]: 0 0 0 0 0 [ 2655.999926] ? __might_fault+0x192/0x1d0 [ 2656.004130] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2656.008612] ? v4l_querycap+0x340/0x340 [ 2656.008628] video_usercopy+0x13f/0xfa0 [ 2656.008648] ? v4l_enumstd+0x60/0x60 [ 2656.012589] Node 0 DMA32: 1518*4kB (UME) 801*8kB (UME) 241*16kB (ME) 57*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18288kB [ 2656.016905] ? do_futex+0x171/0x1880 [ 2656.016921] ? mark_held_locks+0xf0/0xf0 [ 2656.016938] ? debug_check_no_obj_freed+0x201/0x490 [ 2656.021227] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2656.025978] ? video_usercopy+0xfa0/0xfa0 [ 2656.025994] v4l2_ioctl+0x147/0x1a0 [ 2656.030027] Node 1 Normal: 594*4kB (ME) 429*8kB (UME) 122*16kB (ME) 44*32kB (ME) 28*64kB (UME) 18*128kB (UM) 10*256kB (UM) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 1*4096kB (U) = 27088kB [ 2656.055870] ? video_devdata+0xa0/0xa0 [ 2656.055889] do_vfs_ioctl+0xcdb/0x12e0 [ 2656.055905] ? lock_downgrade+0x720/0x720 [ 2656.059943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2656.063987] ? check_preemption_disabled+0x41/0x280 [ 2656.069080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2656.073024] ? ioctl_preallocate+0x200/0x200 [ 2656.077601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2656.082338] ? __fget+0x356/0x510 [ 2656.087531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2656.091478] ? do_dup2+0x450/0x450 [ 2656.122179] 104369 total pagecache pages [ 2656.126294] ? __se_sys_futex+0x298/0x3b0 [ 2656.126317] ksys_ioctl+0x9b/0xc0 [ 2656.130268] 0 pages in swap cache [ 2656.134225] __x64_sys_ioctl+0x6f/0xb0 [ 2656.138278] Swap cache stats: add 0, delete 0, find 0/0 [ 2656.152460] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2656.152475] do_syscall_64+0xf9/0x620 [ 2656.152493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.156457] Free swap = 0kB [ 2656.160403] RIP: 0033:0x7f089b7550f9 [ 2656.164088] Total swap = 0kB [ 2656.178202] Code: Bad RIP value. [ 2656.178210] RSP: 002b:00007f0899cc7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2656.178225] RAX: ffffffffffffffda RBX: 00007f089b874f80 RCX: 00007f089b7550f9 [ 2656.181939] 2097051 pages RAM [ 2656.185974] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000009 [ 2656.185982] RBP: 00007f089b7b0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2656.185989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2656.186001] R13: 00007fff0e2a169f R14: 00007f0899cc7300 R15: 0000000000022000 [ 2656.190991] 0 pages HighMem/MovableOnly [ 2656.226678] Mem-Info: [ 2656.238873] 369649 pages reserved [ 2656.246548] active_anon:27972 inactive_anon:90083 isolated_anon:0 [ 2656.246548] active_file:13 inactive_file:13 isolated_file:0 [ 2656.246548] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2656.246548] slab_reclaimable:13157 slab_unreclaimable:116242 [ 2656.246548] mapped:22279 shmem:104308 pagetables:579 bounce:0 [ 2656.246548] free:14179 free_pcp:230 free_cma:0 [ 2656.252494] 0 pages cma reserved [ 2656.254136] Node 0 active_anon:110260kB inactive_anon:180360kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:236180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2656.273463] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2656.277033] Node 1 active_anon:1628kB inactive_anon:179972kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2048kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2656.285664] Killed process 31774 (syz-executor.4) total-vm:48512kB, anon-rss:444kB, file-rss:14340kB, shmem-rss:0kB [ 2656.520506] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2656.541964] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2656.547401] oom_reaper: reaped process 31774 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2656.572364] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2656.572679] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2656.577446] Node 0 DMA32 free:18760kB min:35996kB low:44992kB high:53988kB active_anon:110260kB inactive_anon:176744kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2224kB bounce:0kB free_pcp:696kB local_pcp:172kB free_cma:0kB [ 2656.577474] lowmem_reserve[]: 0 0 1 1 1 [ 2656.577490] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2656.577512] lowmem_reserve[]: 0 0 0 0 0 [ 2656.577529] Node 1 Normal free:27088kB min:53876kB low:67344kB high:80812kB active_anon:1628kB inactive_anon:179972kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:92kB bounce:0kB free_pcp:284kB local_pcp:36kB free_cma:0kB [ 2656.577558] lowmem_reserve[]: 0 0 0 0 0 [ 2656.577575] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2656.595067] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2656.614679] Node 0 DMA32: 1518*4kB (UME) 816*8kB (UME) 241*16kB (ME) 57*32kB (UME) 4*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18792kB [ 2656.615509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2656.641392] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2656.645306] Call Trace: [ 2656.645328] dump_stack+0x1fc/0x2ef [ 2656.645345] dump_header+0x15d/0xc3f [ 2656.673790] Node 1 Normal: 594*4kB (ME) 429*8kB (UME) 122*16kB (ME) 44*32kB (ME) 28*64kB (UME) 18*128kB (UM) 10*256kB (UM) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 1*4096kB (U) = 27088kB [ 2656.677736] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2656.677748] ? ___ratelimit+0x319/0x590 [ 2656.677765] oom_kill_process.cold+0x10/0x692 [ 2656.691980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2656.699398] ? check_preemption_disabled+0x41/0x280 [ 2656.699421] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2656.713811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2656.723131] out_of_memory+0x1072/0x1390 [ 2656.723154] ? oom_killer_disable+0x270/0x270 [ 2656.734164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2656.736820] ? mutex_trylock+0x15f/0x1a0 [ 2656.736842] __alloc_pages_nodemask+0x23a2/0x2890 [ 2656.740465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2656.744161] ? find_get_entry+0x4cd/0x8a0 [ 2656.760976] 104334 total pagecache pages [ 2656.766051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2656.766089] alloc_pages_current+0x193/0x2a0 [ 2656.770023] 0 pages in swap cache [ 2656.774500] filemap_fault+0x146e/0x2180 [ 2656.774527] ext4_filemap_fault+0x84/0xb0 [ 2656.783431] Swap cache stats: add 0, delete 0, find 0/0 [ 2656.788511] __do_fault+0x10b/0x4b0 [ 2656.788528] __handle_mm_fault+0x273b/0x41c0 [ 2656.788545] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2656.788560] ? vm_insert_page+0x9c0/0x9c0 [ 2656.799753] Free swap = 0kB [ 2656.802417] ? check_preemption_disabled+0x41/0x280 [ 2656.806488] Total swap = 0kB [ 2656.810934] handle_mm_fault+0x436/0xb10 [ 2656.819768] 2097051 pages RAM [ 2656.823793] __do_page_fault+0x68e/0xd60 [ 2656.828628] 0 pages HighMem/MovableOnly [ 2656.837177] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2656.837196] ? spurious_fault+0x840/0x840 [ 2656.841316] 369649 pages reserved [ 2656.845365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2656.845382] ? page_fault+0x8/0x30 [ 2656.845401] page_fault+0x1e/0x30 [ 2656.850240] 0 pages cma reserved [ 2656.854635] RIP: 0033:0x46af7d [ 2656.854649] Code: Bad RIP value. [ 2656.854659] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2656.954829] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2656.962100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2656.969382] RBP: 000000c000067f20 R08: 0000000000076337 R09: 0000000000000000 [ 2656.976657] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 2656.983930] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2657.006539] Mem-Info: [ 2657.009865] active_anon:27872 inactive_anon:90083 isolated_anon:0 [ 2657.009865] active_file:13 inactive_file:13 isolated_file:0 [ 2657.009865] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2657.009865] slab_reclaimable:13157 slab_unreclaimable:116242 [ 2657.009865] mapped:18704 shmem:104308 pagetables:579 bounce:0 [ 2657.009865] free:14116 free_pcp:464 free_cma:0 [ 2657.045971] Node 0 active_anon:109860kB inactive_anon:180360kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72768kB dirty:0kB writeback:0kB shmem:236180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2657.096487] Node 1 active_anon:1628kB inactive_anon:179972kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2048kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2657.128051] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2657.201421] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2657.221282] Node 0 DMA32 free:34164kB min:35996kB low:44992kB high:53988kB active_anon:109860kB inactive_anon:176744kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:1808kB local_pcp:1312kB free_cma:0kB [ 2657.317620] lowmem_reserve[]: 0 0 1 1 1 [ 2657.321638] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2657.383788] lowmem_reserve[]: 0 0 0 0 0 [ 2657.390380] Node 1 Normal free:27088kB min:53876kB low:67344kB high:80812kB active_anon:1628kB inactive_anon:179972kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:92kB bounce:0kB free_pcp:284kB local_pcp:36kB free_cma:0kB [ 2657.497589] lowmem_reserve[]: 0 0 0 0 0 [ 2657.501607] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10860kB [ 2657.561065] Node 0 DMA32: 4169*4kB (UME) 1327*8kB (UME) 275*16kB (UME) 61*32kB (UME) 6*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34284kB [ 2657.620992] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2657.741915] Node 1 Normal: 594*4kB (ME) 429*8kB (UME) 122*16kB (ME) 44*32kB (ME) 28*64kB (UME) 18*128kB (UM) 10*256kB (UM) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 1*4096kB (U) = 27088kB [ 2657.860985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2657.931438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2657.991251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2658.017271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2658.047121] 105111 total pagecache pages [ 2658.051234] 0 pages in swap cache [ 2658.054828] Swap cache stats: add 0, delete 0, find 0/0 [ 2658.060233] Free swap = 0kB [ 2658.063785] Total swap = 0kB [ 2658.067244] 2097051 pages RAM [ 2658.070379] 0 pages HighMem/MovableOnly [ 2658.078270] 369649 pages reserved [ 2658.082871] 0 pages cma reserved [ 2658.088441] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2658.103285] Killed process 31777 (syz-executor.0) total-vm:48512kB, anon-rss:444kB, file-rss:14340kB, shmem-rss:0kB [ 2661.508283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2661.526982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2661.542593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2661.550135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2661.565228] device bridge_slave_1 left promiscuous mode [ 2661.570767] bridge0: port 2(bridge_slave_1) entered disabled state [ 2661.586438] device bridge_slave_0 left promiscuous mode [ 2661.591965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2661.608953] device veth1_macvtap left promiscuous mode [ 2661.617636] device veth0_macvtap left promiscuous mode [ 2661.622980] device veth1_vlan left promiscuous mode [ 2661.631823] device veth0_vlan left promiscuous mode 06:48:31 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:48:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="5d37a8bf049731297352f8de85a193d21a3cba9ae777748d8578144b3168c34c5be30779f715e518fe03153b5acdf1622b2d8aeb529ad9f650b5186cb1e1e3754442a1266a30f5a1c9028138af615c6f2357b75aa2d9662ee443b0bd4e3f77244cce63b2e9c1ed37f1c93e4434a6d1c37d33d3cbaa8edc6c249162a787b166ebf3bfa9f70cd740c18b9b932a1f8838d1c247352002e6717b45f9c58fee2ee116c49fc4bc5006703e", &(0x7f00000000c0)=@tcp, 0x2}, 0x20) 06:48:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x440) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @vbi={0x649af3ff, 0x20, 0x1, 0x0, [0x7, 0x1], [0x9, 0x3f], 0x1}}) 06:48:31 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:48:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:48:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) socket$inet6_tcp(0xa, 0x1, 0x0) 06:48:31 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:48:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="5d37a8bf049731297352f8de85a193d21a3cba9ae777748d8578144b3168c34c5be30779f715e518fe03153b5acdf1622b2d8aeb529ad9f650b5186cb1e1e3754442a1266a30f5a1c9028138af615c6f2357b75aa2d9662ee443b0bd4e3f77244cce63b2e9c1ed37f1c93e4434a6d1c37d33d3cbaa8edc6c249162a787b166ebf3bfa9f70cd740c18b9b932a1f8838d1c247352002e6717b45f9c58fee2ee116c49fc4bc5006703e", &(0x7f00000000c0)=@tcp, 0x2}, 0x20) syz_open_dev$vim2m(&(0x7f00000008c0), 0x80000000, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="5d37a8bf049731297352f8de85a193d21a3cba9ae777748d8578144b3168c34c5be30779f715e518fe03153b5acdf1622b2d8aeb529ad9f650b5186cb1e1e3754442a1266a30f5a1c9028138af615c6f2357b75aa2d9662ee443b0bd4e3f77244cce63b2e9c1ed37f1c93e4434a6d1c37d33d3cbaa8edc6c249162a787b166ebf3bfa9f70cd740c18b9b932a1f8838d1c247352002e6717b45f9c58fee2ee116c49fc4bc5006703e", &(0x7f00000000c0)=@tcp, 0x2}, 0x20) (async) 06:48:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="5d37a8bf049731297352f8de85a193d21a3cba9ae777748d8578144b3168c34c5be30779f715e518fe03153b5acdf1622b2d8aeb529ad9f650b5186cb1e1e3754442a1266a30f5a1c9028138af615c6f2357b75aa2d9662ee443b0bd4e3f77244cce63b2e9c1ed37f1c93e4434a6d1c37d33d3cbaa8edc6c249162a787b166ebf3bfa9f70cd740c18b9b932a1f8838d1c247352002e6717b45f9c58fee2ee116c49fc4bc5006703e", &(0x7f00000000c0)=@tcp, 0x2}, 0x20) 06:48:31 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:48:32 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:48:32 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xfffffd8e, 0x1, 0x0, "375a5c6ad46e7fcc04ee272bc7f1535a12f92985c2907a6ee55b05cdaaa35b95", 0x38414262}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) [ 2667.092845] Bluetooth: hci3: command 0x0409 tx timeout [ 2667.172811] Bluetooth: hci4: command 0x0409 tx timeout [ 2669.172545] Bluetooth: hci3: command 0x041b tx timeout [ 2669.252519] Bluetooth: hci4: command 0x041b tx timeout [ 2669.298103] device hsr_slave_1 left promiscuous mode [ 2669.313655] device hsr_slave_0 left promiscuous mode [ 2669.338778] team0 (unregistering): Port device team_slave_1 removed [ 2669.356112] team0 (unregistering): Port device team_slave_0 removed [ 2669.374137] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2669.392310] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2669.449057] bond0 (unregistering): Released all slaves [ 2669.479109] IPVS: ftp: loaded support on port[0] = 21 [ 2669.494989] IPVS: ftp: loaded support on port[0] = 21 [ 2669.897458] chnl_net:caif_netlink_parms(): no params data found [ 2669.918757] chnl_net:caif_netlink_parms(): no params data found [ 2670.074181] bridge0: port 1(bridge_slave_0) entered blocking state [ 2670.083321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2670.090819] device bridge_slave_0 entered promiscuous mode [ 2670.127588] bridge0: port 2(bridge_slave_1) entered blocking state [ 2670.135156] bridge0: port 2(bridge_slave_1) entered disabled state [ 2670.153524] device bridge_slave_1 entered promiscuous mode [ 2670.160447] bridge0: port 1(bridge_slave_0) entered blocking state [ 2670.167725] bridge0: port 1(bridge_slave_0) entered disabled state [ 2670.183505] device bridge_slave_0 entered promiscuous mode [ 2670.219331] bridge0: port 2(bridge_slave_1) entered blocking state [ 2670.232456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2670.240401] device bridge_slave_1 entered promiscuous mode [ 2670.265316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2670.298167] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2670.324268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2670.349398] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2670.363055] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2670.370688] team0: Port device team_slave_0 added [ 2670.407383] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2670.423371] team0: Port device team_slave_1 added [ 2670.430061] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2670.438507] team0: Port device team_slave_0 added [ 2670.477747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2670.493360] team0: Port device team_slave_1 added [ 2670.499272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2670.522538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.548966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2670.578308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2670.592807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.642316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2670.664028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2670.670294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.697771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2670.713169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2670.721218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2670.743695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2670.750408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.776201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2670.815832] device hsr_slave_0 entered promiscuous mode [ 2670.834333] device hsr_slave_1 entered promiscuous mode [ 2670.851833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2670.873075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2670.880462] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2670.922538] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2670.940481] device hsr_slave_0 entered promiscuous mode [ 2670.953584] device hsr_slave_1 entered promiscuous mode [ 2670.973210] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2670.980505] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2671.133847] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2671.210200] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2671.231932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2671.251415] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2671.252220] Bluetooth: hci3: command 0x040f tx timeout [ 2671.273298] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2671.280667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2671.292930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2671.310268] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2671.322826] 8021q: adding VLAN 0 to HW filter on device team0 [ 2671.333266] Bluetooth: hci4: command 0x040f tx timeout [ 2671.353777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2671.364318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2671.371496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2671.380523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2671.390706] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.397147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2671.425151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2671.436138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2671.444194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2671.454602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2671.463491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2671.471828] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.478252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2671.510374] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2671.525084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2671.539420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2671.547065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2671.556335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2671.569981] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2671.576845] 8021q: adding VLAN 0 to HW filter on device team0 [ 2671.586136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2671.594238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2671.605768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2671.615717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2671.624075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2671.638153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2671.646032] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.652526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2671.667778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2671.676504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2671.691802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2671.702706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2671.713736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2671.720634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2671.729788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2671.744726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2671.757830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2671.767939] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.774371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2671.789153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2671.797573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2671.811802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2671.824458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2671.842270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2671.851818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2672.250651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2672.264097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2672.280403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2672.292762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2672.581778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2672.594976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2672.603975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2672.611687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2672.620377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2672.871735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2672.879966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2672.892774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2673.279805] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2673.327993] in:imklog cpuset=/ mems_allowed=0-1 [ 2673.332879] Bluetooth: hci3: command 0x0419 tx timeout [ 2673.364310] CPU: 1 PID: 31743 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2673.371788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2673.381135] Call Trace: [ 2673.383725] dump_stack+0x1fc/0x2ef [ 2673.387353] dump_header+0x15d/0xc3f [ 2673.391245] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2673.396639] ? ___ratelimit+0x319/0x590 [ 2673.400637] oom_kill_process.cold+0x10/0x692 [ 2673.405138] ? check_preemption_disabled+0x41/0x280 [ 2673.410160] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2673.415442] out_of_memory+0x1072/0x1390 [ 2673.419611] ? oom_killer_disable+0x270/0x270 [ 2673.424116] ? mutex_trylock+0x15f/0x1a0 [ 2673.428181] __alloc_pages_nodemask+0x23a2/0x2890 [ 2673.433206] ? find_get_entry+0x4cd/0x8a0 [ 2673.437367] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2673.442412] alloc_pages_current+0x193/0x2a0 [ 2673.446824] filemap_fault+0x146e/0x2180 [ 2673.450995] ext4_filemap_fault+0x84/0xb0 [ 2673.455176] __do_fault+0x10b/0x4b0 [ 2673.458810] __handle_mm_fault+0x273b/0x41c0 [ 2673.463220] ? vm_insert_page+0x9c0/0x9c0 [ 2673.467367] ? lock_downgrade+0x720/0x720 [ 2673.471529] ? check_preemption_disabled+0x41/0x280 [ 2673.476550] handle_mm_fault+0x436/0xb10 [ 2673.480615] __do_page_fault+0x68e/0xd60 [ 2673.484682] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2673.489697] ? spurious_fault+0x840/0x840 [ 2673.493842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2673.498689] ? page_fault+0x8/0x30 [ 2673.502228] page_fault+0x1e/0x30 [ 2673.505676] RIP: 0033:0x7fc69647fae0 [ 2673.509390] Code: Bad RIP value. [ 2673.512747] RSP: 002b:00007fc693e1b9b8 EFLAGS: 00010202 [ 2673.518102] RAX: 00007fc69647fae0 RBX: 00007fc69560ffe6 RCX: 0000000000000000 [ 2673.525367] RDX: 00007fc693e1c0b0 RSI: 00007fc696481090 RDI: 00007fc693e1bb10 [ 2673.532725] RBP: 00007fc693e1c0a0 R08: 0000000000000000 R09: 00007fc693e1c2cc [ 2673.540016] R10: 0000000000000000 R11: 000000000007dac6 R12: 00007fc693e1c1d8 [ 2673.547281] R13: 00007fc693e1c0b0 R14: 0000000000001f9f R15: 00007fc693e1c3d0 [ 2673.556746] Bluetooth: hci4: command 0x0419 tx timeout [ 2673.560245] Mem-Info: [ 2673.569238] active_anon:27897 inactive_anon:90082 isolated_anon:0 [ 2673.569238] active_file:32 inactive_file:0 isolated_file:0 [ 2673.569238] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2673.569238] slab_reclaimable:13200 slab_unreclaimable:113880 [ 2673.569238] mapped:22362 shmem:104303 pagetables:570 bounce:0 [ 2673.569238] free:25076 free_pcp:124 free_cma:0 [ 2673.609432] Node 0 active_anon:109728kB inactive_anon:180356kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87168kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2673.726834] Node 1 active_anon:1860kB inactive_anon:179972kB active_file:116kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2280kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2673.896077] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2674.001504] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2674.023584] Node 0 DMA32 free:35936kB min:35996kB low:44992kB high:53988kB active_anon:109752kB inactive_anon:176740kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2204kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2674.162289] lowmem_reserve[]: 0 0 1 1 1 [ 2674.166303] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2674.314029] lowmem_reserve[]: 0 0 0 0 0 [ 2674.318044] Node 1 Normal free:53832kB min:53876kB low:67344kB high:80812kB active_anon:1860kB inactive_anon:179972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2674.488273] lowmem_reserve[]: 0 0 0 0 0 [ 2674.506894] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2674.578655] Node 0 DMA32: 1670*4kB (ME) 867*8kB (ME) 310*16kB (UME) 108*32kB (UME) 30*64kB (UME) 8*128kB (UM) 6*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35728kB [ 2674.653637] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2674.716358] Node 1 Normal: 612*4kB (UME) 457*8kB (UME) 129*16kB (UME) 49*32kB (UME) 21*64kB (ME) 18*128kB (UM) 9*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 8*4096kB (U) = 54088kB [ 2674.793385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2674.841204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2674.880486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2674.913312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2674.954407] 104337 total pagecache pages [ 2674.958494] 0 pages in swap cache [ 2674.984773] Swap cache stats: add 0, delete 0, find 0/0 [ 2674.990145] Free swap = 0kB [ 2675.012317] Total swap = 0kB [ 2675.015359] 2097051 pages RAM [ 2675.018455] 0 pages HighMem/MovableOnly [ 2675.068766] 369649 pages reserved [ 2675.081597] 0 pages cma reserved [ 2675.085010] Out of memory (oom_kill_allocating_task): Kill process 31743 (in:imklog) score 0 or sacrifice child [ 2675.144888] Killed process 31741 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 2675.203161] oom_reaper: reaped process 31741 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2675.205317] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2675.227786] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2675.245825] CPU: 0 PID: 685 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2675.253538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2675.262885] Call Trace: [ 2675.265470] dump_stack+0x1fc/0x2ef [ 2675.269096] dump_header+0x15d/0xc3f [ 2675.272810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2675.277909] ? ___ratelimit+0x319/0x590 [ 2675.281887] oom_kill_process.cold+0x10/0x692 [ 2675.286380] ? check_preemption_disabled+0x41/0x280 [ 2675.291393] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2675.296681] out_of_memory+0x1072/0x1390 [ 2675.300748] ? oom_killer_disable+0x270/0x270 [ 2675.305246] ? mutex_trylock+0x15f/0x1a0 [ 2675.309311] __alloc_pages_nodemask+0x23a2/0x2890 [ 2675.314156] ? find_get_entry+0x4cd/0x8a0 [ 2675.318309] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2675.323176] alloc_pages_current+0x193/0x2a0 [ 2675.327585] filemap_fault+0x146e/0x2180 [ 2675.331660] ext4_filemap_fault+0x84/0xb0 [ 2675.335803] __do_fault+0x10b/0x4b0 [ 2675.339428] __handle_mm_fault+0x273b/0x41c0 [ 2675.343835] ? vm_insert_page+0x9c0/0x9c0 [ 2675.347983] ? debug_object_active_state+0x254/0x330 [ 2675.353098] ? check_preemption_disabled+0x41/0x280 [ 2675.358115] handle_mm_fault+0x436/0xb10 [ 2675.362181] __do_page_fault+0x68e/0xd60 [ 2675.366250] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2675.371264] ? spurious_fault+0x840/0x840 [ 2675.375411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2675.380253] ? page_fault+0x8/0x30 [ 2675.383791] page_fault+0x1e/0x30 [ 2675.387239] RIP: 0033:0x7f92c0f71000 [ 2675.390944] Code: Bad RIP value. [ 2675.394299] RSP: 002b:00007ffc94d627a8 EFLAGS: 00010246 [ 2675.399661] RAX: 0000000000000028 RBX: 00007f92c1c07620 RCX: 0000000000000000 [ 2675.406923] RDX: 0000000000001000 RSI: 00007f92c1c07670 RDI: 0000000000000003 [ 2675.414181] RBP: 0000000000000001 R08: 00007ffc94d627c4 R09: 000000000000000c [ 2675.421445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2675.428708] R13: 00007f92c1c07670 R14: 0000000000000003 R15: 0000000000000000 [ 2675.769575] Mem-Info: [ 2675.775801] active_anon:27691 inactive_anon:90082 isolated_anon:0 [ 2675.775801] active_file:20 inactive_file:0 isolated_file:0 [ 2675.775801] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2675.775801] slab_reclaimable:13200 slab_unreclaimable:113623 [ 2675.775801] mapped:22317 shmem:104303 pagetables:575 bounce:0 [ 2675.775801] free:25172 free_pcp:125 free_cma:0 [ 2675.844499] Node 0 active_anon:108860kB inactive_anon:180356kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2676.003189] Node 1 active_anon:1832kB inactive_anon:179972kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2204kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2676.141406] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2676.289989] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2676.307749] Node 0 DMA32 free:35732kB min:35996kB low:44992kB high:53988kB active_anon:108860kB inactive_anon:176740kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2088kB bounce:0kB free_pcp:440kB local_pcp:220kB free_cma:0kB [ 2676.373474] lowmem_reserve[]: 0 0 1 1 1 [ 2676.396163] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2676.438037] lowmem_reserve[]: 0 0 0 0 0 [ 2676.445661] Node 1 Normal free:53856kB min:53876kB low:67344kB high:80812kB active_anon:1832kB inactive_anon:179972kB active_file:124kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2676.483724] lowmem_reserve[]: 0 0 0 0 0 [ 2676.487819] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2676.551877] Node 0 DMA32: 1879*4kB (ME) 884*8kB (UME) 315*16kB (UME) 114*32kB (UME) 32*64kB (UME) 9*128kB (UM) 6*256kB (UM) 14*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36204kB [ 2676.635009] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2676.673939] Node 1 Normal: 611*4kB (UME) 462*8kB (UME) 125*16kB (UME) 51*32kB (UME) 20*64kB (ME) 19*128kB (UM) 9*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 8*4096kB (U) = 54188kB [ 2676.779273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2676.854266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2676.916064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2676.975036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2677.021298] 104360 total pagecache pages [ 2677.025389] 0 pages in swap cache [ 2677.051343] Swap cache stats: add 0, delete 0, find 0/0 [ 2677.069676] Free swap = 0kB [ 2677.088659] Total swap = 0kB [ 2677.117933] 2097051 pages RAM [ 2677.121064] 0 pages HighMem/MovableOnly [ 2677.154662] 369649 pages reserved [ 2677.158123] 0 pages cma reserved [ 2677.197481] Out of memory (oom_kill_allocating_task): Kill process 685 (syz-executor.0) score 0 or sacrifice child [ 2677.250642] Killed process 685 (syz-executor.0) total-vm:56708kB, anon-rss:460kB, file-rss:13596kB, shmem-rss:0kB [ 2677.306341] oom_reaper: reaped process 685 (syz-executor.0), now anon-rss:0kB, file-rss:13596kB, shmem-rss:0kB [ 2677.389719] modprobe invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2677.455379] modprobe cpuset=/ mems_allowed=0-1 [ 2677.460363] CPU: 0 PID: 1085 Comm: modprobe Not tainted 4.19.211-syzkaller #0 [ 2677.467630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2677.477061] Call Trace: [ 2677.479651] dump_stack+0x1fc/0x2ef [ 2677.483286] dump_header+0x15d/0xc3f [ 2677.486999] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2677.492081] ? ___ratelimit+0x319/0x590 [ 2677.496038] oom_kill_process.cold+0x10/0x692 [ 2677.500529] ? check_preemption_disabled+0x41/0x280 [ 2677.505553] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2677.510836] out_of_memory+0x1072/0x1390 [ 2677.514902] ? oom_killer_disable+0x270/0x270 [ 2677.519398] ? mutex_trylock+0x15f/0x1a0 [ 2677.523463] __alloc_pages_nodemask+0x23a2/0x2890 [ 2677.528322] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2677.533184] alloc_pages_vma+0xf2/0x780 [ 2677.537159] __handle_mm_fault+0xa47/0x41c0 [ 2677.541489] ? putname+0xe1/0x120 [ 2677.544936] ? vm_insert_page+0x9c0/0x9c0 [ 2677.549098] ? check_preemption_disabled+0x41/0x280 [ 2677.554117] handle_mm_fault+0x436/0xb10 [ 2677.558178] __do_page_fault+0x68e/0xd60 [ 2677.562239] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2677.567265] ? spurious_fault+0x840/0x840 [ 2677.571409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2677.576251] ? page_fault+0x8/0x30 [ 2677.579791] page_fault+0x1e/0x30 [ 2677.583224] RIP: 0033:0x7f1c9b1306af [ 2677.586918] Code: Bad RIP value. [ 2677.590260] RSP: 002b:00007ffd6a8f1d30 EFLAGS: 00010206 [ 2677.595605] RAX: 000055bf73878000 RBX: 000000006ffffeff RCX: 00007f1c9b3531b0 [ 2677.602868] RDX: 000055bf73a9bbd8 RSI: 0000000000000028 RDI: 0000000000000031 [ 2677.610131] RBP: 00007ffd6a8f1f30 R08: 000000037ffff1a0 R09: 000000037ffffa00 [ 2677.617392] R10: 000000006ffffdff R11: 000000006fffffff R12: 0000000000000001 [ 2677.624657] R13: 0000000070000021 R14: 0000000000000000 R15: 00007f1c9b353170 [ 2677.637664] Mem-Info: [ 2677.640102] active_anon:27673 inactive_anon:90082 isolated_anon:0 [ 2677.640102] active_file:18 inactive_file:18 isolated_file:3 [ 2677.640102] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2677.640102] slab_reclaimable:13198 slab_unreclaimable:113492 [ 2677.640102] mapped:22343 shmem:104303 pagetables:545 bounce:0 [ 2677.640102] free:24999 free_pcp:61 free_cma:0 [ 2677.673454] Node 0 active_anon:108892kB inactive_anon:180356kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:87168kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2677.701375] Node 1 active_anon:1800kB inactive_anon:179972kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2204kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2677.729222] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2677.759797] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2677.765370] Node 0 DMA32 free:35836kB min:35996kB low:44992kB high:53988kB active_anon:108836kB inactive_anon:176740kB active_file:48kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2088kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 2677.826238] lowmem_reserve[]: 0 0 1 1 1 [ 2677.830245] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2677.884030] lowmem_reserve[]: 0 0 0 0 0 [ 2677.888035] Node 1 Normal free:53652kB min:53876kB low:67344kB high:80812kB active_anon:1796kB inactive_anon:179972kB active_file:12kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2677.916990] lowmem_reserve[]: 0 0 0 0 0 [ 2677.920979] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2678.092956] Node 0 DMA32: 1895*4kB (UME) 893*8kB (UME) 318*16kB (UME) 112*32kB (UME) 33*64kB (UME) 9*128kB (UM) 6*256kB (UM) 14*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36388kB [ 2678.213632] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2678.281122] Node 1 Normal: 607*4kB (UME) 460*8kB (UME) 125*16kB (UME) 49*32kB (UME) 21*64kB (ME) 19*128kB (UM) 9*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 8*4096kB (U) = 54156kB [ 2678.411076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2678.420033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2678.522270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2678.597304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2678.673737] 104346 total pagecache pages [ 2678.677838] 0 pages in swap cache [ 2678.718566] Swap cache stats: add 0, delete 0, find 0/0 [ 2678.759243] Free swap = 0kB [ 2678.794709] Total swap = 0kB [ 2678.797806] 2097051 pages RAM [ 2678.800910] 0 pages HighMem/MovableOnly [ 2678.810387] 369649 pages reserved [ 2678.842074] 0 pages cma reserved [ 2678.877159] Out of memory (oom_kill_allocating_task): Kill process 1085 (modprobe) score 0 or sacrifice child [ 2678.911611] Killed process 1085 (modprobe) total-vm:456kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2678.940257] oom_reaper: reaped process 1085 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2678.964553] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 2679.043462] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2679.048529] CPU: 0 PID: 4696 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2679.056231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2679.065592] Call Trace: [ 2679.068190] dump_stack+0x1fc/0x2ef [ 2679.071825] dump_header+0x15d/0xc3f [ 2679.075549] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2679.080653] ? ___ratelimit+0x319/0x590 [ 2679.084632] oom_kill_process.cold+0x10/0x692 [ 2679.089131] ? lock_downgrade+0x720/0x720 [ 2679.093285] ? check_preemption_disabled+0x41/0x280 [ 2679.098303] out_of_memory+0x34d/0x1390 [ 2679.102289] ? oom_killer_disable+0x270/0x270 [ 2679.106787] ? mutex_trylock+0x15f/0x1a0 [ 2679.110857] __alloc_pages_nodemask+0x23a2/0x2890 [ 2679.115708] ? find_get_entry+0x4cd/0x8a0 [ 2679.119873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2679.124742] alloc_pages_current+0x193/0x2a0 [ 2679.129152] filemap_fault+0x146e/0x2180 [ 2679.133224] ext4_filemap_fault+0x84/0xb0 [ 2679.137369] __do_fault+0x10b/0x4b0 [ 2679.141007] __handle_mm_fault+0x273b/0x41c0 [ 2679.145426] ? vm_insert_page+0x9c0/0x9c0 [ 2679.149575] ? lock_downgrade+0x720/0x720 [ 2679.153720] ? lock_acquire+0x170/0x3c0 [ 2679.157707] ? check_preemption_disabled+0x41/0x280 [ 2679.162727] handle_mm_fault+0x436/0xb10 [ 2679.166798] __do_page_fault+0x68e/0xd60 [ 2679.170972] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2679.176001] ? spurious_fault+0x840/0x840 [ 2679.180150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2679.185108] ? page_fault+0x8/0x30 [ 2679.188648] page_fault+0x1e/0x30 [ 2679.192103] RIP: 0033:0x5593fa09bc11 [ 2679.195816] Code: Bad RIP value. [ 2679.199175] RSP: 002b:00007ffd67986910 EFLAGS: 00010293 [ 2679.204534] RAX: 0000000000000001 RBX: 00007ffd67986920 RCX: 0000000000000002 [ 2679.211800] RDX: 00005593fa0ca918 RSI: 00007ffd67986920 RDI: 00005593fb239190 [ 2679.219063] RBP: 00007ffd67986918 R08: 0000000000000008 R09: 00005593fb239198 [ 2679.226332] R10: 0000000000000004 R11: 00005593fa0e09a0 R12: 00005593fb2487c0 [ 2679.233601] R13: 00005593fb236620 R14: 00005593fb236600 R15: 0000000000000001 [ 2679.276705] Mem-Info: [ 2679.279168] active_anon:27658 inactive_anon:90082 isolated_anon:0 [ 2679.279168] active_file:16 inactive_file:0 isolated_file:0 [ 2679.279168] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2679.279168] slab_reclaimable:13178 slab_unreclaimable:113420 [ 2679.279168] mapped:22318 shmem:104303 pagetables:532 bounce:0 [ 2679.279168] free:25072 free_pcp:107 free_cma:0 [ 2679.339077] Node 0 active_anon:108836kB inactive_anon:180356kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2679.388820] Node 1 active_anon:1796kB inactive_anon:179972kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2204kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2679.528232] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2679.591790] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2679.596847] Node 0 DMA32 free:35992kB min:35996kB low:44992kB high:53988kB active_anon:108836kB inactive_anon:176740kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2036kB bounce:0kB free_pcp:352kB local_pcp:212kB free_cma:0kB [ 2679.634264] lowmem_reserve[]: 0 0 1 1 1 [ 2679.638269] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2679.676059] lowmem_reserve[]: 0 0 0 0 0 [ 2679.680059] Node 1 Normal free:53568kB min:53876kB low:67344kB high:80812kB active_anon:1796kB inactive_anon:179972kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2679.720346] lowmem_reserve[]: 0 0 0 0 0 [ 2679.728172] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2679.750377] Node 0 DMA32: 1889*4kB (ME) 875*8kB (UME) 310*16kB (UME) 114*32kB (UME) 31*64kB (UME) 9*128kB (UM) 6*256kB (UM) 14*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36028kB [ 2679.779925] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2679.818514] Node 1 Normal: 606*4kB (UME) 431*8kB (ME) 124*16kB (ME) 50*32kB (UME) 22*64kB (UME) 18*128kB (UM) 10*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (M) 8*4096kB (U) = 53616kB [ 2679.856078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2679.890953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2679.899541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2679.929005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2679.937660] 104336 total pagecache pages [ 2679.973750] 0 pages in swap cache [ 2679.977214] Swap cache stats: add 0, delete 0, find 0/0 [ 2680.003244] Free swap = 0kB [ 2680.006276] Total swap = 0kB [ 2680.009288] 2097051 pages RAM [ 2680.039403] 0 pages HighMem/MovableOnly [ 2680.047112] 369649 pages reserved [ 2680.050558] 0 pages cma reserved [ 2680.088042] Out of memory: Kill process 660 (syz-executor.5) score 1001 or sacrifice child [ 2680.114839] Killed process 662 (syz-executor.5) total-vm:60812kB, anon-rss:512kB, file-rss:14340kB, shmem-rss:72kB [ 2680.199506] oom_reaper: reaped process 662 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2680.218625] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2680.266399] systemd-journal cpuset=/ mems_allowed=0-1 [ 2680.307954] CPU: 1 PID: 31732 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2680.315943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2680.325286] Call Trace: [ 2680.327874] dump_stack+0x1fc/0x2ef [ 2680.331505] dump_header+0x15d/0xc3f [ 2680.335222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2680.340325] ? ___ratelimit+0x319/0x590 [ 2680.344309] oom_kill_process.cold+0x10/0x692 [ 2680.348806] ? check_preemption_disabled+0x41/0x280 [ 2680.353831] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2680.359108] out_of_memory+0x1072/0x1390 [ 2680.363266] ? oom_killer_disable+0x270/0x270 [ 2680.367761] ? mutex_trylock+0x15f/0x1a0 [ 2680.371830] __alloc_pages_nodemask+0x23a2/0x2890 [ 2680.376680] ? find_get_entry+0x4cd/0x8a0 [ 2680.380838] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2680.385702] alloc_pages_current+0x193/0x2a0 [ 2680.390113] filemap_fault+0x146e/0x2180 [ 2680.394184] ext4_filemap_fault+0x84/0xb0 [ 2680.398334] __do_fault+0x10b/0x4b0 [ 2680.402206] __handle_mm_fault+0x273b/0x41c0 [ 2680.406719] ? vm_insert_page+0x9c0/0x9c0 [ 2680.410976] ? check_preemption_disabled+0x41/0x280 [ 2680.416054] handle_mm_fault+0x436/0xb10 [ 2680.420103] __do_page_fault+0x68e/0xd60 [ 2680.424152] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2680.429151] ? spurious_fault+0x840/0x840 [ 2680.433280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2680.438109] ? page_fault+0x8/0x30 [ 2680.441629] page_fault+0x1e/0x30 [ 2680.445162] RIP: 0033:0x7f9c0075ea70 [ 2680.448861] Code: Bad RIP value. [ 2680.452204] RSP: 002b:00007ffe12768288 EFLAGS: 00010206 [ 2680.457550] RAX: 000055bee2d4d820 RBX: 00007ffe127685c0 RCX: 00007f9c000ccb00 [ 2680.464998] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 00007f9c009383a0 [ 2680.472271] RBP: 0000000000000001 R08: 000000000000ffc0 R09: 0000000000000050 [ 2680.479667] R10: 0000000000000069 R11: 00007f9bffe9d060 R12: 00007f9c009383a0 [ 2680.486972] R13: 000055bee2d48040 R14: 00007ffe12768580 R15: 000055bee2d4d350 [ 2680.504992] syz-executor.5: vmalloc: allocation failure, allocated 1021534208 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2680.548708] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2680.559375] Mem-Info: [ 2680.568866] active_anon:27652 inactive_anon:90082 isolated_anon:0 [ 2680.568866] active_file:25 inactive_file:8 isolated_file:0 [ 2680.568866] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2680.568866] slab_reclaimable:13178 slab_unreclaimable:113316 [ 2680.568866] mapped:22318 shmem:104303 pagetables:527 bounce:0 [ 2680.568866] free:13953 free_pcp:181 free_cma:0 [ 2680.569689] CPU: 0 PID: 662 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2680.609818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2680.619169] Call Trace: [ 2680.621762] dump_stack+0x1fc/0x2ef [ 2680.625392] warn_alloc.cold+0x7b/0x18f [ 2680.629372] ? zone_watermark_ok_safe+0x260/0x260 [ 2680.634215] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2680.638993] __vmalloc_area_node+0x4fd/0x780 [ 2680.640549] Node 0 active_anon:108812kB inactive_anon:180356kB active_file:80kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2680.643406] ? __vmalloc_node_range+0x180/0x180 [ 2680.643422] ? _raw_spin_unlock+0x29/0x40 [ 2680.643437] ? __get_vm_area_node+0x2e2/0x3a0 [ 2680.643456] __vmalloc_node_range+0xed/0x180 [ 2680.643472] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2680.643489] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2680.698449] vmalloc_user+0x70/0xe0 [ 2680.702081] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2680.703993] Node 1 active_anon:1796kB inactive_anon:179972kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2204kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2680.706402] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2680.737763] __vb2_queue_alloc+0x472/0xe60 [ 2680.742012] vb2_core_create_bufs+0x273/0x7e0 [ 2680.746512] ? __vb2_queue_free+0x870/0x870 [ 2680.750832] ? __video_do_ioctl+0x632/0xcd0 [ 2680.755155] ? pi_state_update_owner+0x450/0x450 [ 2680.759906] ? __mutex_lock+0x368/0x1190 [ 2680.763968] vb2_create_bufs+0x332/0x620 [ 2680.768033] ? mark_held_locks+0xf0/0xf0 [ 2680.770446] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2680.772085] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2680.772100] ? futex_wait_queue_me+0x404/0x5e0 [ 2680.772114] ? pi_state_update_owner+0x450/0x450 [ 2680.772128] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2680.772145] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2680.772166] v4l_create_bufs+0xb2/0x160 [ 2680.772184] __video_do_ioctl+0x49a/0xcd0 [ 2680.772204] ? v4l_querycap+0x340/0x340 [ 2680.772221] ? __might_fault+0x192/0x1d0 [ 2680.828037] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2680.831351] ? v4l_querycap+0x340/0x340 [ 2680.831368] video_usercopy+0x13f/0xfa0 [ 2680.831390] ? v4l_enumstd+0x60/0x60 [ 2680.831404] ? do_futex+0x171/0x1880 [ 2680.831418] ? mark_held_locks+0xf0/0xf0 [ 2680.831436] ? debug_check_no_obj_freed+0x201/0x490 [ 2680.859322] Node 0 DMA32 free:18472kB min:35996kB low:44992kB high:53988kB active_anon:108812kB inactive_anon:176740kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2016kB bounce:0kB free_pcp:464kB local_pcp:236kB free_cma:0kB [ 2680.859754] ? video_usercopy+0xfa0/0xfa0 [ 2680.884585] lowmem_reserve[]: 0 0 1 1 1 [ 2680.897862] v4l2_ioctl+0x147/0x1a0 [ 2680.897879] ? video_devdata+0xa0/0xa0 [ 2680.897895] do_vfs_ioctl+0xcdb/0x12e0 [ 2680.897909] ? lock_downgrade+0x720/0x720 [ 2680.897925] ? check_preemption_disabled+0x41/0x280 [ 2680.897937] ? ioctl_preallocate+0x200/0x200 [ 2680.897954] ? __fget+0x356/0x510 [ 2680.897970] ? do_dup2+0x450/0x450 [ 2680.897985] ? __se_sys_futex+0x298/0x3b0 [ 2680.898005] ksys_ioctl+0x9b/0xc0 [ 2680.898022] __x64_sys_ioctl+0x6f/0xb0 [ 2680.898036] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2680.898049] do_syscall_64+0xf9/0x620 [ 2680.898067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2680.898078] RIP: 0033:0x7f089b7550f9 [ 2680.898092] Code: Bad RIP value. [ 2680.898100] RSP: 002b:00007f0899cc7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2680.898114] RAX: ffffffffffffffda RBX: 00007f089b874f80 RCX: 00007f089b7550f9 [ 2680.898121] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2680.898129] RBP: 00007f089b7b0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2680.898137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2680.898146] R13: 00007fff0e2a169f R14: 00007f0899cc7300 R15: 0000000000022000 [ 2681.028123] Mem-Info: [ 2681.030585] active_anon:27627 inactive_anon:90082 isolated_anon:0 [ 2681.030585] active_file:16 inactive_file:17 isolated_file:0 [ 2681.030585] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2681.030585] slab_reclaimable:13175 slab_unreclaimable:113298 [ 2681.030585] mapped:22318 shmem:104303 pagetables:527 bounce:0 [ 2681.030585] free:13986 free_pcp:174 free_cma:0 [ 2681.074679] Node 0 active_anon:108716kB inactive_anon:180356kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2681.124972] Node 1 active_anon:1792kB inactive_anon:179972kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2204kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2681.169431] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2681.217411] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2681.224987] Node 0 DMA32 free:18608kB min:35996kB low:44992kB high:53988kB active_anon:108716kB inactive_anon:176740kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2016kB bounce:0kB free_pcp:436kB local_pcp:212kB free_cma:0kB [ 2681.252955] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2681.269852] lowmem_reserve[]: 0 0 1 1 1 [ 2681.305128] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2681.316621] lowmem_reserve[]: 0 0 0 0 0 [ 2681.357637] lowmem_reserve[]: 0 0 0 0 0 [ 2681.365320] Node 1 Normal free:26472kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:179972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2681.367827] Node 1 Normal free:26472kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:179972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:92kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2681.410016] lowmem_reserve[]: 0 0 0 0 0 [ 2681.426833] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2681.461012] Node 0 DMA32: 1720*4kB (UME) 846*8kB (UMEH) 200*16kB (UME) 49*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18608kB [ 2681.494630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2681.509076] lowmem_reserve[]: 0 0 0 0 0 [ 2681.517907] Node 1 Normal: 604*4kB (ME) 431*8kB (UME) 126*16kB (UME) 49*32kB (UME) 22*64kB (UME) 18*128kB (UM) 10*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26472kB [ 2681.527189] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2681.570621] net_ratelimit: 1 callbacks suppressed [ 2681.570628] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2681.582126] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2681.588668] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2681.595248] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2681.601846] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2681.638367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2681.665112] Node 0 DMA32: 1720*4kB (UME) 846*8kB (UMEH) 200*16kB (UME) 49*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18608kB [ 2681.666093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2681.739022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2681.800379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2681.801862] Node 1 Normal: 604*4kB (ME) 431*8kB (UME) 126*16kB (UME) 49*32kB (UME) 22*64kB (UME) 18*128kB (UM) 10*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26472kB [ 2681.867531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2681.910799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2681.919849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2681.923154] 104336 total pagecache pages [ 2681.970161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2682.002573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2682.040781] 0 pages in swap cache [ 2682.044355] Swap cache stats: add 0, delete 0, find 0/0 [ 2682.048363] 104336 total pagecache pages [ 2682.049819] Free swap = 0kB [ 2682.072765] Total swap = 0kB [ 2682.075510] 0 pages in swap cache [ 2682.075830] 2097051 pages RAM [ 2682.079325] Swap cache stats: add 0, delete 0, find 0/0 [ 2682.079334] Free swap = 0kB [ 2682.098864] 0 pages HighMem/MovableOnly [ 2682.127700] 369649 pages reserved [ 2682.132669] Total swap = 0kB [ 2682.135699] 2097051 pages RAM [ 2682.138793] 0 pages HighMem/MovableOnly [ 2682.171523] 369649 pages reserved [ 2682.174990] 0 pages cma reserved [ 2682.175445] 0 pages cma reserved [ 2682.210534] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2682.217151] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2682.221128] Out of memory (oom_kill_allocating_task): Kill process 31732 (systemd-journal) score 0 or sacrifice child [ 2682.223712] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2682.345048] Killed process 31732 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:0kB, shmem-rss:2212kB [ 2682.371501] oom_reaper: reaped process 31732 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2212kB [ 2682.385948] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 2682.470130] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2682.526189] CPU: 0 PID: 4696 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 2682.533923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2682.543279] Call Trace: [ 2682.545874] dump_stack+0x1fc/0x2ef [ 2682.549507] dump_header+0x15d/0xc3f [ 2682.553422] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2682.563387] ? ___ratelimit+0x319/0x590 [ 2682.567400] oom_kill_process.cold+0x10/0x692 [ 2682.571899] ? oom_badness.part.0+0x135/0x6e0 [ 2682.576401] ? lock_downgrade+0x720/0x720 [ 2682.580558] ? check_preemption_disabled+0x41/0x280 [ 2682.585583] out_of_memory+0x34d/0x1390 [ 2682.589560] ? oom_killer_disable+0x270/0x270 [ 2682.594057] ? mutex_trylock+0x15f/0x1a0 [ 2682.598123] __alloc_pages_nodemask+0x23a2/0x2890 [ 2682.602981] ? find_get_entry+0x4cd/0x8a0 [ 2682.607139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2682.612011] alloc_pages_current+0x193/0x2a0 [ 2682.616423] filemap_fault+0x146e/0x2180 [ 2682.620498] ext4_filemap_fault+0x84/0xb0 [ 2682.624648] __do_fault+0x10b/0x4b0 [ 2682.628281] __handle_mm_fault+0x273b/0x41c0 [ 2682.632697] ? vm_insert_page+0x9c0/0x9c0 [ 2682.636844] ? lock_downgrade+0x720/0x720 [ 2682.640994] ? lock_acquire+0x170/0x3c0 [ 2682.644985] ? check_preemption_disabled+0x41/0x280 [ 2682.650011] handle_mm_fault+0x436/0xb10 [ 2682.654077] __do_page_fault+0x68e/0xd60 [ 2682.658141] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2682.663156] ? spurious_fault+0x840/0x840 [ 2682.667304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2682.672150] ? page_fault+0x8/0x30 [ 2682.675687] page_fault+0x1e/0x30 [ 2682.679134] RIP: 0033:0x5593fa09bc11 [ 2682.682843] Code: Bad RIP value. [ 2682.686202] RSP: 002b:00007ffd67986910 EFLAGS: 00010293 [ 2682.691559] RAX: 0000000000000001 RBX: 00007ffd67986920 RCX: 0000000000000002 [ 2682.698827] RDX: 00005593fa0ca918 RSI: 00007ffd67986920 RDI: 00005593fb239190 [ 2682.706091] RBP: 00007ffd67986918 R08: 0000000000000008 R09: 00005593fb239198 [ 2682.713359] R10: 0000000000000004 R11: 00005593fa0e09a0 R12: 00005593fb2487c0 [ 2682.720628] R13: 00005593fb236620 R14: 00005593fb236600 R15: 0000000000000001 [ 2682.767637] Mem-Info: [ 2682.770092] active_anon:27527 inactive_anon:90082 isolated_anon:0 [ 2682.770092] active_file:25 inactive_file:0 isolated_file:0 [ 2682.770092] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2682.770092] slab_reclaimable:13175 slab_unreclaimable:113180 [ 2682.770092] mapped:21768 shmem:104303 pagetables:527 bounce:0 [ 2682.770092] free:14346 free_pcp:150 free_cma:0 [ 2682.818220] Node 0 active_anon:108668kB inactive_anon:180356kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:236160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2682.899390] Node 1 active_anon:1356kB inactive_anon:179968kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:181052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2682.981210] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2683.072535] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2683.077597] Node 0 DMA32 free:19152kB min:35996kB low:44992kB high:53988kB active_anon:108668kB inactive_anon:176740kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2012kB bounce:0kB free_pcp:456kB local_pcp:244kB free_cma:0kB [ 2683.166442] lowmem_reserve[]: 0 0 1 1 1 [ 2683.187353] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2683.269043] lowmem_reserve[]: 0 0 0 0 0 [ 2683.279470] Node 1 Normal free:27004kB min:53876kB low:67344kB high:80812kB active_anon:1356kB inactive_anon:179968kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:0kB bounce:0kB free_pcp:304kB local_pcp:0kB free_cma:0kB [ 2683.347983] lowmem_reserve[]: 0 0 0 0 0 [ 2683.374838] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2683.400049] Node 0 DMA32: 1740*4kB (UME) 804*8kB (UMEH) 210*16kB (UME) 55*32kB (UME) 6*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19152kB [ 2683.455313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2683.479924] Node 1 Normal: 591*4kB (UME) 424*8kB (ME) 122*16kB (UME) 49*32kB (UME) 25*64kB (ME) 18*128kB (M) 10*256kB (M) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 1*4096kB (U) = 27004kB [ 2683.553564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2683.579660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2683.588334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2683.628029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2683.664006] 104336 total pagecache pages [ 2683.668090] 0 pages in swap cache [ 2683.692846] Swap cache stats: add 0, delete 0, find 0/0 [ 2683.698227] Free swap = 0kB [ 2683.708371] Total swap = 0kB [ 2683.739183] 2097051 pages RAM [ 2683.749363] 0 pages HighMem/MovableOnly [ 2683.778086] 369649 pages reserved [ 2683.785138] 0 pages cma reserved [ 2683.788506] Out of memory: Kill process 654 (syz-executor.3) score 1001 or sacrifice child [ 2683.819973] Killed process 657 (syz-executor.3) total-vm:56972kB, anon-rss:480kB, file-rss:14340kB, shmem-rss:68kB [ 2683.841919] oom_reaper: reaped process 657 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2684.006619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2684.017844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2684.028868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2684.046563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2684.057184] device bridge_slave_1 left promiscuous mode [ 2684.064603] bridge0: port 2(bridge_slave_1) entered disabled state [ 2684.074324] device bridge_slave_0 left promiscuous mode [ 2684.081721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2684.103458] device veth1_macvtap left promiscuous mode [ 2684.109722] device veth0_macvtap left promiscuous mode [ 2684.122828] device veth1_vlan left promiscuous mode [ 2684.133518] device veth0_vlan left promiscuous mode [ 2684.148265] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2684.167466] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2684.311137] systemd[1]: rsyslog.service: Unit entered failed state. [ 2684.350380] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2684.421282] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2684.482834] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2684.489688] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2684.501884] systemd[1]: Stopped Journal Service. [ 2684.520614] systemd[1]: Starting Journal Service... [ 2684.559113] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2684.729292] systemd-journald[1105]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2687.649715] Bluetooth: hci3: command 0x0409 tx timeout [ 2689.731536] Bluetooth: hci3: command 0x041b tx timeout [ 2691.809052] Bluetooth: hci3: command 0x040f tx timeout [ 2691.966920] device hsr_slave_1 left promiscuous mode [ 2691.974755] device hsr_slave_0 left promiscuous mode [ 2691.993254] team0 (unregistering): Port device team_slave_1 removed [ 2692.002937] team0 (unregistering): Port device team_slave_0 removed [ 2692.014279] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2692.024549] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2692.056180] bond0 (unregistering): Released all slaves [ 2692.074508] IPVS: ftp: loaded support on port[0] = 21 [ 2692.097909] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2692.108713] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2692.122376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2692.129135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2692.141567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2692.233781] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2692.272319] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2692.285114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2692.296247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2692.398765] chnl_net:caif_netlink_parms(): no params data found [ 2692.469132] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2692.476486] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2692.486128] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2692.496643] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2692.504667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2692.516752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2692.530835] device veth0_vlan entered promiscuous mode [ 2692.540489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2692.547618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2692.561265] device veth1_vlan entered promiscuous mode [ 2692.567374] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2692.579803] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2692.615107] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2692.623334] bridge0: port 1(bridge_slave_0) entered blocking state [ 2692.632701] bridge0: port 1(bridge_slave_0) entered disabled state [ 2692.640912] device bridge_slave_0 entered promiscuous mode [ 2692.651021] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2692.662033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2692.670583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2692.677959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2692.687006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2692.695970] bridge0: port 2(bridge_slave_1) entered blocking state [ 2692.703810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2692.711954] device bridge_slave_1 entered promiscuous mode [ 2692.718782] device veth0_macvtap entered promiscuous mode [ 2692.727199] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2692.751804] device veth1_macvtap entered promiscuous mode [ 2692.758269] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2692.770955] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2692.783423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2692.793728] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2692.806282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2692.830100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.841094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.852241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.862743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.873834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.884588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.894421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.904812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.916062] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2692.924376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2692.932325] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2692.941021] team0: Port device team_slave_0 added [ 2692.946077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2692.955156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2692.964348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2692.974144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2692.988260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.002002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.015793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.031359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.040534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.050303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.059508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.069441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.080008] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2693.086890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2693.094554] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2693.103164] team0: Port device team_slave_1 added [ 2693.108884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2693.116598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2693.154873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2693.177462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2693.203138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2693.215809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2693.222591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2693.247842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2693.263613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2693.271629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2693.296185] device hsr_slave_0 entered promiscuous mode [ 2693.302713] device hsr_slave_1 entered promiscuous mode [ 2693.317557] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2693.325149] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2693.590474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2693.607292] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2693.619331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2693.626445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2693.649927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2693.665464] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2693.672790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2693.683714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2693.699682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2693.722950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2693.732463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2693.742745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 06:49:02 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:02 executing program 4: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:02 executing program 3: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xfffffd8e, 0x1, 0x0, "375a5c6ad46e7fcc04ee272bc7f1535a12f92985c2907a6ee55b05cdaaa35b95", 0x38414262}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) [ 2693.749794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2693.756873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2693.783811] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2693.791334] 8021q: adding VLAN 0 to HW filter on device team0 [ 2693.822497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2693.838253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2693.847755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2693.857020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2693.865516] bridge0: port 1(bridge_slave_0) entered blocking state [ 2693.871898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2693.880234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2693.889041] Bluetooth: hci3: command 0x0419 tx timeout [ 2693.895408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2693.903078] bridge0: port 2(bridge_slave_1) entered blocking state [ 2693.909454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2693.916704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2693.930868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2693.938252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2693.950206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2693.957110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2693.978092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2693.985258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2693.996618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2694.005297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2694.020605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2694.027515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2694.037020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2694.054847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2694.062353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2694.072876] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2694.079859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2694.114249] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2694.125061] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2694.131711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2694.138417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2694.149540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2694.157065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2694.165159] device bridge_slave_1 left promiscuous mode [ 2694.170994] bridge0: port 2(bridge_slave_1) entered disabled state [ 2694.178202] device bridge_slave_0 left promiscuous mode [ 2694.184365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2694.246952] device hsr_slave_1 left promiscuous mode [ 2694.254590] device hsr_slave_0 left promiscuous mode [ 2694.268296] team0 (unregistering): Port device team_slave_1 removed [ 2694.278994] team0 (unregistering): Port device team_slave_0 removed [ 2694.288170] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2694.303583] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2694.337169] bond0 (unregistering): Released all slaves [ 2694.354545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2694.403219] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2694.417325] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2694.424470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2694.434072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2694.507035] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2694.520101] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2694.527020] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2694.551615] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2694.558217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2694.572679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2694.585283] device veth0_vlan entered promiscuous mode [ 2694.593569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2694.601861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2694.614818] device veth1_vlan entered promiscuous mode [ 2694.622663] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2694.637701] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2694.657783] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2694.674927] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2694.683517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2694.697030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2694.706836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2694.722383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2694.736545] device veth0_macvtap entered promiscuous mode [ 2694.747442] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2694.764227] device veth1_macvtap entered promiscuous mode [ 2694.772554] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2694.790918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2694.805415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2694.822888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2694.834322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2694.848417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2694.866028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2694.876195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2694.891578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2694.903012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2694.920500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2694.934888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2694.947742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2694.964473] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2694.973399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2694.985375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2694.994782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2695.006853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2695.025119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2695.037647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2695.054334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.064598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2695.080486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.093521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2695.106650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.118375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2695.129328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.138615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2695.148314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2695.159937] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2695.166819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2695.177528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2695.185788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2695.392052] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2695.398322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2695.420691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2695.423036] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2695.435592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 06:49:03 executing program 4: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:03 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:03 executing program 3: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:03 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xfffffd8e, 0x1, 0x0, "375a5c6ad46e7fcc04ee272bc7f1535a12f92985c2907a6ee55b05cdaaa35b95", 0x38414262}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xfffffd8e, 0x1, 0x0, "375a5c6ad46e7fcc04ee272bc7f1535a12f92985c2907a6ee55b05cdaaa35b95", 0x38414262}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) 06:49:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) [ 2695.443610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2695.450854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2695.457804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:49:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) socket$inet6_tcp(0xa, 0x1, 0x0) 06:49:03 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:03 executing program 3: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) socket$inet(0x2, 0x81cdc6a32c9df6b0, 0xf458) 06:49:03 executing program 4: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:03 executing program 3: ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) socket$inet(0x2, 0x81cdc6a32c9df6b0, 0xf458) 06:49:03 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) socket$inet(0x2, 0x81cdc6a32c9df6b0, 0xf458) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) socket$inet(0x2, 0x81cdc6a32c9df6b0, 0xf458) (async) [ 2700.645541] oom_reaper: reaped process 1447 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2700.664760] systemd-rfkill invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2700.676743] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2700.694957] CPU: 1 PID: 1351 Comm: systemd-rfkill Not tainted 4.19.211-syzkaller #0 [ 2700.702775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2700.712124] Call Trace: [ 2700.714720] dump_stack+0x1fc/0x2ef [ 2700.718370] dump_header+0x15d/0xc3f [ 2700.722086] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2700.727188] ? ___ratelimit+0x319/0x590 [ 2700.731167] oom_kill_process.cold+0x10/0x692 [ 2700.735657] ? check_preemption_disabled+0x41/0x280 [ 2700.740657] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2700.745911] out_of_memory+0x1072/0x1390 [ 2700.749971] ? oom_killer_disable+0x270/0x270 [ 2700.750886] syz-executor.5: vmalloc: allocation failure, allocated 1011777536 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2700.754462] ? mutex_trylock+0x15f/0x1a0 [ 2700.772288] __alloc_pages_nodemask+0x23a2/0x2890 [ 2700.777139] ? find_get_entry+0x4cd/0x8a0 [ 2700.777429] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2700.781286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2700.781321] alloc_pages_current+0x193/0x2a0 [ 2700.781340] filemap_fault+0x146e/0x2180 [ 2700.799677] ext4_filemap_fault+0x84/0xb0 [ 2700.803814] __do_fault+0x10b/0x4b0 [ 2700.807435] __handle_mm_fault+0x273b/0x41c0 [ 2700.811837] ? vm_insert_page+0x9c0/0x9c0 [ 2700.815985] ? check_preemption_disabled+0x41/0x280 [ 2700.821003] handle_mm_fault+0x436/0xb10 [ 2700.825057] __do_page_fault+0x68e/0xd60 [ 2700.829116] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2700.834126] ? spurious_fault+0x840/0x840 [ 2700.838262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2700.843096] ? page_fault+0x8/0x30 [ 2700.846643] page_fault+0x1e/0x30 [ 2700.850085] RIP: 0033:0x7f2bc44e02e1 [ 2700.853791] Code: Bad RIP value. [ 2700.857139] RSP: 002b:00007ffe1a0592f0 EFLAGS: 00010206 [ 2700.862487] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2700.869744] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 2700.877005] RBP: 0000559950778820 R08: 00005599525d9040 R09: 0000000000000000 [ 2700.884258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000559950777f90 [ 2700.891512] R13: 00007ffe1a0593c0 R14: 0000000000000000 R15: 0000000000000000 [ 2700.898785] CPU: 0 PID: 1447 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2700.905935] Mem-Info: [ 2700.906580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2700.909035] active_anon:28002 inactive_anon:90086 isolated_anon:0 [ 2700.909035] active_file:17 inactive_file:15 isolated_file:0 [ 2700.909035] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2700.909035] slab_reclaimable:13299 slab_unreclaimable:115329 [ 2700.909035] mapped:22171 shmem:104308 pagetables:579 bounce:0 [ 2700.909035] free:13785 free_pcp:141 free_cma:0 [ 2700.918302] Call Trace: [ 2700.918322] dump_stack+0x1fc/0x2ef [ 2700.918371] warn_alloc.cold+0x7b/0x18f [ 2700.951727] Node 0 active_anon:109940kB inactive_anon:172244kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2700.954256] ? zone_watermark_ok_safe+0x260/0x260 [ 2700.954270] ? retint_kernel+0x2d/0x2d [ 2700.954299] __vmalloc_area_node+0x4fd/0x780 [ 2700.954318] ? __vmalloc_node_range+0x180/0x180 [ 2700.954332] ? _raw_spin_unlock+0x29/0x40 [ 2700.954346] ? __get_vm_area_node+0x2e2/0x3a0 [ 2700.954361] __vmalloc_node_range+0xed/0x180 [ 2700.954377] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2700.954396] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2700.954408] vmalloc_user+0x70/0xe0 [ 2700.954420] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2700.954434] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2700.954448] __vb2_queue_alloc+0x472/0xe60 [ 2700.954475] vb2_core_create_bufs+0x273/0x7e0 [ 2700.954491] ? __vb2_queue_free+0x870/0x870 [ 2700.954505] ? __video_do_ioctl+0x632/0xcd0 [ 2700.954523] ? pi_state_update_owner+0x450/0x450 [ 2700.954537] ? __mutex_lock+0x368/0x1190 [ 2700.954554] vb2_create_bufs+0x332/0x620 [ 2700.954570] ? mark_held_locks+0xf0/0xf0 [ 2700.954583] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2700.954596] ? futex_wait_queue_me+0x404/0x5e0 [ 2700.954610] ? pi_state_update_owner+0x450/0x450 [ 2700.954623] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2700.954639] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2700.954658] v4l_create_bufs+0xb2/0x160 [ 2700.954675] __video_do_ioctl+0x49a/0xcd0 [ 2700.954696] ? v4l_querycap+0x340/0x340 [ 2700.954715] ? __might_fault+0x192/0x1d0 [ 2700.954731] ? v4l_querycap+0x340/0x340 [ 2700.954746] video_usercopy+0x13f/0xfa0 [ 2700.954767] ? v4l_enumstd+0x60/0x60 [ 2700.954780] ? do_futex+0x171/0x1880 [ 2700.954795] ? mark_held_locks+0xf0/0xf0 [ 2700.954813] ? debug_check_no_obj_freed+0x201/0x490 [ 2700.954836] ? video_usercopy+0xfa0/0xfa0 [ 2700.954853] v4l2_ioctl+0x147/0x1a0 [ 2700.954865] ? video_devdata+0xa0/0xa0 [ 2700.954881] do_vfs_ioctl+0xcdb/0x12e0 [ 2700.954895] ? lock_downgrade+0x720/0x720 [ 2700.954910] ? check_preemption_disabled+0x41/0x280 [ 2700.954924] ? ioctl_preallocate+0x200/0x200 [ 2700.954942] ? __fget+0x356/0x510 [ 2700.954957] ? do_dup2+0x450/0x450 [ 2700.954971] ? __se_sys_futex+0x298/0x3b0 [ 2700.954992] ksys_ioctl+0x9b/0xc0 [ 2700.955008] __x64_sys_ioctl+0x6f/0xb0 [ 2700.955021] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2700.955035] do_syscall_64+0xf9/0x620 [ 2700.955052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2700.955063] RIP: 0033:0x7f089b7550f9 [ 2700.955077] Code: Bad RIP value. [ 2700.955084] RSP: 002b:00007f0899cc7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2700.955097] RAX: ffffffffffffffda RBX: 00007f089b874f80 RCX: 00007f089b7550f9 [ 2700.955105] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2700.955112] RBP: 00007f089b7b0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2700.955119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2700.955127] R13: 00007fff0e2a169f R14: 00007f0899cc7300 R15: 0000000000022000 [ 2700.966610] Mem-Info: [ 2701.000383] Node 1 active_anon:2068kB inactive_anon:188100kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1616kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2701.003697] active_anon:28002 inactive_anon:90086 isolated_anon:0 [ 2701.003697] active_file:17 inactive_file:15 isolated_file:0 [ 2701.003697] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2701.003697] slab_reclaimable:13299 slab_unreclaimable:115329 [ 2701.003697] mapped:22171 shmem:104308 pagetables:579 bounce:0 [ 2701.003697] free:13785 free_pcp:141 free_cma:0 [ 2701.004853] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2701.014740] Node 0 active_anon:109940kB inactive_anon:172244kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2701.021759] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2701.025510] Node 1 active_anon:2068kB inactive_anon:188100kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1616kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2701.027367] Node 0 DMA32 free:17572kB min:35996kB low:44992kB high:53988kB active_anon:109940kB inactive_anon:168628kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2140kB bounce:0kB free_pcp:312kB local_pcp:0kB free_cma:0kB [ 2701.037220] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2701.044974] lowmem_reserve[]: 0 0 1 1 1 [ 2701.053659] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2701.065996] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2701.072187] Node 0 DMA32 free:17572kB min:35996kB low:44992kB high:53988kB active_anon:109940kB inactive_anon:168628kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2140kB bounce:0kB free_pcp:312kB local_pcp:312kB free_cma:0kB [ 2701.075264] lowmem_reserve[]: 0 0 0 0 0 [ 2701.079325] lowmem_reserve[]: 0 0 1 1 1 [ 2701.089732] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:2068kB inactive_anon:188100kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:176kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2701.097578] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2701.100383] lowmem_reserve[]: 0 0 0 0 0 [ 2701.104180] lowmem_reserve[]: 0 0 0 0 0 [ 2701.111336] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2701.112321] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:2068kB inactive_anon:188100kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:176kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2701.116365] Node 0 DMA32: 1247*4kB (UME) 711*8kB (ME) 201*16kB (ME) 57*32kB (UME) 29*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17572kB [ 2701.124373] lowmem_reserve[]: 0 0 0 0 0 [ 2701.126580] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2701.128478] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2701.136909] Node 1 Normal: 650*4kB (ME) 454*8kB (ME) 149*16kB (UME) 71*32kB (UME) 37*64kB (ME) 17*128kB (UM) 12*256kB (UM) 4*512kB (M) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 26696kB [ 2701.144541] Node 0 DMA32: 1247*4kB (UME) 711*8kB (ME) 201*16kB (ME) 57*32kB (UME) 29*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17572kB [ 2701.145115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2701.152527] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2701.155435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2701.156780] Node 1 Normal: 650*4kB (ME) 454*8kB (ME) 149*16kB (UME) 71*32kB (UME) 37*64kB (ME) 17*128kB (UM) 12*256kB (UM) 4*512kB (M) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 26696kB [ 2701.162321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2701.170722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2701.175063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2701.184321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2701.185589] 104340 total pagecache pages [ 2701.192372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2701.195284] 0 pages in swap cache [ 2701.197806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2701.206982] Swap cache stats: add 0, delete 0, find 0/0 [ 2701.213563] 104340 total pagecache pages [ 2701.213720] Free swap = 0kB [ 2701.225870] 0 pages in swap cache [ 2701.232128] Total swap = 0kB [ 2701.241901] Swap cache stats: add 0, delete 0, find 0/0 [ 2701.243391] 2097051 pages RAM [ 2701.254978] Free swap = 0kB [ 2701.262718] 0 pages HighMem/MovableOnly [ 2701.313599] Total swap = 0kB [ 2701.324848] 369649 pages reserved [ 2701.361944] 2097051 pages RAM [ 2701.381119] 0 pages cma reserved [ 2701.396473] 0 pages HighMem/MovableOnly [ 2701.412175] Out of memory (oom_kill_allocating_task): Kill process 1351 (systemd-rfkill) score 0 or sacrifice child [ 2701.452373] 369649 pages reserved [ 2701.469491] Killed process 1351 (systemd-rfkill) total-vm:37800kB, anon-rss:372kB, file-rss:0kB, shmem-rss:0kB [ 2701.491186] 0 pages cma reserved [ 2701.506494] systemd-rfkill: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 2701.568309] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2701.597986] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2701.655988] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2701.707475] CPU: 1 PID: 1351 Comm: systemd-rfkill Not tainted 4.19.211-syzkaller #0 [ 2701.945343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2701.954689] Call Trace: [ 2701.957275] dump_stack+0x1fc/0x2ef [ 2701.960904] warn_alloc.cold+0x7b/0x18f [ 2701.964871] ? zone_watermark_ok_safe+0x260/0x260 [ 2701.969701] ? mark_oom_victim+0x68/0x420 [ 2701.973849] ? wait_for_completion_io+0x10/0x10 [ 2701.978512] __alloc_pages_nodemask+0x232f/0x2890 [ 2701.983348] ? find_get_entry+0x4cd/0x8a0 [ 2701.987492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2701.992346] alloc_pages_current+0x193/0x2a0 [ 2701.996753] filemap_fault+0x146e/0x2180 [ 2702.000812] ext4_filemap_fault+0x84/0xb0 [ 2702.004946] __do_fault+0x10b/0x4b0 [ 2702.008559] __handle_mm_fault+0x273b/0x41c0 [ 2702.012955] ? vm_insert_page+0x9c0/0x9c0 [ 2702.017102] ? check_preemption_disabled+0x41/0x280 [ 2702.022112] handle_mm_fault+0x436/0xb10 [ 2702.026163] __do_page_fault+0x68e/0xd60 [ 2702.030213] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2702.035218] ? spurious_fault+0x840/0x840 [ 2702.039357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2702.044190] ? page_fault+0x8/0x30 [ 2702.047721] page_fault+0x1e/0x30 [ 2702.051166] RIP: 0033:0x7f2bc44e02e1 [ 2702.054865] Code: Bad RIP value. [ 2702.058210] RSP: 002b:00007ffe1a0592f0 EFLAGS: 00010206 [ 2702.063564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2702.070834] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 2702.078087] RBP: 0000559950778820 R08: 00005599525d9040 R09: 0000000000000000 [ 2702.085337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000559950777f90 [ 2702.092590] R13: 00007ffe1a0593c0 R14: 0000000000000000 R15: 0000000000000000 [ 2702.125523] Mem-Info: [ 2702.136165] active_anon:27995 inactive_anon:90086 isolated_anon:0 [ 2702.136165] active_file:16 inactive_file:16 isolated_file:0 [ 2702.136165] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2702.136165] slab_reclaimable:13299 slab_unreclaimable:115329 [ 2702.136165] mapped:22171 shmem:104308 pagetables:579 bounce:0 [ 2702.136165] free:13785 free_pcp:148 free_cma:0 [ 2702.157397] CPU: 1 PID: 8098 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2702.176950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2702.180709] Node 0 active_anon:109912kB inactive_anon:172244kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2702.186302] Call Trace: [ 2702.216645] dump_stack+0x1fc/0x2ef [ 2702.220286] dump_header+0x15d/0xc3f [ 2702.224001] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2702.227179] Node 1 active_anon:2068kB inactive_anon:188100kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1616kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2702.229096] ? ___ratelimit+0x319/0x590 [ 2702.229114] oom_kill_process.cold+0x10/0x692 [ 2702.229130] ? check_preemption_disabled+0x41/0x280 [ 2702.229149] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2702.229164] out_of_memory+0x1072/0x1390 [ 2702.229182] ? oom_killer_disable+0x270/0x270 [ 2702.267565] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2702.269838] ? mutex_trylock+0x15f/0x1a0 [ 2702.275085] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2702.279135] __alloc_pages_nodemask+0x23a2/0x2890 [ 2702.279157] ? find_get_entry+0x4cd/0x8a0 [ 2702.279180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2702.279218] alloc_pages_current+0x193/0x2a0 [ 2702.279235] filemap_fault+0x146e/0x2180 [ 2702.293685] Node 0 DMA32 free:17572kB min:35996kB low:44992kB high:53988kB active_anon:109912kB inactive_anon:168628kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2140kB bounce:0kB free_pcp:340kB local_pcp:340kB free_cma:0kB [ 2702.310083] ext4_filemap_fault+0x84/0xb0 [ 2702.310098] __do_fault+0x10b/0x4b0 [ 2702.310115] __handle_mm_fault+0x273b/0x41c0 [ 2702.310132] ? vm_insert_page+0x9c0/0x9c0 [ 2702.310144] ? __fget+0x356/0x510 [ 2702.310171] ? check_preemption_disabled+0x41/0x280 [ 2702.310194] handle_mm_fault+0x436/0xb10 [ 2702.326954] lowmem_reserve[]: 0 0 1 1 1 [ 2702.328190] __do_page_fault+0x68e/0xd60 [ 2702.328211] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2702.328225] ? spurious_fault+0x840/0x840 [ 2702.328241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2702.333081] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2702.337451] ? page_fault+0x8/0x30 [ 2702.337465] page_fault+0x1e/0x30 [ 2702.337475] RIP: 0033:0x403ace [ 2702.337488] Code: Bad RIP value. [ 2702.337495] RSP: 002b:000000c0000bf778 EFLAGS: 00010246 [ 2702.337506] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 2702.337513] RDX: 0000000000000080 RSI: 000000c0000bf840 RDI: 0000000000000004 [ 2702.337520] RBP: 000000c0000bf7c0 R08: 0000000000000000 R09: 0000000000000000 [ 2702.337528] R10: 0000000000000363 R11: 0000000000000246 R12: 000000c0000bf850 [ 2702.337535] R13: 0000000000000000 R14: 000000c0003a6ea0 R15: 0000000000000001 [ 2702.510503] lowmem_reserve[]: 0 0 0 0 0 [ 2702.514516] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:2068kB inactive_anon:188100kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:176kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2702.550621] lowmem_reserve[]: 0 0 0 0 0 [ 2702.554610] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2702.574080] Node 0 DMA32: 1247*4kB (UME) 718*8kB (UME) 201*16kB (ME) 57*32kB (UME) 30*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 2702.593766] Mem-Info: [ 2702.596211] active_anon:27995 inactive_anon:90086 isolated_anon:0 [ 2702.596211] active_file:16 inactive_file:16 isolated_file:0 [ 2702.596211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2702.596211] slab_reclaimable:13299 slab_unreclaimable:115329 [ 2702.596211] mapped:22171 shmem:104308 pagetables:579 bounce:0 [ 2702.596211] free:13785 free_pcp:148 free_cma:0 [ 2702.635400] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2702.646600] Node 1 Normal: 650*4kB (ME) 454*8kB (ME) 149*16kB (UME) 71*32kB (UME) 37*64kB (ME) 17*128kB (UM) 12*256kB (UM) 4*512kB (M) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 26696kB [ 2702.667863] Node 0 active_anon:109912kB inactive_anon:172244kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2702.705437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2702.714414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2702.727978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2702.736819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2702.745511] oom_reaper: reaped process 1351 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2702.770343] Node 1 active_anon:2068kB inactive_anon:188100kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1616kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2702.788749] 104340 total pagecache pages [ 2702.800422] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2702.821652] 0 pages in swap cache [ 2702.828872] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2702.833510] Swap cache stats: add 0, delete 0, find 0/0 [ 2702.837028] Node 0 DMA32 free:17360kB min:35996kB low:44992kB high:53988kB active_anon:109612kB inactive_anon:168628kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2140kB bounce:0kB free_pcp:968kB local_pcp:632kB free_cma:0kB [ 2702.867258] Free swap = 0kB [ 2702.871571] lowmem_reserve[]: 0 0 1 1 1 [ 2702.874154] Total swap = 0kB [ 2702.878630] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2702.901688] 2097051 pages RAM [ 2702.908940] lowmem_reserve[]: 0 0 0 0 0 [ 2702.914346] 0 pages HighMem/MovableOnly [ 2702.914410] Node 1 Normal free:139592kB min:53876kB low:67344kB high:80812kB active_anon:2068kB inactive_anon:188100kB active_file:40kB inactive_file:1844kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:176kB bounce:0kB free_pcp:2800kB local_pcp:1376kB free_cma:0kB [ 2702.929832] 369649 pages reserved [ 2702.948607] lowmem_reserve[]: 0 0 0 0 0 [ 2702.955810] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2702.970548] Node 0 DMA32: 1244*4kB (UME) 700*8kB (UME) 201*16kB (UME) 56*32kB (UME) 29*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17440kB [ 2702.985489] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2702.996666] Node 1 Normal: 40*4kB (UME) 316*8kB (UME) 150*16kB (UME) 72*32kB (UME) 39*64kB (UME) 17*128kB (UM) 13*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 5*2048kB (UM) 33*4096kB (U) = 166944kB [ 2703.011698] 0 pages cma reserved [ 2703.016057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2703.029194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2703.037987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2703.048335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2703.057740] 105339 total pagecache pages [ 2703.061878] 0 pages in swap cache [ 2703.065326] Swap cache stats: add 0, delete 0, find 0/0 [ 2703.071651] Free swap = 0kB [ 2703.075125] Total swap = 0kB [ 2703.078856] 2097051 pages RAM [ 2703.082483] 0 pages HighMem/MovableOnly [ 2703.090913] 369649 pages reserved [ 2703.094989] 0 pages cma reserved [ 2703.117224] Out of memory (oom_kill_allocating_task): Kill process 8098 (syz-fuzzer) score 0 or sacrifice child [ 2703.140910] Killed process 31776 (syz-executor.5) total-vm:48512kB, anon-rss:440kB, file-rss:4kB, shmem-rss:0kB 06:49:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) socket$inet6_tcp(0xa, 0x1, 0x0) 06:49:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) socket$inet6_tcp(0xa, 0x1, 0x0) 06:49:15 executing program 3: ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:15 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:15 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) (async) 06:49:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:15 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c0000f4b1dd45fc2e81542cf4", 0x584e4f53}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000180)=0xffffffff, 0x4) [ 2708.484640] IPVS: ftp: loaded support on port[0] = 21 [ 2709.457813] chnl_net:caif_netlink_parms(): no params data found [ 2709.737325] bridge0: port 1(bridge_slave_0) entered blocking state [ 2709.744202] bridge0: port 1(bridge_slave_0) entered disabled state [ 2709.760143] device bridge_slave_0 entered promiscuous mode [ 2709.984703] bridge0: port 2(bridge_slave_1) entered blocking state [ 2709.991279] bridge0: port 2(bridge_slave_1) entered disabled state [ 2710.003818] device bridge_slave_1 entered promiscuous mode [ 2710.034864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2710.046395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2710.055147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2710.063906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2710.074461] device bridge_slave_1 left promiscuous mode [ 2710.081659] bridge0: port 2(bridge_slave_1) entered disabled state [ 2710.090023] device bridge_slave_0 left promiscuous mode [ 2710.095511] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.107709] device veth1_macvtap left promiscuous mode [ 2710.113008] device veth0_macvtap left promiscuous mode [ 2710.119553] device veth1_vlan left promiscuous mode [ 2710.124615] device veth0_vlan left promiscuous mode [ 2710.526178] Bluetooth: hci1: command 0x0409 tx timeout [ 2712.605781] Bluetooth: hci1: command 0x041b tx timeout [ 2714.207969] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.213566] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.685513] Bluetooth: hci1: command 0x040f tx timeout [ 2714.861573] oom_reaper: reaped process 1498 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 2714.880486] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2714.905380] device hsr_slave_1 left promiscuous mode [ 2714.907694] in:imklog cpuset=/ mems_allowed=0-1 [ 2714.915189] CPU: 0 PID: 1109 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2714.922545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2714.931895] Call Trace: [ 2714.934486] dump_stack+0x1fc/0x2ef [ 2714.938116] dump_header+0x15d/0xc3f [ 2714.941831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2714.946936] ? ___ratelimit+0x319/0x590 [ 2714.950911] oom_kill_process.cold+0x10/0x692 [ 2714.955406] ? check_preemption_disabled+0x41/0x280 [ 2714.960426] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2714.965707] out_of_memory+0x1072/0x1390 [ 2714.969772] ? oom_killer_disable+0x270/0x270 [ 2714.974267] ? mutex_trylock+0x15f/0x1a0 [ 2714.978328] __alloc_pages_nodemask+0x23a2/0x2890 [ 2714.983175] ? find_get_entry+0x4cd/0x8a0 [ 2714.987330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2714.992196] alloc_pages_current+0x193/0x2a0 [ 2714.996603] filemap_fault+0x146e/0x2180 [ 2715.000675] ext4_filemap_fault+0x84/0xb0 [ 2715.004820] __do_fault+0x10b/0x4b0 [ 2715.008448] __handle_mm_fault+0x273b/0x41c0 [ 2715.012862] ? vm_insert_page+0x9c0/0x9c0 [ 2715.017183] ? lock_downgrade+0x720/0x720 [ 2715.021325] ? check_preemption_disabled+0x41/0x280 [ 2715.026415] handle_mm_fault+0x436/0xb10 [ 2715.030458] __do_page_fault+0x68e/0xd60 [ 2715.034512] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2715.039518] ? spurious_fault+0x840/0x840 [ 2715.043645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2715.048484] ? page_fault+0x8/0x30 [ 2715.052007] page_fault+0x1e/0x30 [ 2715.055441] RIP: 0033:0x7fba9e8bf58e [ 2715.059137] Code: Bad RIP value. [ 2715.062479] RSP: 002b:00007fba9de6f470 EFLAGS: 00010207 [ 2715.067817] RAX: 0000000000000033 RBX: 00007fba9de6f4a0 RCX: 0000000000000000 [ 2715.075150] RDX: 0000000000000000 RSI: 00007fba9de6f4ac RDI: 00007fba9de6f4a0 [ 2715.082395] RBP: 00007fba9de6f4ac R08: 00007fba9f64c940 R09: 0000000000000000 [ 2715.089658] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007fba9de6fda0 [ 2715.096904] R13: 00000000fffff7e7 R14: 0000000000001f9f R15: 00007fba9de6fddd [ 2715.104268] device hsr_slave_0 left promiscuous mode [ 2715.113852] Mem-Info: [ 2715.119846] active_anon:27998 inactive_anon:90085 isolated_anon:0 [ 2715.119846] active_file:15 inactive_file:19 isolated_file:0 [ 2715.119846] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2715.119846] slab_reclaimable:13403 slab_unreclaimable:115588 [ 2715.119846] mapped:22210 shmem:104304 pagetables:576 bounce:0 [ 2715.119846] free:14286 free_pcp:165 free_cma:0 [ 2715.138294] syz-executor.1: vmalloc: allocation failure, allocated 1008140288 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2715.156547] Node 0 active_anon:109828kB inactive_anon:172240kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2715.200293] Node 1 active_anon:2164kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2715.224432] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2715.230960] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2715.233222] team0 (unregistering): Port device team_slave_1 removed [ 2715.265756] CPU: 0 PID: 1498 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2715.273555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2715.282659] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2715.282913] Call Trace: [ 2715.287951] Node 0 DMA32 free:20560kB min:35996kB low:44992kB high:53988kB active_anon:109928kB inactive_anon:168624kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2715.290487] dump_stack+0x1fc/0x2ef [ 2715.319310] lowmem_reserve[]: 0 0 1 1 1 [ 2715.322790] warn_alloc.cold+0x7b/0x18f [ 2715.326839] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2715.330781] ? zone_watermark_ok_safe+0x260/0x260 [ 2715.357073] lowmem_reserve[]: 0 0 0 0 0 [ 2715.361892] ? retint_kernel+0x2d/0x2d [ 2715.365911] Node 1 Normal free:26928kB min:53876kB low:67344kB high:80812kB active_anon:2164kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2715.369782] __vmalloc_area_node+0x4fd/0x780 [ 2715.398206] lowmem_reserve[]: 0 0 0 0 0 [ 2715.402589] ? __vmalloc_node_range+0x180/0x180 [ 2715.406556] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10860kB [ 2715.411200] ? _raw_spin_unlock+0x29/0x40 [ 2715.426443] Node 0 DMA32: 1403*4kB (UME) 876*8kB (UME) 225*16kB (UME) 68*32kB (UME) 37*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20764kB [ 2715.430576] ? __get_vm_area_node+0x2e2/0x3a0 [ 2715.444781] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2715.449259] __vmalloc_node_range+0xed/0x180 [ 2715.449278] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2715.460270] Node 1 Normal: 664*4kB (UME) 453*8kB (ME) 155*16kB (UME) 65*32kB (ME) 35*64kB (UME) 18*128kB (UM) 11*256kB (M) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 26904kB [ 2715.464648] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2715.468998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2715.485255] vmalloc_user+0x70/0xe0 [ 2715.485271] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2715.485286] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2715.490626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2715.499438] __vb2_queue_alloc+0x472/0xe60 [ 2715.499465] vb2_core_create_bufs+0x273/0x7e0 [ 2715.503069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2715.507375] ? __vb2_queue_free+0x870/0x870 [ 2715.507389] ? __video_do_ioctl+0x632/0xcd0 [ 2715.507410] ? __mutex_lock+0x368/0x1190 [ 2715.511526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2715.520087] vb2_create_bufs+0x332/0x620 [ 2715.520104] ? mark_held_locks+0xf0/0xf0 [ 2715.520120] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2715.524324] 104355 total pagecache pages [ 2715.528805] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2715.528820] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2715.528841] v4l_create_bufs+0xb2/0x160 [ 2715.537663] 0 pages in swap cache [ 2715.541953] __video_do_ioctl+0x49a/0xcd0 [ 2715.546260] Swap cache stats: add 0, delete 0, find 0/0 [ 2715.550308] ? v4l_querycap+0x340/0x340 [ 2715.558896] Free swap = 0kB [ 2715.562917] ? __might_fault+0x192/0x1d0 [ 2715.566963] Total swap = 0kB [ 2715.572043] ? v4l_querycap+0x340/0x340 [ 2715.576114] 2097051 pages RAM [ 2715.581196] video_usercopy+0x13f/0xfa0 [ 2715.586430] 0 pages HighMem/MovableOnly [ 2715.590366] ? v4l_enumstd+0x60/0x60 [ 2715.593779] 369649 pages reserved [ 2715.597913] ? do_futex+0x171/0x1880 [ 2715.597930] ? mark_held_locks+0xf0/0xf0 [ 2715.597949] ? debug_check_no_obj_freed+0x201/0x490 [ 2715.603285] 0 pages cma reserved [ 2715.607249] ? video_usercopy+0xfa0/0xfa0 [ 2715.607262] v4l2_ioctl+0x147/0x1a0 [ 2715.607277] ? video_devdata+0xa0/0xa0 [ 2715.610273] Out of memory (oom_kill_allocating_task): Kill process 1109 (in:imklog) score 0 or sacrifice child [ 2715.614313] do_vfs_ioctl+0xcdb/0x12e0 [ 2715.617396] Killed process 1107 (rsyslogd) total-vm:254332kB, anon-rss:672kB, file-rss:0kB, shmem-rss:0kB [ 2715.621265] ? lock_downgrade+0x720/0x720 [ 2715.626113] oom_reaper: reaped process 1107 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2715.628303] ? check_preemption_disabled+0x41/0x280 [ 2715.709104] ? ioctl_preallocate+0x200/0x200 [ 2715.713494] ? __fget+0x356/0x510 [ 2715.717101] ? do_dup2+0x450/0x450 [ 2715.720633] ? __se_sys_futex+0x298/0x3b0 [ 2715.724762] ksys_ioctl+0x9b/0xc0 [ 2715.728215] __x64_sys_ioctl+0x6f/0xb0 [ 2715.732101] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2715.736661] do_syscall_64+0xf9/0x620 [ 2715.740446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2715.745613] RIP: 0033:0x7f7b04e930f9 [ 2715.749397] Code: Bad RIP value. [ 2715.752760] RSP: 002b:00007f7b03405168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2715.760442] RAX: ffffffffffffffda RBX: 00007f7b04fb2f80 RCX: 00007f7b04e930f9 [ 2715.767702] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2715.774965] RBP: 00007f7b04eeeae9 R08: 0000000000000000 R09: 0000000000000000 [ 2715.782213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2715.789461] R13: 00007ffe7432213f R14: 00007f7b03405300 R15: 0000000000022000 [ 2715.797408] team0 (unregistering): Port device team_slave_0 removed [ 2715.809988] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2715.818088] Mem-Info: [ 2715.824304] active_anon:27748 inactive_anon:90085 isolated_anon:0 [ 2715.824304] active_file:23 inactive_file:1 isolated_file:0 [ 2715.824304] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2715.824304] slab_reclaimable:13403 slab_unreclaimable:115406 [ 2715.824304] mapped:22210 shmem:104304 pagetables:576 bounce:0 [ 2715.824304] free:14956 free_pcp:61 free_cma:0 [ 2715.857685] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2715.867539] Node 0 active_anon:109092kB inactive_anon:172240kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2715.875126] systemd-journal cpuset=/ mems_allowed=0-1 [ 2715.907671] Node 1 active_anon:1844kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2715.934408] CPU: 1 PID: 1105 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2715.942794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2715.944531] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2715.952163] Call Trace: [ 2715.952184] dump_stack+0x1fc/0x2ef [ 2715.952201] dump_header+0x15d/0xc3f [ 2715.952218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2715.952229] ? ___ratelimit+0x319/0x590 [ 2715.952244] oom_kill_process.cold+0x10/0x692 [ 2715.952261] ? check_preemption_disabled+0x41/0x280 [ 2715.952280] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2715.952295] out_of_memory+0x1072/0x1390 [ 2715.952315] ? oom_killer_disable+0x270/0x270 [ 2715.952331] ? mutex_trylock+0x15f/0x1a0 [ 2715.952348] __alloc_pages_nodemask+0x23a2/0x2890 [ 2715.952372] ? find_get_entry+0x4cd/0x8a0 [ 2715.988414] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2715.988721] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2715.993806] Node 0 DMA32 free:22440kB min:35996kB low:44992kB high:53988kB active_anon:109092kB inactive_anon:168624kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2088kB bounce:0kB free_pcp:284kB local_pcp:0kB free_cma:0kB [ 2715.997791] alloc_pages_current+0x193/0x2a0 [ 2715.997808] filemap_fault+0x146e/0x2180 [ 2715.997831] ext4_filemap_fault+0x84/0xb0 [ 2715.997845] __do_fault+0x10b/0x4b0 [ 2715.997862] __handle_mm_fault+0x273b/0x41c0 [ 2716.012860] lowmem_reserve[]: 0 0 1 1 1 [ 2716.016660] ? vm_insert_page+0x9c0/0x9c0 [ 2716.016688] ? check_preemption_disabled+0x41/0x280 [ 2716.016710] handle_mm_fault+0x436/0xb10 [ 2716.021185] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.025241] __do_page_fault+0x68e/0xd60 [ 2716.025260] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2716.025273] ? spurious_fault+0x840/0x840 [ 2716.025288] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2716.025306] ? page_fault+0x8/0x30 [ 2716.025323] page_fault+0x1e/0x30 [ 2716.038071] lowmem_reserve[]: 0 0 0 0 0 [ 2716.039293] RIP: 0033:0x7fcf81a502e3 [ 2716.044115] Node 1 Normal free:27356kB min:53876kB low:67344kB high:80812kB active_anon:1844kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.072998] Code: Bad RIP value. [ 2716.073007] RSP: 002b:00007ffd3803dd18 EFLAGS: 00010246 [ 2716.073016] RAX: 0000000000000001 RBX: 000055d3f06e61e0 RCX: 00007fcf81a502e3 [ 2716.073023] RDX: 0000000000000013 RSI: 00007ffd3803dd20 RDI: 000000000000000b [ 2716.073029] RBP: 00007ffd3803df10 R08: 431bde82d7b634db R09: 000002b83c94b678 [ 2716.073036] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3803dd20 [ 2716.073042] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d11cc425e2 [ 2716.080851] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2716.099852] lowmem_reserve[]: 0 0 0 0 0 [ 2716.109475] Mem-Info: [ 2716.130525] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10860kB [ 2716.175945] bond0 (unregistering): Released all slaves [ 2716.233858] Node 0 DMA32: 1442*4kB (UME) 1143*8kB (UME) 220*16kB (UME) 74*32kB (UME) 40*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23744kB [ 2716.242300] active_anon:27734 inactive_anon:90085 isolated_anon:0 [ 2716.242300] active_file:15 inactive_file:14 isolated_file:0 [ 2716.242300] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2716.242300] slab_reclaimable:13397 slab_unreclaimable:114829 [ 2716.242300] mapped:22210 shmem:104304 pagetables:546 bounce:0 [ 2716.242300] free:15478 free_pcp:86 free_cma:0 [ 2716.264123] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2716.278368] Node 0 active_anon:109092kB inactive_anon:172240kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2716.299676] Node 1 Normal: 663*4kB (UME) 452*8kB (UME) 152*16kB (UME) 65*32kB (UME) 37*64kB (UME) 17*128kB (UM) 13*256kB (M) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 27356kB [ 2716.341281] Node 1 active_anon:1844kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2716.361590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2716.376162] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.404312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2716.417052] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2716.468348] Node 0 DMA32 free:23688kB min:35996kB low:44992kB high:53988kB active_anon:109092kB inactive_anon:168624kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2088kB bounce:0kB free_pcp:728kB local_pcp:728kB free_cma:0kB [ 2716.479642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2716.500691] lowmem_reserve[]: 0 0 1 1 1 [ 2716.510416] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.540325] lowmem_reserve[]: 0 0 0 0 0 [ 2716.543187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2716.544321] Node 1 Normal free:27356kB min:53876kB low:67344kB high:80812kB active_anon:1844kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2716.585068] lowmem_reserve[]: 0 0 0 0 0 [ 2716.589055] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10860kB [ 2716.604457] Node 0 DMA32: 1439*4kB (UME) 1113*8kB (UME) 220*16kB (UME) 74*32kB (UME) 40*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23492kB [ 2716.607339] 104333 total pagecache pages [ 2716.622711] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2716.644814] Node 1 Normal: 663*4kB (UME) 452*8kB (UME) 152*16kB (UME) 65*32kB (UME) 37*64kB (UME) 17*128kB (UM) 13*256kB (M) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 27356kB [ 2716.649085] 0 pages in swap cache [ 2716.670494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2716.682672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2716.691241] Swap cache stats: add 0, delete 0, find 0/0 [ 2716.691248] Free swap = 0kB [ 2716.691252] Total swap = 0kB [ 2716.691261] 2097051 pages RAM [ 2716.691266] 0 pages HighMem/MovableOnly [ 2716.691271] 369649 pages reserved [ 2716.691276] 0 pages cma reserved [ 2716.725650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2716.734498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2716.752611] 104333 total pagecache pages [ 2716.758450] 0 pages in swap cache [ 2716.761897] Swap cache stats: add 0, delete 0, find 0/0 [ 2716.765411] Bluetooth: hci1: command 0x0419 tx timeout [ 2716.779722] Free swap = 0kB [ 2716.782749] Total swap = 0kB [ 2716.790022] 2097051 pages RAM [ 2716.793137] 0 pages HighMem/MovableOnly [ 2716.802459] 369649 pages reserved [ 2716.810179] 0 pages cma reserved [ 2716.813549] Out of memory (oom_kill_allocating_task): Kill process 1105 (systemd-journal) score 0 or sacrifice child [ 2716.830478] Killed process 1105 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:1780kB [ 2716.852847] oom_reaper: reaped process 1105 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1780kB [ 2716.868485] systemd-rfkill invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2716.941719] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2716.972272] CPU: 0 PID: 1483 Comm: systemd-rfkill Not tainted 4.19.211-syzkaller #0 [ 2716.980091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2716.989550] Call Trace: [ 2716.992145] dump_stack+0x1fc/0x2ef [ 2716.995777] dump_header+0x15d/0xc3f [ 2716.999497] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2717.004599] ? ___ratelimit+0x319/0x590 [ 2717.008576] oom_kill_process.cold+0x10/0x692 [ 2717.013074] ? check_preemption_disabled+0x41/0x280 [ 2717.018096] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2717.023378] out_of_memory+0x1072/0x1390 [ 2717.027448] ? oom_killer_disable+0x270/0x270 [ 2717.031946] ? mutex_trylock+0x15f/0x1a0 [ 2717.036014] __alloc_pages_nodemask+0x23a2/0x2890 [ 2717.040862] ? find_get_entry+0x4cd/0x8a0 [ 2717.045020] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2717.049896] alloc_pages_current+0x193/0x2a0 [ 2717.054307] filemap_fault+0x146e/0x2180 [ 2717.058383] ext4_filemap_fault+0x84/0xb0 [ 2717.062535] __do_fault+0x10b/0x4b0 [ 2717.066165] __handle_mm_fault+0x273b/0x41c0 [ 2717.070575] ? vm_insert_page+0x9c0/0x9c0 [ 2717.074739] ? check_preemption_disabled+0x41/0x280 [ 2717.079761] handle_mm_fault+0x436/0xb10 [ 2717.083840] __do_page_fault+0x68e/0xd60 [ 2717.087904] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2717.092923] ? spurious_fault+0x840/0x840 [ 2717.097073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2717.101921] ? page_fault+0x8/0x30 [ 2717.105464] page_fault+0x1e/0x30 [ 2717.108921] RIP: 0033:0x7fce325a392d [ 2717.112635] Code: Bad RIP value. [ 2717.115996] RSP: 002b:00007ffde67d1c20 EFLAGS: 00010246 [ 2717.121393] RAX: 0000000000000000 RBX: 0000564ddadb8040 RCX: 00007fce325a392d [ 2717.128660] RDX: 00007ffde67d1c30 RSI: 0000000000000001 RDI: 00007ffde67d1c68 [ 2717.135948] RBP: 00007ffde67d1cd8 R08: 0000000000000008 R09: 0000000000000010 [ 2717.143217] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2717.150482] R13: 00007ffde67d1cd0 R14: 0000000000000001 R15: 0000000000000003 [ 2717.191087] Mem-Info: [ 2717.193541] active_anon:27634 inactive_anon:90085 isolated_anon:0 [ 2717.193541] active_file:6 inactive_file:23 isolated_file:0 [ 2717.193541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2717.193541] slab_reclaimable:13394 slab_unreclaimable:114607 [ 2717.193541] mapped:21785 shmem:104304 pagetables:546 bounce:0 [ 2717.193541] free:15692 free_pcp:146 free_cma:0 [ 2717.234188] Node 0 active_anon:109092kB inactive_anon:172240kB active_file:8kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:227972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2717.279409] Node 1 active_anon:1444kB inactive_anon:188100kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:189244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2717.319800] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2717.360045] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2717.370974] Node 0 DMA32 free:24544kB min:35996kB low:44992kB high:53988kB active_anon:109092kB inactive_anon:168624kB active_file:8kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2088kB bounce:0kB free_pcp:440kB local_pcp:252kB free_cma:0kB [ 2717.422673] lowmem_reserve[]: 0 0 1 1 1 [ 2717.429984] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2717.484345] lowmem_reserve[]: 0 0 0 0 0 [ 2717.509576] Node 1 Normal free:27356kB min:53876kB low:67344kB high:80812kB active_anon:1844kB inactive_anon:188100kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:96kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2717.557860] lowmem_reserve[]: 0 0 0 0 0 [ 2717.561904] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10860kB [ 2717.590204] Node 0 DMA32: 1446*4kB (ME) 1155*8kB (UME) 232*16kB (UME) 77*32kB (UME) 42*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24528kB [ 2717.630581] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2717.642879] Node 1 Normal: 253*4kB (UME) 446*8kB (UME) 153*16kB (UME) 68*32kB (UME) 39*64kB (UME) 22*128kB (UM) 17*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 6*2048kB (UM) 5*4096kB (U) = 60852kB [ 2717.669692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2717.708008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2717.736552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2717.756207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2717.761158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2717.786477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2717.789383] 105959 total pagecache pages [ 2717.809882] 0 pages in swap cache [ 2717.810644] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2717.813434] Swap cache stats: add 0, delete 0, find 0/0 [ 2717.835610] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2717.851115] Free swap = 0kB [ 2717.851799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2717.854167] Total swap = 0kB [ 2717.882952] 2097051 pages RAM [ 2717.883483] team0: Port device team_slave_0 added [ 2717.891054] 0 pages HighMem/MovableOnly [ 2717.909891] 369649 pages reserved [ 2717.913355] 0 pages cma reserved [ 2717.915320] systemd[1]: rsyslog.service: Unit entered failed state. [ 2717.916885] Out of memory (oom_kill_allocating_task): Kill process 1483 (systemd-rfkill) score 0 or sacrifice child [ 2717.926496] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2717.940961] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2717.956472] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2717.964794] Killed process 1483 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 2717.986650] team0: Port device team_slave_1 added [ 2717.998764] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2718.017650] oom_reaper: reaped process 1483 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2718.044709] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2718.062810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2718.079960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2718.085166] systemd[1]: Stopped Journal Service. [ 2718.149512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2718.161200] systemd[1]: Starting Journal Service... [ 2718.192217] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 2718.206546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2718.212789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2718.299490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2718.329442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2718.347175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2718.402778] device hsr_slave_0 entered promiscuous mode [ 2718.407046] systemd-journald[1709]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2718.430708] device hsr_slave_1 entered promiscuous mode [ 2718.444440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2718.461994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2718.807887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2718.952908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2718.975377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2719.015498] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2719.021690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2719.033374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2719.053354] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2719.069692] 8021q: adding VLAN 0 to HW filter on device team0 [ 2719.088663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2719.120850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2719.129272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2719.160118] bridge0: port 1(bridge_slave_0) entered blocking state [ 2719.166550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2719.176491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2719.194913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2719.202590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2719.230959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2719.250551] bridge0: port 2(bridge_slave_1) entered blocking state [ 2719.256970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2719.290935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2719.298448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2719.337456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2719.345178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2719.362660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2719.383026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2719.392387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2719.409003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2719.420939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2719.429391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2719.446452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2719.488672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2719.505022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2719.512750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2719.547082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2719.559428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2719.569222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2719.585150] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2719.591222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2719.720000] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2719.740353] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2719.766262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2719.773034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2719.797416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.847482] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2719.857882] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2719.870547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2719.879749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2719.940854] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2719.948740] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2719.957206] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2719.968282] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2719.975227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2719.982749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2719.995636] device veth0_vlan entered promiscuous mode [ 2720.006294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2720.013306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2720.023528] device veth1_vlan entered promiscuous mode [ 2720.030540] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2720.041558] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2720.056210] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2720.068050] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2720.074994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2720.082328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2720.091894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2720.100493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2720.117421] device veth0_macvtap entered promiscuous mode [ 2720.123825] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2720.141183] device veth1_macvtap entered promiscuous mode [ 2720.149899] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2720.163560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2720.181800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2720.192677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2720.209185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.220069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2720.235524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.248514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2720.260628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.273674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2720.286269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.301270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2720.314163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.328780] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2720.338472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2720.349870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2720.360458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2720.376723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2720.388961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2720.400410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2720.417690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.430342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2720.444123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.455747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2720.470289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.481875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2720.496119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.508638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2720.523523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2720.539975] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2720.548626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2720.560732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2720.570970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2720.784809] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2720.800925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2720.819429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2720.847177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2720.874128] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2720.885841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2720.892958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2720.906576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:49:30 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:30 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c0000f4b1dd45fc2e81542cf4", 0x584e4f53}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000180)=0xffffffff, 0x4) syz_open_dev$vim2m(&(0x7f00000008c0), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c0000f4b1dd45fc2e81542cf4", 0x584e4f53}) (async) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000180)=0xffffffff, 0x4) (async) 06:49:30 executing program 3: ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) 06:49:31 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) 06:49:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c0000f4b1dd45fc2e81542cf4", 0x584e4f53}) (rerun: 32) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000180)=0xffffffff, 0x4) 06:49:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x8b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x0, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c0000f4b1dd45fc2e81542cf4", 0x584e4f53}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000180)=0xffffffff, 0x4) 06:49:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd1c6c8a00149c292db1c4fc5c83f4b1742cf4000000000004", 0x32435750}) 06:49:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:31 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd1c6c8a00149c292db1c4fc5c83f4b1742cf4000000000004", 0x32435750}) 06:49:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:31 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) [ 2728.110322] oom_reaper: reaped process 1854 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2728.147928] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2728.164922] systemd-journal cpuset=/ mems_allowed=0-1 [ 2728.170139] CPU: 1 PID: 1709 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2728.178017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2728.187365] Call Trace: [ 2728.189968] dump_stack+0x1fc/0x2ef [ 2728.193599] dump_header+0x15d/0xc3f [ 2728.197322] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2728.202426] ? ___ratelimit+0x319/0x590 [ 2728.206405] oom_kill_process.cold+0x10/0x692 [ 2728.210907] ? check_preemption_disabled+0x41/0x280 [ 2728.215938] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2728.221225] out_of_memory+0x1072/0x1390 [ 2728.225295] ? oom_killer_disable+0x270/0x270 [ 2728.229794] ? mutex_trylock+0x15f/0x1a0 [ 2728.233859] __alloc_pages_nodemask+0x23a2/0x2890 [ 2728.238708] ? find_get_entry+0x4cd/0x8a0 [ 2728.242851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2728.247687] alloc_pages_current+0x193/0x2a0 [ 2728.252076] filemap_fault+0x146e/0x2180 [ 2728.253148] syz-executor.5: vmalloc: allocation failure, allocated 1007034368 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2728.256134] ext4_filemap_fault+0x84/0xb0 [ 2728.269952] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2728.274027] __do_fault+0x10b/0x4b0 [ 2728.274045] __handle_mm_fault+0x273b/0x41c0 [ 2728.274065] ? vm_insert_page+0x9c0/0x9c0 [ 2728.291286] ? check_preemption_disabled+0x41/0x280 [ 2728.296326] handle_mm_fault+0x436/0xb10 [ 2728.300405] __do_page_fault+0x68e/0xd60 [ 2728.304930] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2728.309943] ? spurious_fault+0x840/0x840 [ 2728.314107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2728.318949] ? page_fault+0x8/0x30 [ 2728.322485] page_fault+0x1e/0x30 [ 2728.325933] RIP: 0033:0x7ff7399772e3 [ 2728.329642] Code: Bad RIP value. [ 2728.333024] RSP: 002b:00007ffed7733358 EFLAGS: 00010246 [ 2728.338938] RAX: 0000000000000001 RBX: 00005626fbf431e0 RCX: 00007ff7399772e3 [ 2728.346213] RDX: 0000000000000012 RSI: 00007ffed7733360 RDI: 000000000000000c [ 2728.353586] RBP: 00007ffed7733540 R08: 00007ffed77dd000 R09: 000002bb11a11007 [ 2728.360853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed7733360 [ 2728.368111] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d11d6ce62d [ 2728.379714] CPU: 0 PID: 1854 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2728.387534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2728.397160] Call Trace: [ 2728.397828] Mem-Info: [ 2728.399756] dump_stack+0x1fc/0x2ef [ 2728.402163] active_anon:27876 inactive_anon:90086 isolated_anon:0 [ 2728.402163] active_file:56 inactive_file:0 isolated_file:0 [ 2728.402163] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2728.402163] slab_reclaimable:13603 slab_unreclaimable:116239 [ 2728.402163] mapped:22170 shmem:104307 pagetables:555 bounce:0 [ 2728.402163] free:13887 free_pcp:148 free_cma:0 [ 2728.405758] warn_alloc.cold+0x7b/0x18f [ 2728.405775] ? zone_watermark_ok_safe+0x260/0x260 [ 2728.405788] ? rcu_nmi_exit+0xb3/0x180 [ 2728.405827] __vmalloc_area_node+0x4fd/0x780 [ 2728.439166] Node 0 active_anon:108816kB inactive_anon:164112kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87084kB dirty:104kB writeback:0kB shmem:219788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2728.443086] ? __vmalloc_node_range+0x180/0x180 [ 2728.443105] ? _raw_spin_unlock+0x29/0x40 [ 2728.447938] Node 1 active_anon:2688kB inactive_anon:196232kB active_file:132kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1596kB dirty:52kB writeback:0kB shmem:197440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2728.451810] ? __get_vm_area_node+0x2e2/0x3a0 [ 2728.456209] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.484286] __vmalloc_node_range+0xed/0x180 [ 2728.484302] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2728.484319] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2728.488959] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2728.493089] vmalloc_user+0x70/0xe0 [ 2728.493104] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2728.493120] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2728.522784] Node 0 DMA32 free:17736kB min:35996kB low:44992kB high:53988kB active_anon:108816kB inactive_anon:160496kB active_file:44kB inactive_file:36kB unevictable:0kB writepending:204kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2012kB bounce:0kB free_pcp:344kB local_pcp:96kB free_cma:0kB [ 2728.524989] __vb2_queue_alloc+0x472/0xe60 [ 2728.525014] vb2_core_create_bufs+0x273/0x7e0 [ 2728.525029] ? __vb2_queue_free+0x870/0x870 [ 2728.551405] lowmem_reserve[]: 0 0 1 1 1 [ 2728.555777] ? __video_do_ioctl+0x632/0xcd0 [ 2728.555796] ? pi_state_update_owner+0x450/0x450 [ 2728.555812] ? __mutex_lock+0x368/0x1190 [ 2728.560104] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.565455] vb2_create_bufs+0x332/0x620 [ 2728.565472] ? mark_held_locks+0xf0/0xf0 [ 2728.565488] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2728.570472] lowmem_reserve[]: 0 0 0 0 0 [ 2728.574084] ? futex_wait_queue_me+0x404/0x5e0 [ 2728.574099] ? pi_state_update_owner+0x450/0x450 [ 2728.574116] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2728.578406] Node 1 Normal free:26932kB min:53876kB low:67344kB high:80812kB active_anon:2688kB inactive_anon:196232kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:152kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:208kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2728.582548] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2728.613964] lowmem_reserve[]: 0 0 0 0 0 [ 2728.615908] v4l_create_bufs+0xb2/0x160 [ 2728.620376] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2728.624696] __video_do_ioctl+0x49a/0xcd0 [ 2728.624716] ? v4l_querycap+0x340/0x340 [ 2728.624735] ? __might_fault+0x192/0x1d0 [ 2728.628677] Node 0 DMA32: 1292*4kB (UME) 667*8kB (UME) 190*16kB (UME) 63*32kB (UME) 34*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17736kB [ 2728.632986] ? v4l_querycap+0x340/0x340 [ 2728.633002] video_usercopy+0x13f/0xfa0 [ 2728.633023] ? v4l_enumstd+0x60/0x60 [ 2728.638179] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2728.642226] ? do_futex+0x171/0x1880 [ 2728.668065] Node 1 Normal: 639*4kB (ME) 470*8kB (ME) 148*16kB (UME) 65*32kB (UME) 21*64kB (UME) 4*128kB (M) 1*256kB (U) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 27212kB [ 2728.672092] ? mark_held_locks+0xf0/0xf0 [ 2728.676156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2728.681221] ? debug_check_no_obj_freed+0x201/0x490 [ 2728.685199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2728.689751] ? video_usercopy+0xfa0/0xfa0 [ 2728.694495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2728.699567] v4l2_ioctl+0x147/0x1a0 [ 2728.699582] ? video_devdata+0xa0/0xa0 [ 2728.699598] do_vfs_ioctl+0xcdb/0x12e0 [ 2728.699611] ? lock_downgrade+0x720/0x720 [ 2728.699625] ? check_preemption_disabled+0x41/0x280 [ 2728.699638] ? ioctl_preallocate+0x200/0x200 [ 2728.699656] ? __fget+0x356/0x510 [ 2728.699671] ? do_dup2+0x450/0x450 [ 2728.699685] ? __se_sys_futex+0x298/0x3b0 [ 2728.699707] ksys_ioctl+0x9b/0xc0 [ 2728.699723] __x64_sys_ioctl+0x6f/0xb0 [ 2728.699736] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2728.699750] do_syscall_64+0xf9/0x620 [ 2728.699770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2728.699781] RIP: 0033:0x7ff26a4950f9 [ 2728.699795] Code: Bad RIP value. [ 2728.699802] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2728.699816] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2728.699824] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2728.699832] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2728.699840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2728.699848] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2728.706661] Mem-Info: [ 2728.733493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2728.751844] active_anon:27876 inactive_anon:90086 isolated_anon:0 [ 2728.751844] active_file:56 inactive_file:0 isolated_file:0 [ 2728.751844] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2728.751844] slab_reclaimable:13603 slab_unreclaimable:116239 [ 2728.751844] mapped:22170 shmem:104307 pagetables:555 bounce:0 [ 2728.751844] free:13887 free_pcp:148 free_cma:0 [ 2728.766248] 104346 total pagecache pages [ 2728.773238] Node 0 active_anon:108816kB inactive_anon:164112kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87084kB dirty:8kB writeback:0kB shmem:219788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2728.792730] 0 pages in swap cache [ 2728.802704] Node 1 active_anon:2692kB inactive_anon:196232kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1472kB dirty:0kB writeback:0kB shmem:197440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2728.817218] Swap cache stats: add 0, delete 0, find 0/0 [ 2728.834429] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.843731] Free swap = 0kB [ 2728.856139] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2728.861353] Total swap = 0kB [ 2728.871506] Node 0 DMA32 free:17736kB min:35996kB low:44992kB high:53988kB active_anon:108724kB inactive_anon:160496kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2008kB bounce:0kB free_pcp:348kB local_pcp:252kB free_cma:0kB [ 2728.877934] 2097051 pages RAM [ 2728.888428] lowmem_reserve[]: 0 0 1 1 1 [ 2728.892204] 0 pages HighMem/MovableOnly [ 2728.896670] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2728.902058] 369649 pages reserved [ 2728.911890] lowmem_reserve[]: 0 0 0 0 0 [ 2728.912990] 0 pages cma reserved [ 2728.920317] Node 1 Normal free:27212kB min:53876kB low:67344kB high:80812kB active_anon:2692kB inactive_anon:196232kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:208kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2728.920955] Out of memory (oom_kill_allocating_task): Kill process 1709 (systemd-journal) score 0 or sacrifice child [ 2728.929621] lowmem_reserve[]: 0 0 0 0 0 [ 2728.937204] Killed process 1709 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 2728.946202] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2728.950528] oom_reaper: reaped process 1709 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 2728.956934] Node 0 DMA32: 1292*4kB (UME) 668*8kB (UME) 190*16kB (UME) 63*32kB (UME) 34*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 2728.977563] kworker/u4:8 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2728.977586] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 2728.977614] CPU: 1 PID: 19360 Comm: kworker/u4:8 Not tainted 4.19.211-syzkaller #0 [ 2728.977621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2728.977637] Workqueue: events_unbound call_usermodehelper_exec_work [ 2728.977643] Call Trace: [ 2728.977661] dump_stack+0x1fc/0x2ef [ 2729.006788] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2729.022023] dump_header+0x15d/0xc3f [ 2729.022040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2729.022053] ? ___ratelimit+0x319/0x590 [ 2729.022068] oom_kill_process.cold+0x10/0x692 [ 2729.022080] ? oom_badness.part.0+0x135/0x6e0 [ 2729.022098] ? lock_downgrade+0x720/0x720 [ 2729.038090] Node 1 Normal: 623*4kB (UME) 468*8kB (UME) 146*16kB (UME) 70*32kB (UME) 25*64kB (UME) 6*128kB (M) 0*256kB 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 28028kB [ 2729.054366] ? check_preemption_disabled+0x41/0x280 [ 2729.054383] out_of_memory+0x34d/0x1390 [ 2729.054402] ? oom_killer_disable+0x270/0x270 [ 2729.054417] ? mutex_trylock+0x15f/0x1a0 [ 2729.054434] __alloc_pages_nodemask+0x23a2/0x2890 [ 2729.054468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2729.054481] ? should_fail+0x142/0x7b0 [ 2729.054497] ? fs_reclaim_release+0xd0/0x110 [ 2729.065066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2729.085079] ? check_preemption_disabled+0x41/0x280 [ 2729.085098] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2729.085111] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2729.085129] copy_process.part.0+0x3cf/0x8260 [ 2729.085148] ? __lock_acquire+0x6de/0x3ff0 [ 2729.085166] ? __lock_acquire+0x6de/0x3ff0 [ 2729.085181] ? umh_complete+0x90/0x90 [ 2729.085195] ? __cleanup_sighand+0x60/0x60 [ 2729.085212] ? mark_held_locks+0xf0/0xf0 [ 2729.104676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2729.116918] ? __lock_acquire+0x6de/0x3ff0 [ 2729.116940] _do_fork+0x22f/0xf30 [ 2729.116955] ? umh_complete+0x90/0x90 [ 2729.116970] ? fork_idle+0x220/0x220 [ 2729.116982] ? lock_acquire+0x170/0x3c0 [ 2729.116999] ? debug_object_deactivate+0xfc/0x2e0 [ 2729.130042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2729.157054] ? trace_hardirqs_off+0x64/0x200 [ 2729.157072] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2729.157086] ? umh_complete+0x90/0x90 [ 2729.157099] kernel_thread+0x2f/0x40 [ 2729.157114] call_usermodehelper_exec_work+0x16d/0x260 [ 2729.157127] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2729.157145] process_one_work+0x864/0x1570 [ 2729.157166] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2729.157189] worker_thread+0x64c/0x1130 [ 2729.157209] ? process_one_work+0x1570/0x1570 [ 2729.157221] kthread+0x33f/0x460 [ 2729.157236] ? kthread_park+0x180/0x180 [ 2729.170763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2729.194086] ret_from_fork+0x24/0x30 [ 2729.197080] Mem-Info: [ 2729.216360] 104334 total pagecache pages [ 2729.244019] active_anon:27754 inactive_anon:90086 isolated_anon:0 [ 2729.244019] active_file:14 inactive_file:13 isolated_file:0 [ 2729.244019] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2729.244019] slab_reclaimable:13603 slab_unreclaimable:116205 [ 2729.244019] mapped:21785 shmem:104307 pagetables:554 bounce:0 [ 2729.244019] free:14170 free_pcp:0 free_cma:0 [ 2729.254183] 0 pages in swap cache [ 2729.267234] Node 0 active_anon:108724kB inactive_anon:164112kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:219788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2729.288405] Swap cache stats: add 0, delete 0, find 0/0 [ 2729.306807] Node 1 active_anon:2292kB inactive_anon:196232kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:197440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2729.320892] Free swap = 0kB [ 2729.334081] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.348756] Total swap = 0kB [ 2729.361876] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2729.371238] 2097051 pages RAM [ 2729.375999] Node 0 DMA32 free:18036kB min:35996kB low:44992kB high:53988kB active_anon:108724kB inactive_anon:160496kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.376029] lowmem_reserve[]: 0 0 1 1 1 [ 2729.376046] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.376073] lowmem_reserve[]: 0 0 0 0 0 [ 2729.380555] 0 pages HighMem/MovableOnly [ 2729.392328] Node 1 Normal free:27760kB min:53876kB low:67344kB high:80812kB active_anon:2292kB inactive_anon:196232kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2729.408097] 369649 pages reserved [ 2729.417738] lowmem_reserve[]: 0 0 0 0 0 [ 2729.419349] 0 pages cma reserved [ 2729.423582] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2729.864944] Node 0 DMA32: 1322*4kB (UME) 678*8kB (UME) 190*16kB (UME) 64*32kB (UME) 36*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18104kB [ 2729.879283] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2729.890380] Node 1 Normal: 623*4kB (UME) 468*8kB (UME) 146*16kB (UME) 71*32kB (UME) 25*64kB (UME) 6*128kB (M) 0*256kB 1*512kB (M) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 28060kB [ 2729.906743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2729.915618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2729.924230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2729.934812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2729.943427] 104334 total pagecache pages [ 2729.947485] 0 pages in swap cache [ 2729.950931] Swap cache stats: add 0, delete 0, find 0/0 [ 2729.956331] Free swap = 0kB [ 2729.959340] Total swap = 0kB [ 2729.962346] 2097051 pages RAM [ 2729.965484] 0 pages HighMem/MovableOnly [ 2729.969446] 369649 pages reserved [ 2729.972924] 0 pages cma reserved [ 2729.976287] Out of memory: Kill process 8072 (syz-fuzzer) score 6 or sacrifice child [ 2729.984264] Killed process 31775 (syz-executor.3) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 2729.994723] oom_reaper: reaped process 31775 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2730.038159] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2730.059119] in:imklog cpuset=/ mems_allowed=0-1 [ 2730.070148] CPU: 0 PID: 1763 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2730.077519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2730.086869] Call Trace: [ 2730.089466] dump_stack+0x1fc/0x2ef [ 2730.093098] dump_header+0x15d/0xc3f [ 2730.096817] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2730.102015] ? ___ratelimit+0x319/0x590 [ 2730.105996] oom_kill_process.cold+0x10/0x692 [ 2730.110496] ? check_preemption_disabled+0x41/0x280 [ 2730.115518] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2730.120799] out_of_memory+0x1072/0x1390 [ 2730.124869] ? oom_killer_disable+0x270/0x270 [ 2730.129369] ? mutex_trylock+0x15f/0x1a0 [ 2730.133437] __alloc_pages_nodemask+0x23a2/0x2890 [ 2730.138289] ? find_get_entry+0x4cd/0x8a0 [ 2730.142447] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2730.147314] alloc_pages_current+0x193/0x2a0 [ 2730.151726] filemap_fault+0x146e/0x2180 [ 2730.155802] ext4_filemap_fault+0x84/0xb0 [ 2730.159955] __do_fault+0x10b/0x4b0 [ 2730.163587] __handle_mm_fault+0x273b/0x41c0 [ 2730.167999] ? vm_insert_page+0x9c0/0x9c0 [ 2730.172156] ? lock_downgrade+0x720/0x720 [ 2730.176316] ? check_preemption_disabled+0x41/0x280 [ 2730.181340] handle_mm_fault+0x436/0xb10 [ 2730.185413] __do_page_fault+0x68e/0xd60 [ 2730.189480] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2730.194500] ? spurious_fault+0x840/0x840 [ 2730.198738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2730.203585] ? page_fault+0x8/0x30 [ 2730.207134] page_fault+0x1e/0x30 [ 2730.210583] RIP: 0033:0x7f2fe431022d [ 2730.214293] Code: Bad RIP value. [ 2730.217651] RSP: 002b:00007f2fe1cac580 EFLAGS: 00010293 [ 2730.223007] RAX: 0000000000000076 RBX: 0000000000000000 RCX: 00007f2fe431022d [ 2730.230272] RDX: 0000000000001fa0 RSI: 00007f2fe1cacda0 RDI: 0000000000000004 [ 2730.237534] RBP: 0000561f36ad59d0 R08: 0000000000000000 R09: 0000000004000001 [ 2730.244800] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f2fe1cacda0 [ 2730.252064] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f2fe1cacdeb [ 2730.302483] Mem-Info: [ 2730.315986] active_anon:27637 inactive_anon:90085 isolated_anon:0 [ 2730.315986] active_file:39 inactive_file:188 isolated_file:0 [ 2730.315986] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2730.315986] slab_reclaimable:13603 slab_unreclaimable:115786 [ 2730.315986] mapped:18216 shmem:104307 pagetables:495 bounce:0 [ 2730.315986] free:25532 free_pcp:925 free_cma:0 [ 2730.368112] Node 0 active_anon:108312kB inactive_anon:164112kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72764kB dirty:0kB writeback:0kB shmem:219788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2730.403204] Node 1 active_anon:2236kB inactive_anon:196228kB active_file:212kB inactive_file:2608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1400kB dirty:0kB writeback:0kB shmem:197440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2730.458242] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2730.548192] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2730.554683] Node 0 DMA32 free:34068kB min:35996kB low:44992kB high:53988kB active_anon:108212kB inactive_anon:160496kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1860kB bounce:0kB free_pcp:2268kB local_pcp:992kB free_cma:0kB [ 2730.591037] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2730.599601] lowmem_reserve[]: 0 0 1 1 1 [ 2730.612835] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2730.623030] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2730.661170] lowmem_reserve[]: 0 0 0 0 0 [ 2730.672414] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2730.686534] Node 1 Normal free:234172kB min:53876kB low:67344kB high:80812kB active_anon:2536kB inactive_anon:196228kB active_file:2112kB inactive_file:6908kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:120kB bounce:0kB free_pcp:1708kB local_pcp:448kB free_cma:0kB [ 2730.724332] lowmem_reserve[]: 0 0 0 0 0 [ 2730.728986] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2730.732925] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2730.751814] Node 0 DMA32: 3539*4kB (UME) 1572*8kB (UME) 195*16kB (UME) 65*32kB (UME) 36*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34236kB [ 2730.751888] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2730.751941] Node 1 Normal: 3*4kB (UE) 7*8kB (UE) 10*16kB (UME) 43*32kB (UME) 27*64kB (UME) 16*128kB (UM) 10*256kB (U) 10*512kB (UM) 11*1024kB (UME) 12*2048kB (UM) 56*4096kB (U) = 278276kB [ 2730.752025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.752035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.752045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.752054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.752059] 106665 total pagecache pages [ 2730.752072] 0 pages in swap cache [ 2730.752080] Swap cache stats: add 0, delete 0, find 0/0 [ 2730.752085] Free swap = 0kB [ 2730.752089] Total swap = 0kB [ 2730.752097] 2097051 pages RAM [ 2730.752102] 0 pages HighMem/MovableOnly [ 2730.752107] 369649 pages reserved [ 2730.752112] 0 pages cma reserved [ 2730.752123] Out of memory (oom_kill_allocating_task): Kill process 1763 (in:imklog) score 0 or sacrifice child [ 2730.752244] Killed process 1711 (rsyslogd) total-vm:254332kB, anon-rss:760kB, file-rss:0kB, shmem-rss:0kB [ 2730.754585] oom_reaper: reaped process 1711 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2730.821539] systemd[1]: Stopped Journal Service. [ 2730.909521] systemd[1]: Starting Journal Service... [ 2730.935801] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2731.008458] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2731.060177] systemd[1]: rsyslog.service: Unit entered failed state. [ 2731.075003] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2731.106659] systemd-journald[1896]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2734.241607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2734.259991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2734.271717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2734.281368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2734.296073] device bridge_slave_1 left promiscuous mode [ 2734.301567] bridge0: port 2(bridge_slave_1) entered disabled state [ 2734.313388] device bridge_slave_0 left promiscuous mode [ 2734.318907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2734.334854] device veth1_macvtap left promiscuous mode [ 2734.340521] device veth0_macvtap left promiscuous mode [ 2734.351518] device veth1_vlan left promiscuous mode [ 2734.357307] device veth0_vlan left promiscuous mode 06:49:45 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:49:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:49:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:45 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x8b, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:49:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) 06:49:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd1c6c8a00149c292db1c4fc5c83f4b1742cf4000000000004", 0x32435750}) 06:49:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:49:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xa2800) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) 06:49:45 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240), 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:49:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:49:45 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) [ 2740.201235] Bluetooth: hci5: command 0x0409 tx timeout [ 2742.012216] device hsr_slave_1 left promiscuous mode [ 2742.023774] device hsr_slave_0 left promiscuous mode [ 2742.042747] team0 (unregistering): Port device team_slave_1 removed [ 2742.054400] team0 (unregistering): Port device team_slave_0 removed [ 2742.066072] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2742.079009] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2742.124604] bond0 (unregistering): Released all slaves [ 2742.148100] IPVS: ftp: loaded support on port[0] = 21 [ 2742.286023] Bluetooth: hci5: command 0x041b tx timeout [ 2742.428031] chnl_net:caif_netlink_parms(): no params data found [ 2742.560227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2742.594649] bridge0: port 1(bridge_slave_0) entered disabled state [ 2742.603279] device bridge_slave_0 entered promiscuous mode [ 2742.634756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2742.654690] bridge0: port 2(bridge_slave_1) entered disabled state [ 2742.663363] device bridge_slave_1 entered promiscuous mode [ 2742.723163] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2742.757619] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2742.816865] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2742.835417] team0: Port device team_slave_0 added [ 2742.845146] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2742.856590] team0: Port device team_slave_1 added [ 2742.884968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2742.895453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.931701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2742.950358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2742.957881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.989087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2743.030437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2743.065960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2743.128641] device hsr_slave_0 entered promiscuous mode [ 2743.141788] device hsr_slave_1 entered promiscuous mode [ 2743.148042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2743.161403] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2743.367406] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2743.447347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2743.457301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2743.483993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2743.490202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2743.504124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2743.516937] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2743.527163] 8021q: adding VLAN 0 to HW filter on device team0 [ 2743.539948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2743.562045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2743.570363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2743.584204] bridge0: port 1(bridge_slave_0) entered blocking state [ 2743.590650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2743.607069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2743.616177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2743.628394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2743.653027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2743.684076] bridge0: port 2(bridge_slave_1) entered blocking state [ 2743.690517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2743.714893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2743.732644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2743.752931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2743.760752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2743.774622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2743.784478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2743.796052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2743.807756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2743.833790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2743.842173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2743.853199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2743.880010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2743.887705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2743.896798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2743.907805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2743.916515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2743.925306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2743.939756] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2743.965692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2744.092469] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2744.113871] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2744.120129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2744.141601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2744.168396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2744.235523] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2744.254081] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2744.266721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2744.285689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2744.360931] Bluetooth: hci5: command 0x040f tx timeout [ 2744.769062] oom_reaper: reaped process 1927 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2744.791674] modprobe invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2744.813204] modprobe cpuset=/ mems_allowed=0-1 [ 2744.817818] CPU: 0 PID: 2182 Comm: modprobe Not tainted 4.19.211-syzkaller #0 [ 2744.825084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2744.834431] Call Trace: [ 2744.837021] dump_stack+0x1fc/0x2ef [ 2744.840650] dump_header+0x15d/0xc3f [ 2744.844363] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2744.849462] ? ___ratelimit+0x319/0x590 [ 2744.853441] oom_kill_process.cold+0x10/0x692 [ 2744.857935] ? check_preemption_disabled+0x41/0x280 [ 2744.862950] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2744.868228] out_of_memory+0x1072/0x1390 [ 2744.872292] ? oom_killer_disable+0x270/0x270 [ 2744.876791] ? mutex_trylock+0x15f/0x1a0 [ 2744.880863] __alloc_pages_nodemask+0x23a2/0x2890 [ 2744.885711] ? find_get_entry+0x4cd/0x8a0 [ 2744.889868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2744.894731] alloc_pages_current+0x193/0x2a0 [ 2744.899137] filemap_fault+0x146e/0x2180 [ 2744.903206] ext4_filemap_fault+0x84/0xb0 [ 2744.907359] __do_fault+0x10b/0x4b0 [ 2744.911168] __handle_mm_fault+0x273b/0x41c0 [ 2744.915575] ? vm_insert_page+0x9c0/0x9c0 [ 2744.919742] ? check_preemption_disabled+0x41/0x280 [ 2744.924772] handle_mm_fault+0x436/0xb10 [ 2744.928851] __do_page_fault+0x68e/0xd60 [ 2744.930519] syz-executor.5: vmalloc: allocation failure, allocated 1000460288 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2744.932918] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2744.951690] ? spurious_fault+0x840/0x840 [ 2744.955838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2744.960702] ? page_fault+0x8/0x30 [ 2744.964248] page_fault+0x1e/0x30 [ 2744.967698] RIP: 0033:0x7f010aff5f30 [ 2744.971419] Code: Bad RIP value. [ 2744.974781] RSP: 002b:00007ffc4de5ac38 EFLAGS: 00010202 [ 2744.980138] RAX: 000000000000000b RBX: 0000000000000000 RCX: 00007f010b201e38 [ 2744.987404] RDX: 0000000000000003 RSI: 0000000000000040 RDI: 000000000000004b [ 2744.989037] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2744.994663] RBP: 00007ffc4de5ad10 R08: 0000000000000020 R09: 00007ffc4dfe5040 [ 2744.994671] R10: 0000000000000010 R11: 0000000000000246 R12: 00007ffc4de5ac40 [ 2744.994676] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000002 [ 2745.001054] Mem-Info: [ 2745.028501] CPU: 1 PID: 1927 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2745.029335] active_anon:27850 inactive_anon:90085 isolated_anon:0 [ 2745.029335] active_file:17 inactive_file:31 isolated_file:0 [ 2745.029335] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2745.029335] slab_reclaimable:13632 slab_unreclaimable:117771 [ 2745.029335] mapped:22147 shmem:104303 pagetables:562 bounce:0 [ 2745.029335] free:13898 free_pcp:207 free_cma:0 [ 2745.036313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2745.036318] Call Trace: [ 2745.036337] dump_stack+0x1fc/0x2ef [ 2745.036355] warn_alloc.cold+0x7b/0x18f [ 2745.036371] ? zone_watermark_ok_safe+0x260/0x260 [ 2745.036404] __vmalloc_area_node+0x4fd/0x780 [ 2745.036424] ? __vmalloc_node_range+0x180/0x180 [ 2745.036439] ? _raw_spin_unlock+0x29/0x40 [ 2745.036451] ? __get_vm_area_node+0x2e2/0x3a0 [ 2745.036469] __vmalloc_node_range+0xed/0x180 [ 2745.036484] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2745.036499] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2745.036512] vmalloc_user+0x70/0xe0 [ 2745.036524] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2745.036554] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2745.070071] Node 0 active_anon:109164kB inactive_anon:155984kB active_file:20kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87132kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2745.079368] __vb2_queue_alloc+0x472/0xe60 [ 2745.079404] vb2_core_create_bufs+0x273/0x7e0 [ 2745.082015] Node 1 active_anon:2236kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1456kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2745.085582] ? __vb2_queue_free+0x870/0x870 [ 2745.089524] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.094350] ? __video_do_ioctl+0x632/0xcd0 [ 2745.094368] ? __mutex_lock+0x368/0x1190 [ 2745.094398] vb2_create_bufs+0x332/0x620 [ 2745.098775] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2745.103454] ? mark_held_locks+0xf0/0xf0 [ 2745.103466] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2745.103482] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2745.107601] Node 0 DMA32 free:17988kB min:35996kB low:44992kB high:53988kB active_anon:109164kB inactive_anon:152368kB active_file:24kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2084kB bounce:0kB free_pcp:576kB local_pcp:328kB free_cma:0kB [ 2745.112083] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2745.112102] v4l_create_bufs+0xb2/0x160 [ 2745.112119] __video_do_ioctl+0x49a/0xcd0 [ 2745.116494] lowmem_reserve[]: 0 0 1 1 1 [ 2745.120805] ? v4l_querycap+0x340/0x340 [ 2745.120824] ? __might_fault+0x192/0x1d0 [ 2745.126153] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.129769] ? v4l_querycap+0x340/0x340 [ 2745.134078] lowmem_reserve[]: 0 0 0 0 0 [ 2745.138193] video_usercopy+0x13f/0xfa0 [ 2745.166077] Node 1 Normal free:26728kB min:53876kB low:67344kB high:80812kB active_anon:2236kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:164kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2745.170268] ? v4l_enumstd+0x60/0x60 [ 2745.170286] ? do_futex+0x171/0x1880 [ 2745.174752] lowmem_reserve[]: 0 0 0 0 0 [ 2745.201994] ? mark_held_locks+0xf0/0xf0 [ 2745.202011] ? debug_check_no_obj_freed+0x201/0x490 [ 2745.202033] ? video_usercopy+0xfa0/0xfa0 [ 2745.206324] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2745.232850] v4l2_ioctl+0x147/0x1a0 [ 2745.232863] ? video_devdata+0xa0/0xa0 [ 2745.232878] do_vfs_ioctl+0xcdb/0x12e0 [ 2745.232896] ? lock_downgrade+0x720/0x720 [ 2745.237187] Node 0 DMA32: 1293*4kB (ME) 634*8kB (UME) 269*16kB (UME) 86*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 2745.241234] ? check_preemption_disabled+0x41/0x280 [ 2745.241248] ? ioctl_preallocate+0x200/0x200 [ 2745.241265] ? __fget+0x356/0x510 [ 2745.245292] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2745.250468] ? do_dup2+0x450/0x450 [ 2745.250481] ? __se_sys_futex+0x298/0x3b0 [ 2745.250502] ksys_ioctl+0x9b/0xc0 [ 2745.254528] Node 1 Normal: 672*4kB (UME) 493*8kB (UME) 162*16kB (ME) 57*32kB (ME) 19*64kB (ME) 5*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 26728kB [ 2745.259703] __x64_sys_ioctl+0x6f/0xb0 [ 2745.264892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2745.294091] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2745.294105] do_syscall_64+0xf9/0x620 [ 2745.294124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2745.299286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2745.303239] RIP: 0033:0x7ff26a4950f9 [ 2745.303256] Code: Bad RIP value. [ 2745.307399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2745.311343] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2745.311356] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2745.311363] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2745.311378] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2745.315325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2745.319357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2745.319374] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2745.345393] 104338 total pagecache pages [ 2745.388480] Mem-Info: [ 2745.399600] 0 pages in swap cache [ 2745.421027] active_anon:27850 inactive_anon:90085 isolated_anon:0 [ 2745.421027] active_file:17 inactive_file:31 isolated_file:0 [ 2745.421027] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2745.421027] slab_reclaimable:13632 slab_unreclaimable:117771 [ 2745.421027] mapped:22147 shmem:104303 pagetables:562 bounce:0 [ 2745.421027] free:13898 free_pcp:207 free_cma:0 [ 2745.434615] Swap cache stats: add 0, delete 0, find 0/0 [ 2745.447835] Node 0 active_anon:109164kB inactive_anon:155984kB active_file:20kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87132kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2745.460213] Free swap = 0kB [ 2745.476571] Node 1 active_anon:2236kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1456kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2745.484371] Total swap = 0kB [ 2745.484734] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.488811] 2097051 pages RAM [ 2745.508779] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2745.508808] Node 0 DMA32 free:17988kB min:35996kB low:44992kB high:53988kB active_anon:109164kB inactive_anon:152368kB active_file:24kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2084kB bounce:0kB free_pcp:576kB local_pcp:248kB free_cma:0kB [ 2745.520401] 0 pages HighMem/MovableOnly [ 2745.531082] lowmem_reserve[]: 0 0 1 1 1 [ 2745.538535] 369649 pages reserved [ 2745.558637] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.563679] 0 pages cma reserved [ 2745.579804] lowmem_reserve[]: 0 0 0 0 0 [ 2745.587355] Out of memory (oom_kill_allocating_task): Kill process 2182 (modprobe) score 0 or sacrifice child [ 2745.607537] Node 1 Normal free:26728kB min:53876kB low:67344kB high:80812kB active_anon:2236kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:164kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2745.617819] Killed process 2182 (modprobe) total-vm:456kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2745.627041] lowmem_reserve[]: 0 0 0 0 0 [ 2745.667150] oom_reaper: reaped process 2182 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2745.701083] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2745.763387] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2745.792684] Node 0 DMA32: 1293*4kB (ME) 634*8kB (UME) 269*16kB (UME) 86*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 2745.842469] in:imklog cpuset=/ mems_allowed=0-1 [ 2745.849965] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2745.879463] modprobe: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 2745.887295] Node 1 Normal: 672*4kB (UME) 493*8kB (UME) 162*16kB (ME) 57*32kB (ME) 19*64kB (ME) 5*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 26728kB [ 2745.893915] modprobe cpuset=/ mems_allowed=0-1 [ 2745.897566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2745.920890] CPU: 0 PID: 1901 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2745.928899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2745.939519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2745.939524] Call Trace: [ 2745.939544] dump_stack+0x1fc/0x2ef [ 2745.939561] dump_header+0x15d/0xc3f [ 2745.939577] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2745.939592] ? ___ratelimit+0x319/0x590 [ 2745.947455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2745.955240] oom_kill_process.cold+0x10/0x692 [ 2745.955257] ? check_preemption_disabled+0x41/0x280 [ 2745.955282] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2745.968409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2745.982219] out_of_memory+0x1072/0x1390 [ 2745.982238] ? oom_killer_disable+0x270/0x270 [ 2745.982254] ? mutex_trylock+0x15f/0x1a0 [ 2745.982270] __alloc_pages_nodemask+0x23a2/0x2890 [ 2745.982288] ? find_get_entry+0x4cd/0x8a0 [ 2745.982308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2745.982348] alloc_pages_current+0x193/0x2a0 [ 2745.988963] 104337 total pagecache pages [ 2745.995734] filemap_fault+0x146e/0x2180 [ 2745.995760] ext4_filemap_fault+0x84/0xb0 [ 2745.995780] __do_fault+0x10b/0x4b0 [ 2746.005889] 0 pages in swap cache [ 2746.011811] __handle_mm_fault+0x273b/0x41c0 [ 2746.011829] ? vm_insert_page+0x9c0/0x9c0 [ 2746.011842] ? lock_downgrade+0x720/0x720 [ 2746.011864] ? sync_mm_rss+0x97/0x1a0 [ 2746.043299] Swap cache stats: add 0, delete 0, find 0/0 [ 2746.049121] handle_mm_fault+0x436/0xb10 [ 2746.083317] Free swap = 0kB [ 2746.084993] __do_page_fault+0x68e/0xd60 [ 2746.089804] Total swap = 0kB [ 2746.093940] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2746.093954] ? spurious_fault+0x840/0x840 [ 2746.093968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2746.093985] ? page_fault+0x8/0x30 [ 2746.094000] page_fault+0x1e/0x30 [ 2746.123276] 2097051 pages RAM [ 2746.126856] RIP: 0033:0x7f514c2c922d [ 2746.131020] 0 pages HighMem/MovableOnly [ 2746.135114] Code: Bad RIP value. [ 2746.138889] 369649 pages reserved [ 2746.144225] RSP: 002b:00007f5149c65580 EFLAGS: 00010293 [ 2746.144236] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 00007f514c2c922d [ 2746.144243] RDX: 0000000000001fa0 RSI: 00007f5149c65da0 RDI: 0000000000000004 [ 2746.144251] RBP: 000055619edcb9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2746.144257] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f5149c65da0 [ 2746.144263] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f5149c65ddd [ 2746.155358] Mem-Info: [ 2746.157930] CPU: 1 PID: 2182 Comm: modprobe Not tainted 4.19.211-syzkaller #0 [ 2746.158623] active_anon:27827 inactive_anon:90085 isolated_anon:0 [ 2746.158623] active_file:17 inactive_file:17 isolated_file:0 [ 2746.158623] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2746.158623] slab_reclaimable:13630 slab_unreclaimable:117765 [ 2746.158623] mapped:22131 shmem:104303 pagetables:561 bounce:0 [ 2746.158623] free:13902 free_pcp:215 free_cma:0 [ 2746.163598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2746.163603] Call Trace: [ 2746.163622] dump_stack+0x1fc/0x2ef [ 2746.163640] warn_alloc.cold+0x7b/0x18f [ 2746.163659] ? zone_watermark_ok_safe+0x260/0x260 [ 2746.167799] Node 0 active_anon:109076kB inactive_anon:155984kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2746.172745] ? usleep_range+0x170/0x170 [ 2746.172760] ? mark_held_locks+0xa6/0xf0 [ 2746.172773] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2746.172791] ? collect_expired_timers+0x2a0/0x2a0 [ 2746.176329] Node 1 active_anon:2232kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1456kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2746.179762] __alloc_pages_nodemask+0x232f/0x2890 [ 2746.182871] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.186544] ? find_get_entry+0x4cd/0x8a0 [ 2746.190509] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2746.193847] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2746.197267] Node 0 DMA32 free:18004kB min:35996kB low:44992kB high:53988kB active_anon:109076kB inactive_anon:152368kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2080kB bounce:0kB free_pcp:608kB local_pcp:360kB free_cma:0kB [ 2746.202638] alloc_pages_current+0x193/0x2a0 [ 2746.202654] filemap_fault+0x146e/0x2180 [ 2746.209896] lowmem_reserve[]: 0 0 1 1 1 [ 2746.217165] ext4_filemap_fault+0x84/0xb0 [ 2746.217181] __do_fault+0x10b/0x4b0 [ 2746.224442] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.231686] __handle_mm_fault+0x273b/0x41c0 [ 2746.231709] ? vm_insert_page+0x9c0/0x9c0 [ 2746.238949] lowmem_reserve[]: 0 0 0 0 0 [ 2746.241365] ? check_preemption_disabled+0x41/0x280 [ 2746.241384] handle_mm_fault+0x436/0xb10 [ 2746.248638] Node 1 Normal free:26728kB min:53876kB low:67344kB high:80812kB active_anon:2232kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:164kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2746.281940] __do_page_fault+0x68e/0xd60 [ 2746.281964] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2746.291309] lowmem_reserve[]: 0 0 0 0 0 [ 2746.293865] ? spurious_fault+0x840/0x840 [ 2746.293880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2746.297481] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2746.301445] ? page_fault+0x8/0x30 [ 2746.301458] page_fault+0x1e/0x30 [ 2746.301471] RIP: 0033:0x7f010aff5f30 [ 2746.306288] Node 0 DMA32: 1293*4kB (ME) 634*8kB (UME) 269*16kB (UME) 86*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 2746.334117] Code: Bad RIP value. [ 2746.334124] RSP: 002b:00007ffc4de5ac38 EFLAGS: 00010202 [ 2746.334135] RAX: 000000000000000b RBX: 0000000000000000 RCX: 00007f010b201e38 [ 2746.334145] RDX: 0000000000000003 RSI: 0000000000000040 RDI: 000000000000004b [ 2746.338097] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2746.342141] RBP: 00007ffc4de5ad10 R08: 0000000000000020 R09: 00007ffc4dfe5040 [ 2746.342149] R10: 0000000000000010 R11: 0000000000000246 R12: 00007ffc4de5ac40 [ 2746.342157] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000002 [ 2746.346887] 0 pages cma reserved [ 2746.347273] Node 1 Normal: 672*4kB (UME) 493*8kB (UME) 162*16kB (ME) 57*32kB (ME) 19*64kB (ME) 5*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 26728kB [ 2746.440203] Bluetooth: hci5: command 0x0419 tx timeout [ 2746.477181] Mem-Info: [ 2746.695426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2746.702712] active_anon:27827 inactive_anon:90085 isolated_anon:0 [ 2746.702712] active_file:17 inactive_file:17 isolated_file:0 [ 2746.702712] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2746.702712] slab_reclaimable:13630 slab_unreclaimable:117765 [ 2746.702712] mapped:22131 shmem:104303 pagetables:561 bounce:0 [ 2746.702712] free:13902 free_pcp:215 free_cma:0 [ 2746.746995] Node 0 active_anon:109076kB inactive_anon:155984kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2746.756914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2746.778837] Node 1 active_anon:2232kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1456kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2746.814705] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.845268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2746.854180] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2746.859232] Node 0 DMA32 free:18004kB min:35996kB low:44992kB high:53988kB active_anon:109076kB inactive_anon:152368kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2080kB bounce:0kB free_pcp:612kB local_pcp:364kB free_cma:0kB [ 2746.874794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2746.891688] lowmem_reserve[]: 0 0 1 1 1 [ 2746.904745] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.934182] lowmem_reserve[]: 0 0 0 0 0 [ 2746.938201] Node 1 Normal free:26936kB min:53876kB low:67344kB high:80812kB active_anon:2232kB inactive_anon:204356kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:164kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2746.970370] 104337 total pagecache pages [ 2746.974444] 0 pages in swap cache [ 2746.977895] Swap cache stats: add 0, delete 0, find 0/0 [ 2746.983360] Free swap = 0kB [ 2746.986366] Total swap = 0kB [ 2746.989380] 2097051 pages RAM [ 2746.995909] lowmem_reserve[]: 0 0 0 0 0 [ 2747.000158] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2747.018822] 0 pages HighMem/MovableOnly [ 2747.022850] 369649 pages reserved [ 2747.026328] 0 pages cma reserved [ 2747.029690] Out of memory (oom_kill_allocating_task): Kill process 1901 (in:imklog) score 0 or sacrifice child [ 2747.043685] Node 0 DMA32: 1293*4kB (ME) 636*8kB (UME) 269*16kB (UME) 86*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 2747.057997] Killed process 1899 (rsyslogd) total-vm:254332kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB [ 2747.073066] oom_reaper: reaped process 1899 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2747.091708] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2747.128666] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2747.146164] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2747.148245] Node 1 Normal: 672*4kB (UME) 514*8kB (UME) 164*16kB (UME) 59*32kB (UME) 19*64kB (ME) 5*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 26992kB [ 2747.161227] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2747.175101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2747.175862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2747.184532] Call Trace: [ 2747.184555] dump_stack+0x1fc/0x2ef [ 2747.184571] dump_header+0x15d/0xc3f [ 2747.184587] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2747.184599] ? ___ratelimit+0x319/0x590 [ 2747.184615] oom_kill_process.cold+0x10/0x692 [ 2747.184631] ? check_preemption_disabled+0x41/0x280 [ 2747.184651] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2747.201538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2747.203443] out_of_memory+0x1072/0x1390 [ 2747.208520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2747.212482] ? oom_killer_disable+0x270/0x270 [ 2747.212499] ? mutex_trylock+0x15f/0x1a0 [ 2747.212514] __alloc_pages_nodemask+0x23a2/0x2890 [ 2747.212534] ? find_get_entry+0x4cd/0x8a0 [ 2747.212557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2747.212594] alloc_pages_current+0x193/0x2a0 [ 2747.224820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2747.227338] filemap_fault+0x146e/0x2180 [ 2747.245767] 104337 total pagecache pages [ 2747.248769] ext4_filemap_fault+0x84/0xb0 [ 2747.254801] 0 pages in swap cache [ 2747.257272] __do_fault+0x10b/0x4b0 [ 2747.268309] Swap cache stats: add 0, delete 0, find 0/0 [ 2747.271073] __handle_mm_fault+0x273b/0x41c0 [ 2747.271090] ? vm_insert_page+0x9c0/0x9c0 [ 2747.271118] ? check_preemption_disabled+0x41/0x280 [ 2747.271135] handle_mm_fault+0x436/0xb10 [ 2747.271151] __do_page_fault+0x68e/0xd60 [ 2747.271169] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2747.271191] ? spurious_fault+0x840/0x840 [ 2747.286137] Free swap = 0kB [ 2747.288203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2747.306194] Total swap = 0kB [ 2747.308780] ? page_fault+0x8/0x30 [ 2747.326278] 2097051 pages RAM [ 2747.326365] page_fault+0x1e/0x30 [ 2747.346266] 0 pages HighMem/MovableOnly [ 2747.347369] RIP: 0033:0x46b583 [ 2747.366170] 369649 pages reserved [ 2747.367738] Code: Bad RIP value. [ 2747.372722] 0 pages cma reserved [ 2747.374525] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2747.383228] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2747.391192] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2747.398460] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2747.405725] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2747.412989] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2747.422967] in:imklog: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 2747.441743] in:imklog cpuset=/ mems_allowed=0-1 [ 2747.446448] CPU: 0 PID: 1901 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2747.453805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2747.463151] Call Trace: [ 2747.465751] dump_stack+0x1fc/0x2ef [ 2747.469386] warn_alloc.cold+0x7b/0x18f [ 2747.473371] ? zone_watermark_ok_safe+0x260/0x260 [ 2747.478213] ? usleep_range+0x170/0x170 [ 2747.482193] ? mark_held_locks+0xa6/0xf0 [ 2747.486251] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2747.491356] ? collect_expired_timers+0x2a0/0x2a0 [ 2747.496212] __alloc_pages_nodemask+0x232f/0x2890 [ 2747.501070] ? find_get_entry+0x4cd/0x8a0 [ 2747.505232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2747.510100] alloc_pages_current+0x193/0x2a0 [ 2747.514508] filemap_fault+0x146e/0x2180 [ 2747.518579] ext4_filemap_fault+0x84/0xb0 [ 2747.522727] __do_fault+0x10b/0x4b0 [ 2747.526357] __handle_mm_fault+0x273b/0x41c0 [ 2747.530771] ? vm_insert_page+0x9c0/0x9c0 [ 2747.534915] ? lock_downgrade+0x720/0x720 [ 2747.539070] ? sync_mm_rss+0x97/0x1a0 [ 2747.542873] handle_mm_fault+0x436/0xb10 [ 2747.546940] __do_page_fault+0x68e/0xd60 [ 2747.551005] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2747.556022] ? spurious_fault+0x840/0x840 [ 2747.560174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2747.565021] ? page_fault+0x8/0x30 [ 2747.568561] page_fault+0x1e/0x30 [ 2747.572010] RIP: 0033:0x7f514c2c922d [ 2747.575722] Code: Bad RIP value. [ 2747.579080] RSP: 002b:00007f5149c65580 EFLAGS: 00010293 [ 2747.584438] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 00007f514c2c922d [ 2747.591707] RDX: 0000000000001fa0 RSI: 00007f5149c65da0 RDI: 0000000000000004 [ 2747.598971] RBP: 000055619edcb9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2747.602808] Mem-Info: [ 2747.606230] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f5149c65da0 [ 2747.606241] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f5149c65ddd [ 2747.608660] active_anon:27627 inactive_anon:90085 isolated_anon:0 [ 2747.608660] active_file:18 inactive_file:16 isolated_file:0 [ 2747.608660] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2747.608660] slab_reclaimable:13630 slab_unreclaimable:117713 [ 2747.608660] mapped:22131 shmem:104303 pagetables:561 bounce:0 [ 2747.608660] free:61888 free_pcp:696 free_cma:0 [ 2747.658781] Node 0 active_anon:108476kB inactive_anon:155984kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2747.692045] Node 1 active_anon:2032kB inactive_anon:204356kB active_file:48kB inactive_file:2444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2756kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2747.702606] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2747.724304] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2747.757949] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2747.759353] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2747.769272] Node 0 DMA32 free:18108kB min:35996kB low:44992kB high:53988kB active_anon:108476kB inactive_anon:152368kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2080kB bounce:0kB free_pcp:1348kB local_pcp:292kB free_cma:0kB [ 2747.784834] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2747.803294] lowmem_reserve[]: 0 0 1 1 1 [ 2747.808738] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2747.840535] lowmem_reserve[]: 0 0 0 0 0 [ 2747.846831] Node 1 Normal free:353700kB min:53876kB low:67344kB high:80812kB active_anon:2016kB inactive_anon:204356kB active_file:52kB inactive_file:7180kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:164kB bounce:0kB free_pcp:2700kB local_pcp:1344kB free_cma:0kB [ 2747.873374] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2747.883187] lowmem_reserve[]: 0 0 0 0 0 [ 2747.883209] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2747.907328] Mem-Info: [ 2747.909927] active_anon:27611 inactive_anon:90085 isolated_anon:0 [ 2747.909927] active_file:19 inactive_file:1850 isolated_file:0 [ 2747.909927] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2747.909927] slab_reclaimable:13629 slab_unreclaimable:118384 [ 2747.909927] mapped:23511 shmem:104303 pagetables:556 bounce:0 [ 2747.909927] free:104219 free_pcp:1093 free_cma:0 [ 2747.910424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2747.949714] Node 0 DMA32: 1352*4kB (UME) 717*8kB (UME) 294*16kB (UME) 88*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19368kB [ 2747.969824] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2747.984855] Node 1 Normal: 24*4kB (UE) 9*8kB (UME) 106*16kB (UME) 59*32kB (UME) 56*64kB (UME) 63*128kB (UM) 31*256kB (UM) 31*512kB (UM) 33*1024kB (UME) 23*2048kB (UM) 70*4096kB (U) = 406824kB [ 2748.007323] Node 0 active_anon:108428kB inactive_anon:155984kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2748.020454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2748.049762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2748.058617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2748.073918] Node 1 active_anon:2016kB inactive_anon:204356kB active_file:52kB inactive_file:7380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7076kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2748.084295] device veth0_vlan entered promiscuous mode [ 2748.128151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2748.130501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2748.137153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2748.150537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2748.174529] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2748.176144] device veth1_vlan entered promiscuous mode [ 2748.219881] 106228 total pagecache pages [ 2748.223972] 0 pages in swap cache [ 2748.227430] Swap cache stats: add 0, delete 0, find 0/0 [ 2748.232879] Free swap = 0kB [ 2748.235899] Total swap = 0kB [ 2748.238928] 2097051 pages RAM [ 2748.258014] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2748.259810] 0 pages HighMem/MovableOnly [ 2748.268207] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2748.279112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2748.279752] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2748.289438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2748.295909] 369649 pages reserved [ 2748.302666] device veth0_macvtap entered promiscuous mode [ 2748.309295] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2748.309770] 0 pages cma reserved [ 2748.326871] device veth1_macvtap entered promiscuous mode [ 2748.329744] Node 0 DMA32 free:31208kB min:35996kB low:44992kB high:53988kB active_anon:108428kB inactive_anon:152368kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2060kB bounce:0kB free_pcp:1684kB local_pcp:292kB free_cma:0kB [ 2748.336829] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2748.379360] Killed process 1112 (syz-executor.0) total-vm:48512kB, anon-rss:428kB, file-rss:4kB, shmem-rss:0kB [ 2748.390730] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2748.395677] oom_reaper: reaped process 1112 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2748.409468] lowmem_reserve[]: 0 0 1 1 1 [ 2748.415201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2748.440063] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2748.442603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2748.492574] lowmem_reserve[]: 0 0 0 0 0 [ 2748.496590] Node 1 Normal free:650928kB min:53876kB low:67344kB high:80812kB active_anon:2016kB inactive_anon:204356kB active_file:52kB inactive_file:8180kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:164kB bounce:0kB free_pcp:2836kB local_pcp:1428kB free_cma:0kB [ 2748.502382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.532808] lowmem_reserve[]: 0 0 0 0 0 [ 2748.545829] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2748.570236] Node 0 DMA32: 1301*4kB (UME) 2293*8kB (UME) 600*16kB (UME) 209*32kB (UME) 73*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44636kB [ 2748.579740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.591848] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2748.609019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.610636] Node 1 Normal: 29*4kB (UE) 13*8kB (UME) 57*16kB (UME) 98*32kB (UME) 178*64kB (UME) 216*128kB (UM) 118*256kB (UM) 74*512kB (UM) 64*1024kB (UME) 39*2048kB (UM) 114*4096kB (U) = 723756kB [ 2748.629665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.689671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.699449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.715263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.720932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2748.739559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2748.739667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.748996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2748.775864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2748.779663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.794215] 107008 total pagecache pages [ 2748.794227] 0 pages in swap cache [ 2748.808449] Swap cache stats: add 0, delete 0, find 0/0 [ 2748.814994] Free swap = 0kB [ 2748.818637] Total swap = 0kB [ 2748.819664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.827313] 2097051 pages RAM [ 2748.834303] 0 pages HighMem/MovableOnly [ 2748.839073] 369649 pages reserved [ 2748.841323] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2748.848076] 0 pages cma reserved [ 2748.849485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2748.853704] in:imklog invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 2748.909605] in:imklog cpuset=/ mems_allowed=0-1 [ 2748.914774] CPU: 1 PID: 1901 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2748.922148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2748.931499] Call Trace: [ 2748.934095] dump_stack+0x1fc/0x2ef [ 2748.937733] dump_header+0x15d/0xc3f [ 2748.941456] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2748.946561] ? ___ratelimit+0x319/0x590 [ 2748.950542] oom_kill_process.cold+0x10/0x692 [ 2748.955044] ? check_preemption_disabled+0x41/0x280 [ 2748.960067] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2748.965437] out_of_memory+0x1072/0x1390 [ 2748.969509] ? lock_acquire+0x170/0x3c0 [ 2748.973487] ? oom_killer_disable+0x270/0x270 [ 2748.977986] ? mutex_trylock+0x15f/0x1a0 [ 2748.982054] pagefault_out_of_memory+0x102/0x120 [ 2748.986814] ? out_of_memory+0x1390/0x1390 [ 2748.991059] ? lock_downgrade+0x720/0x720 [ 2748.995215] ? sync_mm_rss+0x97/0x1a0 [ 2748.999021] mm_fault_error+0x106/0x390 [ 2749.003003] __do_page_fault+0xc34/0xd60 [ 2749.007074] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2749.012096] ? spurious_fault+0x840/0x840 [ 2749.016248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2749.021095] ? page_fault+0x8/0x30 [ 2749.024635] page_fault+0x1e/0x30 [ 2749.028085] RIP: 0033:0x7f514c2c922d [ 2749.031798] Code: Bad RIP value. [ 2749.035160] RSP: 002b:00007f5149c65580 EFLAGS: 00010293 [ 2749.040522] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 00007f514c2c922d [ 2749.047794] RDX: 0000000000001fa0 RSI: 00007f5149c65da0 RDI: 0000000000000004 [ 2749.055061] RBP: 000055619edcb9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2749.062325] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f5149c65da0 [ 2749.069594] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f5149c65ddd [ 2749.080169] Mem-Info: [ 2749.082618] active_anon:27509 inactive_anon:90082 isolated_anon:0 [ 2749.082618] active_file:579 inactive_file:2448 isolated_file:0 [ 2749.082618] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2749.082618] slab_reclaimable:13598 slab_unreclaimable:118108 [ 2749.082618] mapped:20703 shmem:104300 pagetables:564 bounce:0 [ 2749.082618] free:258527 free_pcp:1194 free_cma:0 [ 2749.116474] Node 0 active_anon:107716kB inactive_anon:155972kB active_file:704kB inactive_file:2036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74352kB dirty:0kB writeback:0kB shmem:211568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2749.144615] Node 1 active_anon:2320kB inactive_anon:204356kB active_file:1612kB inactive_file:7856kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8560kB dirty:0kB writeback:0kB shmem:205632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2749.177223] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2749.208308] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2749.213512] Node 0 DMA32 free:88904kB min:35996kB low:44992kB high:53988kB active_anon:108016kB inactive_anon:152356kB active_file:704kB inactive_file:2836kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2008kB bounce:0kB free_pcp:1596kB local_pcp:1444kB free_cma:0kB [ 2749.249276] lowmem_reserve[]: 0 0 1 1 1 [ 2749.253535] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2749.314420] lowmem_reserve[]: 0 0 0 0 0 [ 2749.318417] Node 1 Normal free:933600kB min:53876kB low:67344kB high:80812kB active_anon:2320kB inactive_anon:204356kB active_file:1612kB inactive_file:7856kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:248kB bounce:0kB free_pcp:2784kB local_pcp:1484kB free_cma:0kB [ 2749.393635] lowmem_reserve[]: 0 0 0 0 0 [ 2749.397744] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 2749.439552] Node 0 DMA32: 1192*4kB (UME) 3010*8kB (UME) 759*16kB (UME) 262*32kB (UME) 126*64kB (UME) 12*128kB (UM) 4*256kB (U) 42*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 89696kB [ 2749.468119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2749.469195] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2749.484376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2749.487907] Node 1 Normal: 96*4kB (UME) 127*8kB (UME) 117*16kB (UME) 185*32kB (UME) 253*64kB (UME) 292*128kB (UM) 156*256kB (UM) 107*512kB (UM) 82*1024kB (UME) 56*2048kB (UM) 141*4096kB (U) = 933672kB [ 2749.510453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2749.516663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2749.518579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2749.528502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2749.543440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2749.558574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2749.569989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2749.578573] 107674 total pagecache pages [ 2749.583489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2749.594170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2749.604387] 0 pages in swap cache [ 2749.607847] Swap cache stats: add 0, delete 0, find 0/0 [ 2749.615058] Free swap = 0kB [ 2749.618083] Total swap = 0kB [ 2749.619794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2749.622221] 2097051 pages RAM [ 2749.633714] 0 pages HighMem/MovableOnly [ 2749.637682] 369649 pages reserved [ 2749.642569] 0 pages cma reserved [ 2749.645943] Out of memory (oom_kill_allocating_task): Kill process 1901 (in:imklog) score 0 or sacrifice child [ 2749.653888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2749.657232] Killed process 1901 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2749.678970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2749.689841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2749.706204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2749.715927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2749.726772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2749.737907] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2749.745463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2749.755755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2749.764790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2750.980986] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2750.995045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2751.002473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2751.024801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2751.237407] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2751.247317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2751.260047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2751.267475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:50:00 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}], 0x7, 0x0) 06:50:00 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:50:00 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xa2800) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) 06:50:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x43564548}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) [ 2753.023505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2753.042574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2753.056256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2753.063847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2753.073352] device bridge_slave_1 left promiscuous mode [ 2753.078910] bridge0: port 2(bridge_slave_1) entered disabled state [ 2753.087246] device bridge_slave_0 left promiscuous mode [ 2753.093419] bridge0: port 1(bridge_slave_0) entered disabled state [ 2753.104267] device veth1_macvtap left promiscuous mode [ 2753.109937] device veth0_macvtap left promiscuous mode [ 2753.115268] device veth1_vlan left promiscuous mode [ 2753.120893] device veth0_vlan left promiscuous mode 06:50:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 64) syz_open_dev$vim2m(0x0, 0x8b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:50:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:50:02 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:50:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xa2800) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xa2800) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) 06:50:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) 06:50:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x3, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:50:02 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 06:50:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x6, 0x9, 0x8000, 0x80000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x4, 0x0, 0xbb}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:50:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x1, @sliced={0x5, [0x9, 0xff, 0x4, 0x401, 0x5, 0x8000, 0x0, 0x8, 0x8, 0x9, 0x3200, 0x8, 0x4907, 0x3, 0x5, 0x1001, 0x9, 0x5, 0x7, 0x100, 0x0, 0x7, 0xe0, 0x25, 0x8, 0x5, 0x89d, 0x1, 0xcd85, 0xff, 0x80, 0x8, 0x5, 0x5, 0x80, 0x101, 0xf1c4, 0x0, 0x0, 0x9, 0x5, 0x2, 0x4, 0x1, 0x8, 0x4, 0xffff, 0x1], 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@userptr={0x8, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x1, 0x2, 0xff, 0x1f, 0x3f, 0x1, "1261f0bf"}, 0x0, 0x2, {&(0x7f0000000340)}, 0x180000}) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x3) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x0, @raw_data="cbe082a10e1583791102336ec614817085e115bfb32658ff48e574d7067a4cd1d13e2c04df9f79d3f1a32ee5bd51005a22a28ecc4433f3ba27ed15372e9d01fdf6a71d34d9093793fac732ac7337497e0f7bf6e176dcca117bc17cc90d9199bbafb7cabaf6dabad788351a7724129912afcb0edaf6ceebeb9b7e682bb2df77174e19ce3c440aa19be7f62cf797eaa8b050a8fcad8f92c7816069312f70aa9f41e821a6002b0f4719dfb35a017de276475f57fcdabe2800aac365b2b3f01ee74f9c821b9b97ce2390"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x23, 0x1, 0x4, 0x0, 0x1}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) 06:50:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x6, 0x9, 0x8000, 0x80000}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x4, 0x0, 0xbb}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:50:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) [ 2755.718555] Bluetooth: hci3: command 0x0409 tx timeout [ 2757.238496] Bluetooth: hci0: command 0x0406 tx timeout [ 2757.798317] Bluetooth: hci3: command 0x041b tx timeout [ 2759.877918] Bluetooth: hci3: command 0x040f tx timeout [ 2761.020627] device hsr_slave_1 left promiscuous mode [ 2761.036615] device hsr_slave_0 left promiscuous mode [ 2761.060571] team0 (unregistering): Port device team_slave_1 removed [ 2761.078252] team0 (unregistering): Port device team_slave_0 removed [ 2761.095278] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2761.106792] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2761.178390] bond0 (unregistering): Released all slaves [ 2761.310682] IPVS: ftp: loaded support on port[0] = 21 [ 2761.727255] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2761.744895] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2761.775550] CPU: 0 PID: 2258 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2761.783364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2761.792710] Call Trace: [ 2761.795295] dump_stack+0x1fc/0x2ef [ 2761.798927] dump_header+0x15d/0xc3f [ 2761.802646] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2761.807746] ? ___ratelimit+0x319/0x590 [ 2761.811723] oom_kill_process.cold+0x10/0x692 [ 2761.816222] ? check_preemption_disabled+0x41/0x280 [ 2761.821254] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2761.826531] out_of_memory+0x1072/0x1390 [ 2761.830598] ? oom_killer_disable+0x270/0x270 [ 2761.835096] ? mutex_trylock+0x15f/0x1a0 [ 2761.839174] __alloc_pages_nodemask+0x23a2/0x2890 [ 2761.844070] ? find_get_entry+0x4cd/0x8a0 [ 2761.848240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2761.853106] alloc_pages_current+0x193/0x2a0 [ 2761.857513] filemap_fault+0x146e/0x2180 [ 2761.861667] ext4_filemap_fault+0x84/0xb0 [ 2761.865810] __do_fault+0x10b/0x4b0 [ 2761.869432] __handle_mm_fault+0x273b/0x41c0 [ 2761.873841] ? vm_insert_page+0x9c0/0x9c0 [ 2761.877997] ? check_preemption_disabled+0x41/0x280 [ 2761.883015] handle_mm_fault+0x436/0xb10 [ 2761.887076] __do_page_fault+0x68e/0xd60 [ 2761.891137] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2761.896157] ? spurious_fault+0x840/0x840 [ 2761.900333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2761.905180] page_fault+0x1e/0x30 [ 2761.908628] RIP: 0010:strncpy_from_user+0x1ea/0x350 [ 2761.913638] Code: 03 da fd 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 98 04 da fd 48 83 fd 07 0f 86 29 01 00 00 e8 f9 02 da fd 45 31 ff <4d> 8b 64 1d 00 31 ff 44 89 fe e8 57 04 da fd 45 85 ff 0f 84 61 ff [ 2761.932528] RSP: 0018:ffff888057ca7dd0 EFLAGS: 00050246 [ 2761.937895] RAX: ffff88806ecbc5c0 RBX: 0000000000000000 RCX: ffffffff838881e4 [ 2761.945159] RDX: 0000000000000000 RSI: ffffffff83888277 RDI: 0000000000000007 [ 2761.952449] RBP: 0000000000000fe0 R08: 0000000000000fe0 R09: 0000000000000007 [ 2761.959707] R10: 0000000000000007 R11: 0000000000000000 R12: 00007f1c42672a78 [ 2761.966966] R13: 00007f1c42671a98 R14: ffff8880aa5d6220 R15: 0000000000000000 [ 2761.974248] ? strncpy_from_user+0x154/0x350 [ 2761.978658] ? strncpy_from_user+0x1e7/0x350 [ 2761.983073] getname_flags+0x113/0x590 [ 2761.987396] do_sys_open+0x26c/0x520 [ 2761.991120] ? filp_open+0x70/0x70 [ 2761.994664] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2762.000031] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2762.005059] ? do_syscall_64+0x21/0x620 [ 2762.009032] do_syscall_64+0xf9/0x620 [ 2762.012831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2762.018028] RIP: 0033:0x7f1c425d7284 [ 2762.021733] Code: Bad RIP value. [ 2762.025088] RSP: 002b:00007ffda2e93d80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2762.032787] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f1c425d7284 [ 2762.040048] RDX: 0000000000080001 RSI: 00007f1c42671a98 RDI: 00000000ffffff9c [ 2762.047330] RBP: 00007f1c42671a98 R08: 0000000000000000 R09: 00007ffda2e93d70 [ 2762.054594] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 2762.061853] R13: 00007ffda2e93e20 R14: 0000000000000000 R15: 0000000000000006 [ 2762.079845] Bluetooth: hci3: command 0x0419 tx timeout [ 2762.085659] Mem-Info: [ 2762.091659] active_anon:27862 inactive_anon:90084 isolated_anon:0 [ 2762.091659] active_file:14 inactive_file:14 isolated_file:0 [ 2762.091659] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2762.091659] slab_reclaimable:13686 slab_unreclaimable:115226 [ 2762.091659] mapped:22193 shmem:104303 pagetables:558 bounce:0 [ 2762.091659] free:25065 free_pcp:62 free_cma:0 [ 2762.132244] Node 0 active_anon:109424kB inactive_anon:155980kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2762.167200] Node 1 active_anon:2024kB inactive_anon:204356kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2762.203755] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.237448] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2762.242496] Node 0 DMA32 free:35528kB min:35996kB low:44992kB high:53988kB active_anon:109424kB inactive_anon:152364kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2132kB bounce:0kB free_pcp:272kB local_pcp:248kB free_cma:0kB [ 2762.279005] lowmem_reserve[]: 0 0 1 1 1 [ 2762.305819] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.343241] lowmem_reserve[]: 0 0 0 0 0 [ 2762.350746] Node 1 Normal free:53744kB min:53876kB low:67344kB high:80812kB active_anon:2024kB inactive_anon:204356kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.398413] lowmem_reserve[]: 0 0 0 0 0 [ 2762.402426] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 2762.431033] Node 0 DMA32: 1450*4kB (ME) 874*8kB (ME) 427*16kB (UME) 145*32kB (ME) 24*64kB (UME) 10*128kB (M) 1*256kB (U) 0*512kB 4*1024kB (U) 2*2048kB (M) 0*4096kB = 35528kB [ 2762.451064] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2762.463731] Node 1 Normal: 652*4kB (UME) 482*8kB (UME) 149*16kB (ME) 65*32kB (UME) 19*64kB (ME) 5*128kB (M) 2*256kB (M) 1*512kB (M) 3*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53744kB [ 2762.499323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.525785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.534459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.551418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.560027] 104331 total pagecache pages [ 2762.564069] 0 pages in swap cache [ 2762.571671] Swap cache stats: add 0, delete 0, find 0/0 [ 2762.577022] Free swap = 0kB [ 2762.580797] Total swap = 0kB [ 2762.583816] 2097051 pages RAM [ 2762.587178] 0 pages HighMem/MovableOnly [ 2762.591242] 369649 pages reserved [ 2762.594684] 0 pages cma reserved [ 2762.598106] Out of memory (oom_kill_allocating_task): Kill process 2258 (syz-executor.0) score 0 or sacrifice child [ 2762.608758] Killed process 2258 (syz-executor.0) total-vm:56708kB, anon-rss:448kB, file-rss:13168kB, shmem-rss:0kB [ 2762.619745] oom_reaper: reaped process 2258 (syz-executor.0), now anon-rss:0kB, file-rss:13168kB, shmem-rss:0kB [ 2762.621075] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2762.641519] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2762.655794] CPU: 0 PID: 8079 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2762.663245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2762.672579] Call Trace: [ 2762.675149] dump_stack+0x1fc/0x2ef [ 2762.678758] dump_header+0x15d/0xc3f [ 2762.682453] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2762.687533] ? ___ratelimit+0x319/0x590 [ 2762.691490] oom_kill_process.cold+0x10/0x692 [ 2762.695979] ? check_preemption_disabled+0x41/0x280 [ 2762.701003] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2762.706257] out_of_memory+0x1072/0x1390 [ 2762.710301] ? oom_killer_disable+0x270/0x270 [ 2762.714778] ? mutex_trylock+0x15f/0x1a0 [ 2762.718823] __alloc_pages_nodemask+0x23a2/0x2890 [ 2762.723649] ? find_get_entry+0x4cd/0x8a0 [ 2762.727779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2762.732615] alloc_pages_current+0x193/0x2a0 [ 2762.737003] filemap_fault+0x146e/0x2180 [ 2762.741052] ext4_filemap_fault+0x84/0xb0 [ 2762.745177] __do_fault+0x10b/0x4b0 [ 2762.748783] __handle_mm_fault+0x273b/0x41c0 [ 2762.753173] ? vm_insert_page+0x9c0/0x9c0 [ 2762.757305] ? __fget+0x356/0x510 [ 2762.760751] ? check_preemption_disabled+0x41/0x280 [ 2762.765746] handle_mm_fault+0x436/0xb10 [ 2762.769792] __do_page_fault+0x68e/0xd60 [ 2762.773838] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2762.778830] ? spurious_fault+0x840/0x840 [ 2762.782956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2762.787782] ? page_fault+0x8/0x30 [ 2762.791304] page_fault+0x1e/0x30 [ 2762.794736] RIP: 0033:0x403ace [ 2762.797913] Code: Bad RIP value. [ 2762.801255] RSP: 002b:000000c00022f778 EFLAGS: 00010246 [ 2762.806594] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 2762.813843] RDX: 0000000000000080 RSI: 000000c00022f840 RDI: 0000000000000004 [ 2762.821106] RBP: 000000c00022f7c0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.828356] R10: 0000000000000365 R11: 0000000000000246 R12: 000000c00022f850 [ 2762.835604] R13: 0000000000000001 R14: 000000c0007d8d00 R15: 0000028335fca40c [ 2762.875670] Mem-Info: [ 2762.885672] active_anon:27862 inactive_anon:90084 isolated_anon:0 [ 2762.885672] active_file:14 inactive_file:15 isolated_file:0 [ 2762.885672] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2762.885672] slab_reclaimable:13686 slab_unreclaimable:115226 [ 2762.885672] mapped:22193 shmem:104303 pagetables:558 bounce:0 [ 2762.885672] free:25084 free_pcp:83 free_cma:0 [ 2762.923080] Node 0 active_anon:109424kB inactive_anon:155980kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2762.983437] Node 1 active_anon:2024kB inactive_anon:204356kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2763.122029] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.270969] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2763.276031] Node 0 DMA32 free:35888kB min:35996kB low:44992kB high:53988kB active_anon:109424kB inactive_anon:152364kB active_file:48kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2132kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2763.465481] lowmem_reserve[]: 0 0 1 1 1 [ 2763.495009] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.700095] lowmem_reserve[]: 0 0 0 0 0 [ 2763.721568] Node 1 Normal free:53744kB min:53876kB low:67344kB high:80812kB active_anon:2024kB inactive_anon:204356kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.750073] lowmem_reserve[]: 0 0 0 0 0 [ 2763.754055] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 2763.769282] Node 0 DMA32: 1450*4kB (ME) 919*8kB (UME) 427*16kB (ME) 145*32kB (UME) 25*64kB (UME) 10*128kB (M) 1*256kB (U) 0*512kB 4*1024kB (U) 2*2048kB (M) 0*4096kB = 35952kB [ 2763.785080] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2763.796153] Node 1 Normal: 652*4kB (UME) 482*8kB (UME) 149*16kB (ME) 65*32kB (UME) 19*64kB (ME) 5*128kB (M) 2*256kB (M) 1*512kB (M) 3*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53744kB [ 2763.812896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2763.822965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2763.831647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2763.842303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2763.850905] 104331 total pagecache pages [ 2763.854959] 0 pages in swap cache [ 2763.858435] Swap cache stats: add 0, delete 0, find 0/0 [ 2763.864048] Free swap = 0kB [ 2763.867125] Total swap = 0kB [ 2763.870165] 2097051 pages RAM [ 2763.873296] 0 pages HighMem/MovableOnly [ 2763.877316] 369649 pages reserved [ 2763.880894] 0 pages cma reserved [ 2763.884259] Out of memory (oom_kill_allocating_task): Kill process 8079 (syz-fuzzer) score 0 or sacrifice child [ 2763.894731] Killed process 2257 (syz-executor.0) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2763.905562] oom_reaper: reaped process 2257 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2764.331247] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2764.392621] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2764.416044] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2764.423517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2764.432863] Call Trace: [ 2764.435455] dump_stack+0x1fc/0x2ef [ 2764.439084] dump_header+0x15d/0xc3f [ 2764.442800] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2764.447902] ? ___ratelimit+0x319/0x590 [ 2764.451885] oom_kill_process.cold+0x10/0x692 [ 2764.456383] ? check_preemption_disabled+0x41/0x280 [ 2764.461403] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2764.466683] out_of_memory+0x1072/0x1390 [ 2764.470841] ? oom_killer_disable+0x270/0x270 [ 2764.475439] ? mutex_trylock+0x15f/0x1a0 [ 2764.479508] __alloc_pages_nodemask+0x23a2/0x2890 [ 2764.484539] ? find_get_entry+0x4cd/0x8a0 [ 2764.488694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2764.493570] alloc_pages_current+0x193/0x2a0 [ 2764.497979] filemap_fault+0x146e/0x2180 [ 2764.502088] ext4_filemap_fault+0x84/0xb0 [ 2764.506239] __do_fault+0x10b/0x4b0 [ 2764.509870] __handle_mm_fault+0x273b/0x41c0 [ 2764.514301] ? vm_insert_page+0x9c0/0x9c0 [ 2764.518462] ? check_preemption_disabled+0x41/0x280 [ 2764.523484] handle_mm_fault+0x436/0xb10 [ 2764.527550] __do_page_fault+0x68e/0xd60 [ 2764.531617] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2764.536641] ? spurious_fault+0x840/0x840 [ 2764.540792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2764.545640] ? page_fault+0x8/0x30 [ 2764.549180] page_fault+0x1e/0x30 [ 2764.552648] RIP: 0033:0x46b583 [ 2764.555835] Code: Bad RIP value. [ 2764.559197] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2764.564552] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2764.571815] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2764.579083] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.586351] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2764.593615] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2764.910845] Mem-Info: [ 2764.913434] active_anon:27739 inactive_anon:90084 isolated_anon:0 [ 2764.913434] active_file:33 inactive_file:0 isolated_file:0 [ 2764.913434] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2764.913434] slab_reclaimable:13685 slab_unreclaimable:114936 [ 2764.913434] mapped:18609 shmem:104303 pagetables:532 bounce:0 [ 2764.913434] free:25170 free_pcp:0 free_cma:0 [ 2765.089636] Node 0 active_anon:108932kB inactive_anon:155980kB active_file:4kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72732kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2765.217330] Node 1 active_anon:2024kB inactive_anon:204356kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2765.266558] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2765.338869] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2765.343925] Node 0 DMA32 free:35948kB min:35996kB low:44992kB high:53988kB active_anon:108932kB inactive_anon:152364kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2028kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2765.515387] lowmem_reserve[]: 0 0 1 1 1 [ 2765.533626] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2765.596248] lowmem_reserve[]: 0 0 0 0 0 [ 2765.600367] Node 1 Normal free:53744kB min:53876kB low:67344kB high:80812kB active_anon:2024kB inactive_anon:204356kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2765.648282] lowmem_reserve[]: 0 0 0 0 0 [ 2765.652296] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 2765.769250] Node 0 DMA32: 1448*4kB (UME) 871*8kB (UME) 423*16kB (ME) 141*32kB (UME) 35*64kB (ME) 10*128kB (M) 2*256kB (U) 0*512kB 4*1024kB (U) 2*2048kB (M) 0*4096kB = 36264kB [ 2765.836695] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2765.887786] Node 1 Normal: 652*4kB (UME) 482*8kB (UME) 149*16kB (ME) 65*32kB (UME) 19*64kB (ME) 5*128kB (M) 2*256kB (M) 1*512kB (M) 3*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53744kB [ 2765.996986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2766.005947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2766.089768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2766.145908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2766.196712] 104329 total pagecache pages [ 2766.200808] 0 pages in swap cache [ 2766.204255] Swap cache stats: add 0, delete 0, find 0/0 [ 2766.268576] Free swap = 0kB [ 2766.271619] Total swap = 0kB [ 2766.274646] 2097051 pages RAM [ 2766.308778] 0 pages HighMem/MovableOnly [ 2766.312769] 369649 pages reserved [ 2766.352984] 0 pages cma reserved [ 2766.356378] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2766.425928] Killed process 1944 (syz-executor.3) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2766.948877] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2766.965230] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2766.970689] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2766.978140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2766.989681] Call Trace: [ 2766.992277] dump_stack+0x1fc/0x2ef [ 2766.996079] dump_header+0x15d/0xc3f [ 2766.999831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2767.004956] ? ___ratelimit+0x319/0x590 [ 2767.008930] oom_kill_process.cold+0x10/0x692 [ 2767.013425] ? check_preemption_disabled+0x41/0x280 [ 2767.018435] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2767.023799] out_of_memory+0x1072/0x1390 [ 2767.027864] ? oom_killer_disable+0x270/0x270 [ 2767.032351] ? mutex_trylock+0x15f/0x1a0 [ 2767.036407] __alloc_pages_nodemask+0x23a2/0x2890 [ 2767.042520] ? find_get_entry+0x4cd/0x8a0 [ 2767.046839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2767.053092] alloc_pages_current+0x193/0x2a0 [ 2767.057932] filemap_fault+0x146e/0x2180 [ 2767.062006] ext4_filemap_fault+0x84/0xb0 [ 2767.066163] __do_fault+0x10b/0x4b0 [ 2767.069776] ? do_raw_spin_unlock+0x171/0x230 [ 2767.074262] __handle_mm_fault+0x273b/0x41c0 [ 2767.078662] ? vm_insert_page+0x9c0/0x9c0 [ 2767.082796] ? __fget+0x356/0x510 [ 2767.086247] ? check_preemption_disabled+0x41/0x280 [ 2767.091254] handle_mm_fault+0x436/0xb10 [ 2767.095311] __do_page_fault+0x68e/0xd60 [ 2767.099663] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2767.104763] ? spurious_fault+0x840/0x840 [ 2767.108903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2767.113760] ? page_fault+0x8/0x30 [ 2767.117287] page_fault+0x1e/0x30 [ 2767.120727] RIP: 0033:0x40c040 [ 2767.123912] Code: Bad RIP value. [ 2767.127260] RSP: 002b:000000c000067ee8 EFLAGS: 00010246 [ 2767.132607] RAX: 0000000001ef20f8 RBX: 000000c000040000 RCX: 000002844bb1c8e6 [ 2767.140916] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000028443a4e101 [ 2767.149367] RBP: 000000c000067f20 R08: 000000000007dbf6 R09: 0000000000000000 [ 2767.156812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000c000067930 [ 2767.164299] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2767.314400] Mem-Info: [ 2767.335123] active_anon:27608 inactive_anon:90084 isolated_anon:0 [ 2767.335123] active_file:31 inactive_file:114 isolated_file:0 [ 2767.335123] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2767.335123] slab_reclaimable:13685 slab_unreclaimable:114159 [ 2767.335123] mapped:15026 shmem:104303 pagetables:507 bounce:0 [ 2767.335123] free:25275 free_pcp:111 free_cma:0 [ 2767.394477] Node 0 active_anon:108408kB inactive_anon:155980kB active_file:136kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58400kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.424807] Node 1 active_anon:2024kB inactive_anon:204356kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2767.542636] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2767.668946] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2767.674017] Node 0 DMA32 free:35552kB min:35996kB low:44992kB high:53988kB active_anon:108408kB inactive_anon:152364kB active_file:336kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1928kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2767.844895] lowmem_reserve[]: 0 0 1 1 1 [ 2767.888575] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.067953] lowmem_reserve[]: 0 0 0 0 0 [ 2768.071973] Node 1 Normal free:53744kB min:53876kB low:67344kB high:80812kB active_anon:2024kB inactive_anon:204356kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.172510] lowmem_reserve[]: 0 0 0 0 0 [ 2768.180751] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 2768.301775] Node 0 DMA32: 1456*4kB (ME) 863*8kB (ME) 423*16kB (ME) 154*32kB (ME) 35*64kB (ME) 11*128kB (UM) 1*256kB (U) 1*512kB (U) 3*1024kB (U) 2*2048kB (M) 0*4096kB = 36008kB [ 2768.401678] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2768.479557] Node 1 Normal: 652*4kB (UME) 482*8kB (UME) 149*16kB (ME) 65*32kB (UME) 19*64kB (ME) 5*128kB (M) 2*256kB (M) 1*512kB (M) 3*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53744kB [ 2768.504463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.566305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.574912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.660972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.711516] 104340 total pagecache pages [ 2768.715612] 0 pages in swap cache [ 2768.767758] Swap cache stats: add 0, delete 0, find 0/0 [ 2768.773155] Free swap = 0kB [ 2768.818703] Total swap = 0kB [ 2768.821770] 2097051 pages RAM [ 2768.824883] 0 pages HighMem/MovableOnly [ 2768.879343] 369649 pages reserved [ 2768.882817] 0 pages cma reserved [ 2768.920580] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2768.984237] Killed process 31773 (syz-executor.2) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2769.715787] oom_reaper: reaped process 2283 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2769.743050] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2769.776001] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2769.780799] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2769.788243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2769.797614] Call Trace: [ 2769.800204] dump_stack+0x1fc/0x2ef [ 2769.803831] dump_header+0x15d/0xc3f [ 2769.807548] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2769.812652] ? ___ratelimit+0x319/0x590 [ 2769.816663] oom_kill_process.cold+0x10/0x692 [ 2769.821248] ? check_preemption_disabled+0x41/0x280 [ 2769.826268] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2769.831554] out_of_memory+0x1072/0x1390 [ 2769.835638] ? oom_killer_disable+0x270/0x270 [ 2769.840137] ? mutex_trylock+0x15f/0x1a0 [ 2769.844205] __alloc_pages_nodemask+0x23a2/0x2890 [ 2769.849055] ? find_get_entry+0x4cd/0x8a0 [ 2769.853213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2769.858081] alloc_pages_current+0x193/0x2a0 [ 2769.862494] filemap_fault+0x146e/0x2180 [ 2769.866566] ext4_filemap_fault+0x84/0xb0 [ 2769.870714] __do_fault+0x10b/0x4b0 [ 2769.874345] __handle_mm_fault+0x273b/0x41c0 [ 2769.878765] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2769.883863] ? vm_insert_page+0x9c0/0x9c0 [ 2769.888026] ? check_preemption_disabled+0x41/0x280 [ 2769.893044] handle_mm_fault+0x436/0xb10 [ 2769.897107] __do_page_fault+0x68e/0xd60 [ 2769.901172] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2769.906192] ? spurious_fault+0x840/0x840 [ 2769.910341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2769.915188] ? page_fault+0x8/0x30 [ 2769.918730] page_fault+0x1e/0x30 [ 2769.922205] RIP: 0033:0x46af7d [ 2769.925469] Code: Bad RIP value. [ 2769.928836] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2769.934179] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2769.941429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2769.948681] RBP: 000000c000067f20 R08: 000000000007dbf8 R09: 0000000000000000 [ 2769.955978] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 2769.963236] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2769.973242] Mem-Info: [ 2769.975683] active_anon:27476 inactive_anon:90084 isolated_anon:0 [ 2769.975683] active_file:6 inactive_file:26 isolated_file:0 [ 2769.975683] unevictable:0 dirty:7 writeback:10 unstable:0 [ 2769.975683] slab_reclaimable:13685 slab_unreclaimable:113607 [ 2769.975683] mapped:11458 shmem:104303 pagetables:493 bounce:0 [ 2769.975683] free:13873 free_pcp:437 free_cma:0 [ 2770.015751] Node 0 active_anon:107884kB inactive_anon:155980kB active_file:64kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44128kB dirty:24kB writeback:40kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.015967] syz-executor.5: vmalloc: allocation failure, allocated 1062989824 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2770.052794] Node 1 active_anon:2020kB inactive_anon:204356kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:4kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.068804] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2770.096030] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.104111] CPU: 0 PID: 2283 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2770.130326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2770.131778] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2770.139681] Call Trace: [ 2770.139705] dump_stack+0x1fc/0x2ef [ 2770.139721] warn_alloc.cold+0x7b/0x18f [ 2770.139737] ? zone_watermark_ok_safe+0x260/0x260 [ 2770.139750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2770.139768] ? retint_kernel+0x2d/0x2d [ 2770.139793] __vmalloc_area_node+0x4fd/0x780 [ 2770.151836] Node 0 DMA32 free:17680kB min:35996kB low:44992kB high:53988kB active_anon:107820kB inactive_anon:152364kB active_file:68kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1820kB bounce:0kB free_pcp:1280kB local_pcp:1048kB free_cma:0kB [ 2770.154943] ? __vmalloc_node_range+0x180/0x180 [ 2770.161864] lowmem_reserve[]: 0 0 1 1 1 [ 2770.164503] ? _raw_spin_unlock+0x29/0x40 [ 2770.164518] ? __get_vm_area_node+0x2e2/0x3a0 [ 2770.164534] __vmalloc_node_range+0xed/0x180 [ 2770.164548] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2770.164562] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2770.164575] vmalloc_user+0x70/0xe0 [ 2770.164588] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2770.164600] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2770.164614] __vb2_queue_alloc+0x472/0xe60 [ 2770.164640] vb2_core_create_bufs+0x273/0x7e0 [ 2770.164658] ? __vb2_queue_free+0x870/0x870 [ 2770.164672] ? __video_do_ioctl+0x632/0xcd0 [ 2770.164690] ? pi_state_update_owner+0x450/0x450 [ 2770.164704] ? __mutex_lock+0x368/0x1190 [ 2770.164721] vb2_create_bufs+0x332/0x620 [ 2770.164738] ? mark_held_locks+0xf0/0xf0 [ 2770.164751] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2770.164763] ? futex_wait_queue_me+0x404/0x5e0 [ 2770.164777] ? pi_state_update_owner+0x450/0x450 [ 2770.164790] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2770.164806] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2770.164824] v4l_create_bufs+0xb2/0x160 [ 2770.164841] __video_do_ioctl+0x49a/0xcd0 [ 2770.164861] ? v4l_querycap+0x340/0x340 [ 2770.164880] ? __might_fault+0x192/0x1d0 [ 2770.164896] ? v4l_querycap+0x340/0x340 [ 2770.164911] video_usercopy+0x13f/0xfa0 [ 2770.164932] ? v4l_enumstd+0x60/0x60 [ 2770.164946] ? do_futex+0x171/0x1880 [ 2770.164960] ? mark_held_locks+0xf0/0xf0 [ 2770.164977] ? debug_check_no_obj_freed+0x201/0x490 [ 2770.164999] ? video_usercopy+0xfa0/0xfa0 [ 2770.165011] v4l2_ioctl+0x147/0x1a0 [ 2770.165023] ? video_devdata+0xa0/0xa0 [ 2770.165039] do_vfs_ioctl+0xcdb/0x12e0 [ 2770.165053] ? lock_downgrade+0x720/0x720 [ 2770.165069] ? check_preemption_disabled+0x41/0x280 [ 2770.165082] ? ioctl_preallocate+0x200/0x200 [ 2770.165099] ? __fget+0x356/0x510 [ 2770.165115] ? do_dup2+0x450/0x450 [ 2770.165128] ? __se_sys_futex+0x298/0x3b0 [ 2770.165149] ksys_ioctl+0x9b/0xc0 [ 2770.165164] __x64_sys_ioctl+0x6f/0xb0 [ 2770.165177] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2770.165190] do_syscall_64+0xf9/0x620 [ 2770.165208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2770.165219] RIP: 0033:0x7ff26a4950f9 [ 2770.165231] Code: Bad RIP value. [ 2770.165239] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.165251] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2770.165259] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2770.165266] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2770.165273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2770.165281] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2770.179581] Mem-Info: [ 2770.212574] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.249596] active_anon:27460 inactive_anon:90084 isolated_anon:0 [ 2770.249596] active_file:18 inactive_file:16 isolated_file:0 [ 2770.249596] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2770.249596] slab_reclaimable:13685 slab_unreclaimable:113610 [ 2770.249596] mapped:11441 shmem:104303 pagetables:480 bounce:0 [ 2770.249596] free:13835 free_pcp:435 free_cma:0 [ 2770.273742] lowmem_reserve[]: 0 0 0 0 0 [ 2770.332716] Node 0 active_anon:107820kB inactive_anon:155980kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44060kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.348526] Node 1 Normal free:26792kB min:53876kB low:67344kB high:80812kB active_anon:2020kB inactive_anon:204356kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:464kB local_pcp:216kB free_cma:0kB [ 2770.379585] Node 1 active_anon:2020kB inactive_anon:204356kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2770.385985] lowmem_reserve[]: 0 0 0 0 0 [ 2770.424055] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.435131] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2770.481370] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2770.502858] Node 0 DMA32: 1012*4kB (UME) 616*8kB (UME) 280*16kB (UME) 105*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17712kB [ 2770.624894] Node 0 DMA32 free:17680kB min:35996kB low:44992kB high:53988kB active_anon:107820kB inactive_anon:152364kB active_file:68kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1820kB bounce:0kB free_pcp:1240kB local_pcp:228kB free_cma:0kB [ 2770.628412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2770.674202] lowmem_reserve[]: 0 0 1 1 1 [ 2770.699566] Node 1 Normal: 652*4kB (UME) 481*8kB (ME) 149*16kB (ME) 65*32kB (UME) 20*64kB (UME) 6*128kB (UM) 2*256kB (M) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 26792kB [ 2770.727986] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2770.742292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2770.756606] lowmem_reserve[]: 0 0 0 0 0 [ 2770.786673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2770.795259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2770.796667] Node 1 Normal free:26792kB min:53876kB low:67344kB high:80812kB active_anon:2020kB inactive_anon:204356kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:464kB local_pcp:248kB free_cma:0kB [ 2770.816115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2770.854812] 104337 total pagecache pages [ 2770.862416] 0 pages in swap cache [ 2770.879482] Swap cache stats: add 0, delete 0, find 0/0 [ 2770.892956] Free swap = 0kB [ 2770.902888] Total swap = 0kB [ 2770.912805] 2097051 pages RAM [ 2770.913353] lowmem_reserve[]: 0 0 0 0 0 [ 2770.922114] 0 pages HighMem/MovableOnly [ 2770.922214] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2770.932051] 369649 pages reserved [ 2770.957810] 0 pages cma reserved [ 2770.961194] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2770.983821] Killed process 682 (syz-executor.4) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2770.994173] oom_reaper: reaped process 682 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2770.995177] Node 0 DMA32: 1012*4kB (UME) 616*8kB (UME) 280*16kB (UME) 105*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17712kB [ 2771.019455] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2771.044356] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2771.070321] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2771.077785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2771.085763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2771.087131] Call Trace: [ 2771.097803] Node 1 Normal: 652*4kB (UME) 481*8kB (ME) 149*16kB (ME) 65*32kB (UME) 20*64kB (UME) 6*128kB (UM) 2*256kB (M) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 26792kB [ 2771.100348] dump_stack+0x1fc/0x2ef [ 2771.120413] dump_header+0x15d/0xc3f [ 2771.124128] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2771.129327] ? ___ratelimit+0x319/0x590 [ 2771.133304] oom_kill_process.cold+0x10/0x692 [ 2771.135773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.137816] ? check_preemption_disabled+0x41/0x280 [ 2771.151645] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2771.156928] out_of_memory+0x1072/0x1390 [ 2771.160999] ? oom_killer_disable+0x270/0x270 [ 2771.165508] ? mutex_trylock+0x15f/0x1a0 [ 2771.165751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.169580] __alloc_pages_nodemask+0x23a2/0x2890 [ 2771.182955] ? find_get_entry+0x4cd/0x8a0 [ 2771.183383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.187106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.187143] alloc_pages_current+0x193/0x2a0 [ 2771.196026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.200783] filemap_fault+0x146e/0x2180 [ 2771.205171] 104337 total pagecache pages [ 2771.213738] ext4_filemap_fault+0x84/0xb0 [ 2771.213759] __do_fault+0x10b/0x4b0 [ 2771.217813] 0 pages in swap cache [ 2771.221837] __handle_mm_fault+0x273b/0x41c0 [ 2771.225984] Swap cache stats: add 0, delete 0, find 0/0 [ 2771.229582] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2771.233019] Free swap = 0kB [ 2771.237427] ? vm_insert_page+0x9c0/0x9c0 [ 2771.237452] ? check_preemption_disabled+0x41/0x280 [ 2771.237468] handle_mm_fault+0x436/0xb10 [ 2771.237489] __do_page_fault+0x68e/0xd60 [ 2771.242826] Total swap = 0kB [ 2771.247919] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2771.247933] ? spurious_fault+0x840/0x840 [ 2771.247949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2771.250941] 2097051 pages RAM [ 2771.255075] ? page_fault+0x8/0x30 [ 2771.260090] 0 pages HighMem/MovableOnly [ 2771.264112] page_fault+0x1e/0x30 [ 2771.268160] 369649 pages reserved [ 2771.271144] RIP: 0033:0x46af7d [ 2771.276163] 0 pages cma reserved [ 2771.280276] Code: Bad RIP value. [ 2771.312394] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 2771.317754] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 2771.325020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 2771.332375] RBP: 000000c000067f20 R08: 000000000007dbf8 R09: 0000000000000000 [ 2771.339901] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 2771.347165] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2771.358549] Mem-Info: [ 2771.360987] active_anon:27360 inactive_anon:90084 isolated_anon:0 [ 2771.360987] active_file:30 inactive_file:14 isolated_file:0 [ 2771.360987] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2771.360987] slab_reclaimable:13685 slab_unreclaimable:113622 [ 2771.360987] mapped:7866 shmem:104303 pagetables:480 bounce:0 [ 2771.360987] free:13893 free_pcp:527 free_cma:0 [ 2771.395896] Node 0 active_anon:107420kB inactive_anon:155980kB active_file:120kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29760kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2771.423859] Node 1 active_anon:2020kB inactive_anon:204356kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2771.451022] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.477519] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2771.482556] Node 0 DMA32 free:28512kB min:35996kB low:44992kB high:53988kB active_anon:107420kB inactive_anon:152364kB active_file:124kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7232kB pagetables:1820kB bounce:0kB free_pcp:2748kB local_pcp:1292kB free_cma:0kB [ 2771.513491] lowmem_reserve[]: 0 0 1 1 1 [ 2771.517539] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.543506] lowmem_reserve[]: 0 0 0 0 0 [ 2771.547560] Node 1 Normal free:26792kB min:53876kB low:67344kB high:80812kB active_anon:2020kB inactive_anon:204356kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:100kB bounce:0kB free_pcp:464kB local_pcp:216kB free_cma:0kB [ 2771.579688] lowmem_reserve[]: 0 0 0 0 0 [ 2771.583686] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10868kB [ 2771.614684] Node 0 DMA32: 1130*4kB (UME) 674*8kB (UME) 326*16kB (UME) 143*32kB (UME) 116*64kB (UM) 33*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31352kB [ 2771.645391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2771.681169] Node 1 Normal: 654*4kB (UME) 484*8kB (UME) 150*16kB (UME) 66*32kB (UME) 20*64kB (UME) 7*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 2*4096kB (U) = 27256kB [ 2771.815972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.824838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.847209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.901475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.934255] 104337 total pagecache pages [ 2771.945460] 0 pages in swap cache [ 2771.969700] Swap cache stats: add 0, delete 0, find 0/0 [ 2771.975078] Free swap = 0kB [ 2771.992289] Total swap = 0kB [ 2771.995323] 2097051 pages RAM [ 2772.029755] 0 pages HighMem/MovableOnly [ 2772.033746] 369649 pages reserved [ 2772.049558] 0 pages cma reserved [ 2772.052946] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2772.070011] Killed process 29888 (syz-executor.1) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2772.080686] oom_reaper: reaped process 29888 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2773.690885] IPVS: ftp: loaded support on port[0] = 21 [ 2774.613329] chnl_net:caif_netlink_parms(): no params data found [ 2774.852177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2774.863556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2774.882414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2774.889501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2774.903712] device bridge_slave_1 left promiscuous mode [ 2774.909939] bridge0: port 2(bridge_slave_1) entered disabled state [ 2774.922977] device bridge_slave_0 left promiscuous mode [ 2774.929335] bridge0: port 1(bridge_slave_0) entered disabled state [ 2774.944749] device veth1_macvtap left promiscuous mode [ 2774.950661] device veth0_macvtap left promiscuous mode [ 2774.961526] device veth1_vlan left promiscuous mode [ 2774.967645] device veth0_vlan left promiscuous mode [ 2775.638449] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.644059] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.650352] Bluetooth: hci0: command 0x0409 tx timeout [ 2777.714759] Bluetooth: hci0: command 0x041b tx timeout [ 2779.794331] Bluetooth: hci0: command 0x040f tx timeout [ 2780.729221] device hsr_slave_1 left promiscuous mode [ 2780.736849] device hsr_slave_0 left promiscuous mode [ 2780.751405] team0 (unregistering): Port device team_slave_1 removed [ 2780.765749] team0 (unregistering): Port device team_slave_0 removed [ 2780.775907] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2780.787021] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2780.817259] bond0 (unregistering): Released all slaves [ 2780.835922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2780.842286] bridge0: port 1(bridge_slave_0) entered disabled state [ 2780.851583] device bridge_slave_0 entered promiscuous mode [ 2780.863949] bridge0: port 2(bridge_slave_1) entered blocking state [ 2780.870704] bridge0: port 2(bridge_slave_1) entered disabled state [ 2780.877833] device bridge_slave_1 entered promiscuous mode [ 2780.896654] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2780.905503] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2780.929329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2780.942430] team0: Port device team_slave_0 added [ 2780.949388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2780.962442] team0: Port device team_slave_1 added [ 2780.989278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2781.002474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2781.035093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2781.051891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2781.059188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2781.091570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2781.112414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2781.121038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2781.157431] device hsr_slave_0 entered promiscuous mode [ 2781.163629] device hsr_slave_1 entered promiscuous mode [ 2781.175488] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2781.182752] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2781.286751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2781.330295] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2781.336713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2781.349317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2781.359454] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2781.370788] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2781.381088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2781.392324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2781.405517] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2781.411583] 8021q: adding VLAN 0 to HW filter on device team0 [ 2781.428695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2781.440351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2781.449523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2781.462412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2781.468831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2781.483515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2781.505834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2781.513654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2781.526237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2781.538515] bridge0: port 2(bridge_slave_1) entered blocking state [ 2781.544929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2781.564688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2781.572634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2781.589193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2781.599791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2781.610647] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2781.617795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2781.625621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2781.635128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2781.647485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2781.686505] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2781.699518] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2781.706794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2781.713755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2781.730828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2781.785240] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2781.798873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2781.864498] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2781.871758] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2781.880727] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2781.883931] Bluetooth: hci0: command 0x0419 tx timeout [ 2781.892718] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2781.899604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2781.907412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2781.915589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2781.922409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2781.931012] device veth0_vlan entered promiscuous mode [ 2781.948615] device veth1_vlan entered promiscuous mode [ 2781.954802] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2781.964792] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2781.979015] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2781.989260] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2781.997378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2782.007206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2782.015331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2782.022894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2782.033471] device veth0_macvtap entered promiscuous mode [ 2782.040794] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2782.049767] device veth1_macvtap entered promiscuous mode [ 2782.056750] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2782.065516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2782.075998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2782.085150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2782.095427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.104600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2782.114465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.123555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2782.133312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.142517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2782.152329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.162556] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2782.169914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2782.177639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2782.185176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2782.192260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2782.200324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2782.210289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.220097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.229315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.239901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.249911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.259700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.268878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.278672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.288784] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2782.295818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2782.303102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2782.311030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2783.517912] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2783.809292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2783.826533] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2783.831252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2783.839786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2783.847224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2783.854845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:50:32 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}, {0x0}], 0x7, 0x0) 06:50:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) [ 2783.956672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:50:32 executing program 1: syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:50:32 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x3b, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:50:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x1, @sliced={0x5, [0x9, 0xff, 0x4, 0x401, 0x5, 0x8000, 0x0, 0x8, 0x8, 0x9, 0x3200, 0x8, 0x4907, 0x3, 0x5, 0x1001, 0x9, 0x5, 0x7, 0x100, 0x0, 0x7, 0xe0, 0x25, 0x8, 0x5, 0x89d, 0x1, 0xcd85, 0xff, 0x80, 0x8, 0x5, 0x5, 0x80, 0x101, 0xf1c4, 0x0, 0x0, 0x9, 0x5, 0x2, 0x4, 0x1, 0x8, 0x4, 0xffff, 0x1], 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@userptr={0x8, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x1, 0x2, 0xff, 0x1f, 0x3f, 0x1, "1261f0bf"}, 0x0, 0x2, {&(0x7f0000000340)}, 0x180000}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@userptr={0x8, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x1, 0x2, 0xff, 0x1f, 0x3f, 0x1, "1261f0bf"}, 0x0, 0x2, {&(0x7f0000000340)}, 0x180000}) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x3) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x0, @raw_data="cbe082a10e1583791102336ec614817085e115bfb32658ff48e574d7067a4cd1d13e2c04df9f79d3f1a32ee5bd51005a22a28ecc4433f3ba27ed15372e9d01fdf6a71d34d9093793fac732ac7337497e0f7bf6e176dcca117bc17cc90d9199bbafb7cabaf6dabad788351a7724129912afcb0edaf6ceebeb9b7e682bb2df77174e19ce3c440aa19be7f62cf797eaa8b050a8fcad8f92c7816069312f70aa9f41e821a6002b0f4719dfb35a017de276475f57fcdabe2800aac365b2b3f01ee74f9c821b9b97ce2390"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x23, 0x1, 0x4, 0x0, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x23, 0x1, 0x4, 0x0, 0x1}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) 06:50:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x6, 0x9, 0x8000, 0x80000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x4, 0x0, 0xbb}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:50:32 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}, {0x0}], 0x6, 0x0) 06:50:32 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x3b, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:50:32 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x3b, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) 06:50:32 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}], 0x5, 0x0) 06:50:32 executing program 5: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40000, 0x0, [0x4, 0x5, 0x7fffffff, 0x1, 0x8000000000000001, 0x100000000, 0x1, 0x16]}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000400)={0x0, @raw_data="282e28dae189000d720633c9464bccaebf2e223dfbfb73b8af7125fb7f309b8c00fa76d5bdb672690111928b0a93b79fbe72478a92305ad607c4632f16edbb5c9497f57c3273f720641ecc3d4e26c79915347040dd2099f204008c6736d2026db5ffe8cd7b30f6cea8ed01bc6bc0696f1ec0a2b3db21ad2ada067a83e77470862bdc542191770d02f7392a905a224d4a09f04511dabc47a81cb30d0db27f60080e308f6bc83f58b554adf19b50a952037e70ded4c944904500"}) 06:50:32 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {0x0}], 0x5, 0x0) 06:50:32 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}], 0x4, 0x0) [ 2785.869278] IPVS: ftp: loaded support on port[0] = 21 [ 2785.881615] IPVS: ftp: loaded support on port[0] = 21 [ 2785.891586] IPVS: ftp: loaded support on port[0] = 21 [ 2785.899055] IPVS: ftp: loaded support on port[0] = 21 [ 2787.313151] Bluetooth: hci3: command 0x0409 tx timeout [ 2787.315808] Bluetooth: hci2: command 0x0409 tx timeout [ 2787.393093] Bluetooth: hci4: command 0x0409 tx timeout [ 2787.472979] Bluetooth: hci5: command 0x0409 tx timeout [ 2788.644726] chnl_net:caif_netlink_parms(): no params data found [ 2788.690767] chnl_net:caif_netlink_parms(): no params data found [ 2788.704271] chnl_net:caif_netlink_parms(): no params data found [ 2788.721105] chnl_net:caif_netlink_parms(): no params data found [ 2789.337014] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.344025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.351680] device bridge_slave_0 entered promiscuous mode [ 2789.368341] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.380620] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.392183] device bridge_slave_0 entered promiscuous mode [ 2789.402664] Bluetooth: hci2: command 0x041b tx timeout [ 2789.408196] Bluetooth: hci3: command 0x041b tx timeout [ 2789.419301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2789.434836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2789.449473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2789.458064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2789.472948] Bluetooth: hci4: command 0x041b tx timeout [ 2789.475356] device bridge_slave_1 left promiscuous mode [ 2789.490031] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.499626] device bridge_slave_0 left promiscuous mode [ 2789.510980] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.529179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2789.537657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2789.552418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2789.561746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2789.562560] Bluetooth: hci5: command 0x041b tx timeout [ 2789.578209] device bridge_slave_1 left promiscuous mode [ 2789.587384] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.599214] device bridge_slave_0 left promiscuous mode [ 2789.608411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.628105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2789.638927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2789.651343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2789.666011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2789.677568] device bridge_slave_1 left promiscuous mode [ 2789.687005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.697604] device bridge_slave_0 left promiscuous mode [ 2789.707139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.732059] device veth1_macvtap left promiscuous mode [ 2789.740459] device veth0_macvtap left promiscuous mode [ 2789.749817] device veth1_vlan left promiscuous mode [ 2789.758082] device veth0_vlan left promiscuous mode [ 2789.768025] device veth1_macvtap left promiscuous mode [ 2789.776464] device veth0_macvtap left promiscuous mode [ 2789.781795] device veth1_vlan left promiscuous mode [ 2789.790822] device veth0_vlan left promiscuous mode [ 2789.801292] device veth1_macvtap left promiscuous mode [ 2789.810585] device veth0_macvtap left promiscuous mode [ 2789.819079] device veth1_vlan left promiscuous mode [ 2789.829101] device veth0_vlan left promiscuous mode [ 2791.472296] Bluetooth: hci3: command 0x040f tx timeout [ 2791.489540] Bluetooth: hci2: command 0x040f tx timeout [ 2791.552395] Bluetooth: hci4: command 0x040f tx timeout [ 2791.632272] Bluetooth: hci5: command 0x040f tx timeout [ 2791.819060] oom_reaper: reaped process 2643 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2791.923462] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2791.962122] systemd-journal cpuset=/ mems_allowed=0-1 [ 2791.967347] CPU: 0 PID: 1896 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2791.975231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2791.984572] Call Trace: [ 2791.987166] dump_stack+0x1fc/0x2ef [ 2791.990798] dump_header+0x15d/0xc3f [ 2791.994514] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2791.999609] ? ___ratelimit+0x319/0x590 [ 2792.003582] oom_kill_process.cold+0x10/0x692 [ 2792.008075] ? check_preemption_disabled+0x41/0x280 [ 2792.013093] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2792.018365] out_of_memory+0x1072/0x1390 [ 2792.022432] ? oom_killer_disable+0x270/0x270 [ 2792.026923] ? mutex_trylock+0x15f/0x1a0 [ 2792.030984] __alloc_pages_nodemask+0x23a2/0x2890 [ 2792.035829] ? find_get_entry+0x4cd/0x8a0 [ 2792.039981] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2792.044843] alloc_pages_current+0x193/0x2a0 [ 2792.049247] filemap_fault+0x146e/0x2180 [ 2792.053322] ext4_filemap_fault+0x84/0xb0 [ 2792.057478] __do_fault+0x10b/0x4b0 [ 2792.061106] __handle_mm_fault+0x273b/0x41c0 [ 2792.065517] ? vm_insert_page+0x9c0/0x9c0 [ 2792.069680] ? check_preemption_disabled+0x41/0x280 [ 2792.074725] handle_mm_fault+0x436/0xb10 [ 2792.078802] __do_page_fault+0x68e/0xd60 [ 2792.082868] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2792.087910] ? spurious_fault+0x840/0x840 [ 2792.092070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2792.096913] ? page_fault+0x8/0x30 [ 2792.100450] page_fault+0x1e/0x30 [ 2792.103898] RIP: 0033:0x7f9ad27bba60 [ 2792.107606] Code: Bad RIP value. [ 2792.110959] RSP: 002b:00007ffeb0ee56c8 EFLAGS: 00010202 [ 2792.116313] RAX: 0000000000000001 RBX: 00005638f07241e0 RCX: 00007f9ad1e7a2e3 [ 2792.123575] RDX: 0000000000000013 RSI: 00007ffeb0ee56d0 RDI: 00005638f0724310 [ 2792.130840] RBP: 00007ffeb0ee58c0 R08: 00007ffeb0f72000 R09: 000002cbea3a9a3f [ 2792.138104] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb0ee56d0 [ 2792.145375] R13: 0000000000000001 R14: 0000000000000001 R15: 0005f5d12158a44d [ 2792.161963] Mem-Info: [ 2792.162206] syz-executor.5: vmalloc: allocation failure, allocated 1006915584 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2792.164451] active_anon:27988 inactive_anon:90081 isolated_anon:0 [ 2792.164451] active_file:12 inactive_file:0 isolated_file:0 [ 2792.164451] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2792.164451] slab_reclaimable:13612 slab_unreclaimable:116064 [ 2792.164451] mapped:22283 shmem:104292 pagetables:580 bounce:0 [ 2792.164451] free:13853 free_pcp:124 free_cma:0 [ 2792.199428] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2792.220881] Node 0 active_anon:109920kB inactive_anon:155968kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.242041] CPU: 1 PID: 2643 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2792.248937] Node 1 active_anon:2032kB inactive_anon:204356kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2064kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.256429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2792.256434] Call Trace: [ 2792.256455] dump_stack+0x1fc/0x2ef [ 2792.256474] warn_alloc.cold+0x7b/0x18f [ 2792.256493] ? zone_watermark_ok_safe+0x260/0x260 [ 2792.256521] ? write_comp_data+0xf/0x70 [ 2792.290689] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.293005] __vmalloc_area_node+0x4fd/0x780 [ 2792.293026] ? __vmalloc_node_range+0x180/0x180 [ 2792.293043] ? _raw_spin_unlock+0x29/0x40 [ 2792.295603] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2792.299218] ? __get_vm_area_node+0x2e2/0x3a0 [ 2792.322057] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:109920kB inactive_anon:152352kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2220kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2792.338338] __vmalloc_node_range+0xed/0x180 [ 2792.338357] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2792.338371] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2792.338386] vmalloc_user+0x70/0xe0 [ 2792.365220] lowmem_reserve[]: 0 0 1 1 1 [ 2792.389850] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2792.389865] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2792.389880] __vb2_queue_alloc+0x472/0xe60 [ 2792.389904] vb2_core_create_bufs+0x273/0x7e0 [ 2792.389919] ? __vb2_queue_free+0x870/0x870 [ 2792.389934] ? __video_do_ioctl+0x632/0xcd0 [ 2792.389953] ? __mutex_lock+0x368/0x1190 [ 2792.389971] vb2_create_bufs+0x332/0x620 [ 2792.389990] ? mark_held_locks+0xf0/0xf0 [ 2792.390003] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2792.390019] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2792.390035] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2792.390057] v4l_create_bufs+0xb2/0x160 [ 2792.390076] __video_do_ioctl+0x49a/0xcd0 [ 2792.390098] ? v4l_querycap+0x340/0x340 [ 2792.390117] ? __might_fault+0x192/0x1d0 [ 2792.390147] ? v4l_querycap+0x340/0x340 [ 2792.390165] video_usercopy+0x13f/0xfa0 [ 2792.390194] ? v4l_enumstd+0x60/0x60 [ 2792.390210] ? do_futex+0x171/0x1880 [ 2792.390226] ? mark_held_locks+0xf0/0xf0 [ 2792.390249] ? debug_check_no_obj_freed+0x201/0x490 [ 2792.390273] ? video_usercopy+0xfa0/0xfa0 [ 2792.390286] v4l2_ioctl+0x147/0x1a0 [ 2792.390299] ? video_devdata+0xa0/0xa0 [ 2792.390316] do_vfs_ioctl+0xcdb/0x12e0 [ 2792.390331] ? lock_downgrade+0x720/0x720 [ 2792.390346] ? check_preemption_disabled+0x41/0x280 [ 2792.390361] ? ioctl_preallocate+0x200/0x200 [ 2792.390378] ? __fget+0x356/0x510 [ 2792.390396] ? do_dup2+0x450/0x450 [ 2792.390409] ? __se_sys_futex+0x298/0x3b0 [ 2792.390430] ksys_ioctl+0x9b/0xc0 [ 2792.390446] __x64_sys_ioctl+0x6f/0xb0 [ 2792.390463] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2792.435360] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.437843] do_syscall_64+0xf9/0x620 [ 2792.441893] lowmem_reserve[]: 0 0 0 0 0 [ 2792.445954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2792.445965] RIP: 0033:0x7ff26a4950f9 [ 2792.445979] Code: Bad RIP value. [ 2792.445986] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.446002] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2792.475149] Node 1 Normal free:26636kB min:53876kB low:67344kB high:80812kB active_anon:2032kB inactive_anon:204356kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:100kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2792.477437] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2792.477449] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2792.481491] lowmem_reserve[]: 0 0 0 0 0 [ 2792.485445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2792.485453] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2792.506313] Mem-Info: [ 2792.578611] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10884kB [ 2792.591406] active_anon:27988 inactive_anon:90081 isolated_anon:0 [ 2792.591406] active_file:12 inactive_file:0 isolated_file:0 [ 2792.591406] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2792.591406] slab_reclaimable:13612 slab_unreclaimable:116064 [ 2792.591406] mapped:22283 shmem:104292 pagetables:580 bounce:0 [ 2792.591406] free:13853 free_pcp:124 free_cma:0 [ 2792.618270] Node 0 DMA32: 934*4kB (ME) 547*8kB (UME) 281*16kB (UME) 118*32kB (UME) 23*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17984kB [ 2792.631440] Node 0 active_anon:109920kB inactive_anon:155968kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.740274] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2792.753161] Node 1 active_anon:2032kB inactive_anon:204356kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2064kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.815013] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.852482] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2792.857522] Node 0 DMA32 free:17984kB min:35996kB low:44992kB high:53988kB active_anon:109828kB inactive_anon:152352kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2216kB bounce:0kB free_pcp:440kB local_pcp:248kB free_cma:0kB [ 2792.865082] Node 1 Normal: 685*4kB (UME) 474*8kB (UME) 159*16kB (UME) 66*32kB (ME) 33*64kB (UME) 13*128kB (M) 5*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 1*4096kB (M) = 26996kB [ 2792.901907] lowmem_reserve[]: 0 0 1 1 1 [ 2792.907302] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.913708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2792.953111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2792.961703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2792.970662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2792.989266] lowmem_reserve[]: 0 0 0 0 0 [ 2792.989726] 104320 total pagecache pages [ 2792.993307] Node 1 Normal free:26996kB min:53876kB low:67344kB high:80812kB active_anon:2028kB inactive_anon:204356kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:100kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2792.993343] lowmem_reserve[]: 0 0 0 0 0 [ 2792.998030] 0 pages in swap cache [ 2793.033482] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10884kB [ 2793.049153] Node 0 DMA32: 934*4kB (ME) 548*8kB (UME) 281*16kB (UME) 118*32kB (UME) 23*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17992kB [ 2793.063857] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2793.074982] Node 1 Normal: 685*4kB (UME) 474*8kB (UME) 159*16kB (UME) 66*32kB (ME) 33*64kB (UME) 13*128kB (M) 5*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 1*4096kB (M) = 26996kB [ 2793.085131] Swap cache stats: add 0, delete 0, find 0/0 [ 2793.091803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2793.114706] Free swap = 0kB [ 2793.117916] Total swap = 0kB [ 2793.120945] 2097051 pages RAM [ 2793.121892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2793.141212] 0 pages HighMem/MovableOnly [ 2793.141899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2793.149355] 369649 pages reserved [ 2793.171774] 0 pages cma reserved [ 2793.171871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2793.175274] Out of memory (oom_kill_allocating_task): Kill process 1896 (systemd-journal) score 0 or sacrifice child [ 2793.191861] 104320 total pagecache pages [ 2793.198532] 0 pages in swap cache [ 2793.211904] Swap cache stats: add 0, delete 0, find 0/0 [ 2793.215970] Killed process 1896 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:0kB, shmem-rss:2032kB [ 2793.217298] Free swap = 0kB [ 2793.217307] Total swap = 0kB [ 2793.259065] oom_reaper: reaped process 1896 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2072kB [ 2793.260038] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2793.269398] 2097051 pages RAM [ 2793.269405] 0 pages HighMem/MovableOnly [ 2793.269410] 369649 pages reserved [ 2793.269415] 0 pages cma reserved [ 2793.388908] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2793.393762] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2793.401203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2793.410558] Call Trace: [ 2793.413244] dump_stack+0x1fc/0x2ef [ 2793.416875] dump_header+0x15d/0xc3f [ 2793.420590] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2793.425693] ? ___ratelimit+0x319/0x590 [ 2793.429671] oom_kill_process.cold+0x10/0x692 [ 2793.434195] ? check_preemption_disabled+0x41/0x280 [ 2793.439215] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2793.444495] out_of_memory+0x1072/0x1390 [ 2793.448563] ? oom_killer_disable+0x270/0x270 [ 2793.453151] ? mutex_trylock+0x15f/0x1a0 [ 2793.457219] __alloc_pages_nodemask+0x23a2/0x2890 [ 2793.462073] ? find_get_entry+0x4cd/0x8a0 [ 2793.466230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2793.471092] alloc_pages_current+0x193/0x2a0 [ 2793.475504] filemap_fault+0x146e/0x2180 [ 2793.479573] ext4_filemap_fault+0x84/0xb0 [ 2793.483717] __do_fault+0x10b/0x4b0 [ 2793.487349] __handle_mm_fault+0x273b/0x41c0 [ 2793.491763] ? vm_insert_page+0x9c0/0x9c0 [ 2793.495921] ? check_preemption_disabled+0x41/0x280 [ 2793.500976] handle_mm_fault+0x436/0xb10 [ 2793.505042] __do_page_fault+0x68e/0xd60 [ 2793.509115] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2793.514219] ? spurious_fault+0x840/0x840 [ 2793.518367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2793.523213] ? page_fault+0x8/0x30 [ 2793.526756] page_fault+0x1e/0x30 [ 2793.530205] RIP: 0033:0x46b583 [ 2793.533396] Code: Bad RIP value. [ 2793.536754] RSP: 002b:000000c000067e78 EFLAGS: 00010202 [ 2793.542115] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2793.549377] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2793.556645] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.563908] R10: 000000c000067eb0 R11: 0000000000000202 R12: 000000c000067eb0 [ 2793.571174] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2793.586329] Bluetooth: hci2: command 0x0419 tx timeout [ 2793.591907] Bluetooth: hci3: command 0x0419 tx timeout [ 2793.608646] Mem-Info: [ 2793.611102] active_anon:27864 inactive_anon:90081 isolated_anon:0 [ 2793.611102] active_file:14 inactive_file:14 isolated_file:0 [ 2793.611102] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2793.611102] slab_reclaimable:13587 slab_unreclaimable:116064 [ 2793.611102] mapped:21783 shmem:104292 pagetables:579 bounce:0 [ 2793.611102] free:14167 free_pcp:93 free_cma:0 [ 2793.650868] Bluetooth: hci4: command 0x0419 tx timeout [ 2793.708006] Node 0 active_anon:109728kB inactive_anon:155968kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2793.736000] Bluetooth: hci5: command 0x0419 tx timeout [ 2793.808993] Node 1 active_anon:1652kB inactive_anon:204352kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2793.865306] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2793.965316] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2793.970402] Node 0 DMA32 free:18288kB min:35996kB low:44992kB high:53988kB active_anon:109720kB inactive_anon:152352kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2216kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2794.014859] lowmem_reserve[]: 0 0 1 1 1 [ 2794.019778] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2794.121742] lowmem_reserve[]: 0 0 0 0 0 [ 2794.125759] Node 1 Normal free:27656kB min:53876kB low:67344kB high:80812kB active_anon:1652kB inactive_anon:204352kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2794.168821] lowmem_reserve[]: 0 0 0 0 0 [ 2794.176125] Node 0 DMA: 1*4kB (U) 6*8kB (UME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10884kB [ 2794.205906] Node 0 DMA32: 990*4kB (UME) 547*8kB (UME) 276*16kB (UME) 121*32kB (UME) 24*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18288kB [ 2794.236468] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2794.265508] Node 1 Normal: 626*4kB (UME) 434*8kB (ME) 139*16kB (UME) 72*32kB (UME) 34*64kB (UME) 13*128kB (M) 8*256kB (M) 4*512kB (M) 3*1024kB (UME) 1*2048kB (M) 1*4096kB (M) = 27656kB [ 2794.298872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2794.321725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2794.346295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2794.369500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2794.380638] 104320 total pagecache pages [ 2794.398935] 0 pages in swap cache [ 2794.404922] Swap cache stats: add 0, delete 0, find 0/0 [ 2794.410319] Free swap = 0kB [ 2794.425559] Total swap = 0kB [ 2794.430088] 2097051 pages RAM [ 2794.437908] 0 pages HighMem/MovableOnly [ 2794.444595] 369649 pages reserved [ 2794.449413] 0 pages cma reserved [ 2794.459074] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2794.485051] Killed process 2653 (syz-executor.1) total-vm:48512kB, anon-rss:436kB, file-rss:12292kB, shmem-rss:0kB [ 2794.682450] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2794.700917] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2794.787134] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2794.818638] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2794.842725] systemd[1]: Stopped Journal Service. [ 2794.878080] systemd[1]: Starting Journal Service... [ 2795.106072] systemd-journald[3219]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2795.873982] systemd[1]: Started Journal Service. [ 2809.720050] device hsr_slave_1 left promiscuous mode [ 2809.727437] device hsr_slave_0 left promiscuous mode [ 2809.744880] team0 (unregistering): Port device team_slave_1 removed [ 2809.754043] team0 (unregistering): Port device team_slave_0 removed [ 2809.766683] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2809.776799] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2809.806796] bond0 (unregistering): Released all slaves [ 2809.847125] device hsr_slave_1 left promiscuous mode [ 2809.855719] device hsr_slave_0 left promiscuous mode [ 2809.869224] team0 (unregistering): Port device team_slave_1 removed [ 2809.883052] team0 (unregistering): Port device team_slave_0 removed [ 2809.896086] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2809.906229] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2809.935903] bond0 (unregistering): Released all slaves [ 2809.977504] device hsr_slave_1 left promiscuous mode [ 2809.986695] device hsr_slave_0 left promiscuous mode [ 2810.003675] team0 (unregistering): Port device team_slave_1 removed [ 2810.012842] team0 (unregistering): Port device team_slave_0 removed [ 2810.024983] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2810.036151] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2810.065876] bond0 (unregistering): Released all slaves [ 2810.081576] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.087940] bridge0: port 2(bridge_slave_1) entered disabled state [ 2810.096014] device bridge_slave_1 entered promiscuous mode [ 2810.102510] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.109570] bridge0: port 2(bridge_slave_1) entered disabled state [ 2810.119031] device bridge_slave_1 entered promiscuous mode [ 2810.126280] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.134317] bridge0: port 1(bridge_slave_0) entered disabled state [ 2810.143072] device bridge_slave_0 entered promiscuous mode [ 2810.171631] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.178142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2810.201757] device bridge_slave_1 entered promiscuous mode [ 2810.210882] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.217260] bridge0: port 1(bridge_slave_0) entered disabled state [ 2810.226870] device bridge_slave_0 entered promiscuous mode [ 2810.240818] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2810.267777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2810.279252] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.285678] bridge0: port 2(bridge_slave_1) entered disabled state [ 2810.301989] device bridge_slave_1 entered promiscuous mode [ 2810.332377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2810.352926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2810.365044] team0: Port device team_slave_0 added [ 2810.373264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2810.390872] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2810.401828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2810.410590] team0: Port device team_slave_1 added [ 2810.428455] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2810.462635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2810.470930] team0: Port device team_slave_0 added [ 2810.476784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2810.483760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2810.512429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2810.525522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2810.532618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2810.558946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2810.570108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2810.577613] team0: Port device team_slave_0 added [ 2810.583393] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2810.591359] team0: Port device team_slave_1 added [ 2810.607504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2810.617679] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2810.626003] team0: Port device team_slave_1 added [ 2810.651912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2810.658166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2810.683965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2810.695051] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2810.703120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2810.709812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2810.735503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2810.746974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2810.753864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2810.779344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2810.800264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2810.806497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2810.833574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2810.857846] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2810.865399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2810.877421] device hsr_slave_0 entered promiscuous mode [ 2810.883491] device hsr_slave_1 entered promiscuous mode [ 2810.889938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2810.896866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2810.904378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2810.918976] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2810.954060] device hsr_slave_0 entered promiscuous mode [ 2810.960197] device hsr_slave_1 entered promiscuous mode [ 2810.969753] device hsr_slave_0 entered promiscuous mode [ 2810.975402] device hsr_slave_1 entered promiscuous mode [ 2810.984356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2810.991932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2810.999363] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2811.016330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2811.257664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2811.274044] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2811.315933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2811.403502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2811.414838] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2811.442961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2811.451316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2811.464201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2811.472894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2811.487734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2811.496111] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2811.502487] 8021q: adding VLAN 0 to HW filter on device team0 [ 2811.514890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2811.529388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2811.538699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2811.550515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2811.557602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2811.577159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2811.590751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2811.596825] 8021q: adding VLAN 0 to HW filter on device team0 [ 2811.618298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2811.641915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2811.664859] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.671304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2811.699070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2811.710347] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2811.719330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2811.731255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2811.745450] IPVS: ftp: loaded support on port[0] = 21 [ 2811.752628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2811.764601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2811.771973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2811.784696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2811.792981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2811.802155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.808561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2811.816530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2811.825525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2811.834135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.840530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2811.853779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2811.862663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2811.877106] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.883509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2811.899509] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2811.905580] 8021q: adding VLAN 0 to HW filter on device team0 [ 2811.916517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2811.943576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2811.959609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2811.971879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2811.984221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2811.993353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2812.002914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2812.014055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2812.024405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2812.036653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2812.047064] bridge0: port 1(bridge_slave_0) entered blocking state [ 2812.053475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2812.061369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2812.074518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2812.083799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2812.105572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2812.115686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2812.123822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2812.133553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2812.142531] bridge0: port 2(bridge_slave_1) entered blocking state [ 2812.149022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2812.158265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2812.166537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2812.181095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2812.188031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2812.199464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2812.206979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2812.219527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2812.228257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2812.238235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2812.247357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2812.262826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2812.277189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2812.292928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2812.301413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2812.314474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2812.323988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2812.336936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2812.347066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2812.363012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2812.372047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2812.384291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2812.390689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2812.400442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2812.419425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2812.426342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2812.435254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2812.443525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2812.452332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2812.470992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2812.479440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2812.486597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2812.494808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2812.506691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2812.519692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2812.527982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2812.544168] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2812.550745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2812.557903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2812.572584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2812.583407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2812.596011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2812.628784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2812.671787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2812.687726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2812.699781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2812.736546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2812.750943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2812.767695] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2812.788004] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2812.797979] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2812.810780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2812.831112] chnl_net:caif_netlink_parms(): no params data found [ 2812.841849] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2812.849428] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2812.863913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2812.871526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2812.878240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2812.894822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2812.911791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2812.936690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2812.960889] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2812.972665] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2812.983170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2812.997082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2813.010303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2813.042732] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2813.076659] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2813.087219] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2813.096113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2813.103124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2813.110825] device bridge_slave_0 entered promiscuous mode [ 2813.123992] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2813.132098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2813.140887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2813.153940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2813.162585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2813.177468] bridge0: port 2(bridge_slave_1) entered blocking state [ 2813.184197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.191888] device bridge_slave_1 entered promiscuous mode [ 2813.220659] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2813.231612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2813.243854] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2813.256335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2813.278142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2813.286446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2813.299632] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2813.306971] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2813.314776] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2813.335860] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2813.343713] team0: Port device team_slave_0 added [ 2813.350777] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2813.358161] team0: Port device team_slave_1 added [ 2813.376113] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2813.383731] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2813.391999] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2813.402837] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2813.411098] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2813.417791] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2813.433915] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2813.443184] device veth0_vlan entered promiscuous mode [ 2813.451554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2813.457791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2813.484480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2813.495521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2813.503255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2813.511300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2813.518158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2813.526607] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2813.535936] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2813.547486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2813.554096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2813.579801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2813.590839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2813.598638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2813.606087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2813.613668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2813.622413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2813.629882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2813.636743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2813.644054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2813.653324] device veth0_vlan entered promiscuous mode [ 2813.664033] device veth1_vlan entered promiscuous mode [ 2813.670501] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2813.682280] device veth0_vlan entered promiscuous mode [ 2813.722270] Bluetooth: hci5: command 0x0409 tx timeout [ 2813.726212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2813.735541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2813.747549] device veth1_vlan entered promiscuous mode [ 2813.754721] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2813.763464] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2813.794873] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2813.801914] device veth1_vlan entered promiscuous mode [ 2813.807733] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2813.817609] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2813.828578] device hsr_slave_0 entered promiscuous mode [ 2813.834340] device hsr_slave_1 entered promiscuous mode [ 2813.841573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2813.848863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2813.862204] device bridge_slave_1 left promiscuous mode [ 2813.867693] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.875355] device bridge_slave_0 left promiscuous mode [ 2813.881780] bridge0: port 1(bridge_slave_0) entered disabled state [ 2813.905915] bond0 (unregistering): Released all slaves [ 2813.919510] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2813.926431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2813.933866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2813.944231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2813.952290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2813.959932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2813.967366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2813.975399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2814.000601] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2814.008453] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2814.016941] device veth0_macvtap entered promiscuous mode [ 2814.025276] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2814.046703] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2814.070018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2814.077225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2814.085637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2814.093648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2814.107006] device veth0_macvtap entered promiscuous mode [ 2814.113550] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2814.126557] device veth1_macvtap entered promiscuous mode [ 2814.134485] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2814.152018] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2814.160133] device veth1_macvtap entered promiscuous mode [ 2814.166554] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2814.181179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2814.191165] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2814.198314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2814.205651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2814.215187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2814.224584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2814.233653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2814.254722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2814.265486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2814.283113] device veth0_macvtap entered promiscuous mode [ 2814.293752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2814.310383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.322022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.332229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.343051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.354337] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2814.362299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2814.378890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.389442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.400661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.411150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.422170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.432663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.443794] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2814.451901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2814.461175] device veth1_macvtap entered promiscuous mode [ 2814.469484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2814.477385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2814.487080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2814.496455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2814.507282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.519383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.534794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.545325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.557026] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2814.564993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2814.580474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2814.589427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2814.599603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.609715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.620631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.631402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.641503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.651969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.664899] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2814.683102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2814.700586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2814.709699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2814.717610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2814.736102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2814.747452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2814.775209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.810486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.824434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.840773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.852736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.865366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.877243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2814.892317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.903175] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2814.917123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2814.939304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2814.947211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2814.981615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.001726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.017391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.027571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.036961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.047282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.056666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.066643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.077630] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2815.085043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2815.095046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2815.103797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2815.185544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2815.207209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2815.248762] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2815.255144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2815.263505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2815.275076] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2815.303319] 8021q: adding VLAN 0 to HW filter on device team0 [ 2815.319164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2815.333604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2815.347419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2815.362083] bridge0: port 1(bridge_slave_0) entered blocking state [ 2815.368504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2815.382591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2815.406207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2815.419285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2815.438402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2815.446262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.452759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2815.464183] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2815.474845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2815.484879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2815.499641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.511743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.533113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2815.542926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2815.559376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2815.570357] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2815.583289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2815.603087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2815.613227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2815.622489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2815.632742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2815.640615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.647324] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2815.647946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.662677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2815.673355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2815.684237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2815.684329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.703478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2815.711094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.725301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2815.732886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2815.740707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2815.756510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2815.768108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2815.775735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2815.788355] Bluetooth: hci5: command 0x041b tx timeout [ 2815.794207] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2815.803455] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2815.814694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2815.836195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.851179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.856858] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2815.865221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2815.886828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.898801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.915953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2815.937298] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2815.955586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.968207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.975912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2815.990994] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2816.004218] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 06:51:04 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:51:04 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}], 0x3, 0x0) 06:51:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x1, @sliced={0x5, [0x9, 0xff, 0x4, 0x401, 0x5, 0x8000, 0x0, 0x8, 0x8, 0x9, 0x3200, 0x8, 0x4907, 0x3, 0x5, 0x1001, 0x9, 0x5, 0x7, 0x100, 0x0, 0x7, 0xe0, 0x25, 0x8, 0x5, 0x89d, 0x1, 0xcd85, 0xff, 0x80, 0x8, 0x5, 0x5, 0x80, 0x101, 0xf1c4, 0x0, 0x0, 0x9, 0x5, 0x2, 0x4, 0x1, 0x8, 0x4, 0xffff, 0x1], 0x1}}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@userptr={0x8, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x1, 0x2, 0xff, 0x1f, 0x3f, 0x1, "1261f0bf"}, 0x0, 0x2, {&(0x7f0000000340)}, 0x180000}) (async, rerun: 32) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) (async, rerun: 32) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x3) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x0, @raw_data="cbe082a10e1583791102336ec614817085e115bfb32658ff48e574d7067a4cd1d13e2c04df9f79d3f1a32ee5bd51005a22a28ecc4433f3ba27ed15372e9d01fdf6a71d34d9093793fac732ac7337497e0f7bf6e176dcca117bc17cc90d9199bbafb7cabaf6dabad788351a7724129912afcb0edaf6ceebeb9b7e682bb2df77174e19ce3c440aa19be7f62cf797eaa8b050a8fcad8f92c7816069312f70aa9f41e821a6002b0f4719dfb35a017de276475f57fcdabe2800aac365b2b3f01ee74f9c821b9b97ce2390"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x23, 0x1, 0x4, 0x0, 0x1}) (async) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) [ 2816.016902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2816.025184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2816.044468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2816.113431] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2816.125600] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2816.134847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2816.143768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2816.178325] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2816.185527] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2816.193286] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2816.203723] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2816.211969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2816.219624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2816.228418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2816.236258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2816.251327] device veth0_vlan entered promiscuous mode [ 2816.261814] device veth1_vlan entered promiscuous mode [ 2816.268870] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2816.280173] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2816.294801] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2816.304255] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2816.312195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2816.320175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2816.327401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2816.335517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2816.346009] device veth0_macvtap entered promiscuous mode [ 2816.356535] device veth1_macvtap entered promiscuous mode [ 2816.366083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2816.375804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2816.385112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2816.395065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.404528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2816.414324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.423505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2816.434021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.443216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2816.453010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.462172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2816.471924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.482389] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2816.489930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2816.497075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2816.505196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2816.516732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2816.527808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.536929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2816.548754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.557972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2816.567779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.576909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2816.586947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.596600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2816.606540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2816.616799] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2816.623871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2816.631682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2816.639877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2816.763117] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2816.770202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.777322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.799356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 06:51:05 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:51:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}], 0x3, 0x0) 06:51:05 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0, 0x0) 06:51:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x3) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1, 0x9, 0x43, 0x0, 0x101, 0xf000, 0x1, '\x00', 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) [ 2816.808866] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2816.815164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.822549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.830918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:51:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:51:05 executing program 5: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40000, 0x0, [0x4, 0x5, 0x7fffffff, 0x1, 0x8000000000000001, 0x100000000, 0x1, 0x16]}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000400)={0x0, @raw_data="282e28dae189000d720633c9464bccaebf2e223dfbfb73b8af7125fb7f309b8c00fa76d5bdb672690111928b0a93b79fbe72478a92305ad607c4632f16edbb5c9497f57c3273f720641ecc3d4e26c79915347040dd2099f204008c6736d2026db5ffe8cd7b30f6cea8ed01bc6bc0696f1ec0a2b3db21ad2ada067a83e77470862bdc542191770d02f7392a905a224d4a09f04511dabc47a81cb30d0db27f60080e308f6bc83f58b554adf19b50a952037e70ded4c944904500"}) 06:51:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}], 0x3, 0x0) 06:51:05 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x3) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1, 0x9, 0x43, 0x0, 0x101, 0xf000, 0x1, '\x00', 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x3) (async) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1, 0x9, 0x43, 0x0, 0x101, 0xf000, 0x1, '\x00', 0x2}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) 06:51:05 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}], 0x2, 0x0) 06:51:05 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) 06:51:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:51:05 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) [ 2817.877780] Bluetooth: hci5: command 0x040f tx timeout [ 2819.957392] Bluetooth: hci5: command 0x0419 tx timeout [ 2821.716492] oom_reaper: reaped process 3946 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2821.755108] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2821.773499] in:imklog cpuset=/ mems_allowed=0-1 [ 2821.778246] CPU: 0 PID: 2208 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2821.785601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2821.794986] Call Trace: [ 2821.797577] dump_stack+0x1fc/0x2ef [ 2821.801203] dump_header+0x15d/0xc3f [ 2821.804916] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2821.810013] ? ___ratelimit+0x319/0x590 [ 2821.813993] oom_kill_process.cold+0x10/0x692 [ 2821.818503] ? check_preemption_disabled+0x41/0x280 [ 2821.823542] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2821.828829] out_of_memory+0x1072/0x1390 [ 2821.832904] ? oom_killer_disable+0x270/0x270 [ 2821.837406] ? mutex_trylock+0x15f/0x1a0 [ 2821.841476] __alloc_pages_nodemask+0x23a2/0x2890 [ 2821.846347] ? find_get_entry+0x4cd/0x8a0 [ 2821.850501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2821.855353] alloc_pages_current+0x193/0x2a0 [ 2821.859749] filemap_fault+0x146e/0x2180 [ 2821.863820] ext4_filemap_fault+0x84/0xb0 [ 2821.867962] __do_fault+0x10b/0x4b0 [ 2821.871540] syz-executor.5: vmalloc: allocation failure, allocated 1008529408 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2821.871589] __handle_mm_fault+0x273b/0x41c0 [ 2821.885404] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2821.889770] ? vm_insert_page+0x9c0/0x9c0 [ 2821.889786] ? lock_downgrade+0x720/0x720 [ 2821.889810] ? check_preemption_disabled+0x41/0x280 [ 2821.889832] handle_mm_fault+0x436/0xb10 [ 2821.912209] __do_page_fault+0x68e/0xd60 [ 2821.916293] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2821.921301] ? spurious_fault+0x840/0x840 [ 2821.925442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2821.930282] ? page_fault+0x8/0x30 [ 2821.933815] page_fault+0x1e/0x30 [ 2821.937260] RIP: 0033:0x7fc993d1722d [ 2821.940967] Code: Bad RIP value. [ 2821.944342] RSP: 002b:00007fc9916b3580 EFLAGS: 00010293 [ 2821.949695] RAX: 0000000000000076 RBX: 0000000000000000 RCX: 00007fc993d1722d [ 2821.956965] RDX: 0000000000001fa0 RSI: 00007fc9916b3da0 RDI: 0000000000000004 [ 2821.964226] RBP: 00005593198239d0 R08: 0000000000000000 R09: 0000000004000001 [ 2821.971485] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fc9916b3da0 [ 2821.978744] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fc9916b3ddd [ 2821.986023] CPU: 1 PID: 3946 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2821.993816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2821.996389] Mem-Info: [ 2822.003158] Call Trace: [ 2822.003178] dump_stack+0x1fc/0x2ef [ 2822.003197] warn_alloc.cold+0x7b/0x18f [ 2822.005620] active_anon:28036 inactive_anon:90088 isolated_anon:0 [ 2822.005620] active_file:17 inactive_file:17 isolated_file:0 [ 2822.005620] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2822.005620] slab_reclaimable:13286 slab_unreclaimable:115896 [ 2822.005620] mapped:22166 shmem:104308 pagetables:582 bounce:0 [ 2822.005620] free:14013 free_pcp:145 free_cma:0 [ 2822.008185] ? zone_watermark_ok_safe+0x260/0x260 [ 2822.008206] ? policy_node+0x116/0x140 [ 2822.008224] ? __sanitizer_cov_trace_pc+0xd/0x50 [ 2822.011844] Node 0 active_anon:110132kB inactive_anon:155996kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2822.015808] __vmalloc_area_node+0x4fd/0x780 [ 2822.049198] Node 1 active_anon:2012kB inactive_anon:204356kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1596kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2822.053979] ? __vmalloc_node_range+0x180/0x180 [ 2822.057878] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2822.062586] ? _raw_spin_unlock+0x29/0x40 [ 2822.091995] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2822.094806] ? __get_vm_area_node+0x2e2/0x3a0 [ 2822.121883] Node 0 DMA32 free:17872kB min:35996kB low:44992kB high:53988kB active_anon:110132kB inactive_anon:152380kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2228kB bounce:0kB free_pcp:328kB local_pcp:16kB free_cma:0kB [ 2822.126509] __vmalloc_node_range+0xed/0x180 [ 2822.152923] lowmem_reserve[]: 0 0 1 1 1 [ 2822.157027] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2822.157045] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2822.162032] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2822.166517] vmalloc_user+0x70/0xe0 [ 2822.197130] lowmem_reserve[]: 0 0 0 0 0 [ 2822.199873] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2822.203814] Node 1 Normal free:27308kB min:53876kB low:67344kB high:80812kB active_anon:2012kB inactive_anon:204356kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2822.208120] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2822.208136] __vb2_queue_alloc+0x472/0xe60 [ 2822.208161] vb2_core_create_bufs+0x273/0x7e0 [ 2822.213503] lowmem_reserve[]: 0 0 0 0 0 [ 2822.239360] ? __vb2_queue_free+0x870/0x870 [ 2822.239374] ? __video_do_ioctl+0x632/0xcd0 [ 2822.239390] ? pi_state_update_owner+0x450/0x450 [ 2822.239407] ? __mutex_lock+0x368/0x1190 [ 2822.243012] Node 0 DMA: 0*4kB 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10864kB [ 2822.246979] vb2_create_bufs+0x332/0x620 [ 2822.247005] ? mark_held_locks+0xf0/0xf0 [ 2822.251338] Node 0 DMA32: 1238*4kB (ME) 607*8kB (UME) 288*16kB (ME) 64*32kB (ME) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17872kB [ 2822.279779] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2822.279791] ? futex_wait_queue_me+0x404/0x5e0 [ 2822.279803] ? pi_state_update_owner+0x450/0x450 [ 2822.279817] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2822.279838] v4l_create_bufs+0xb2/0x160 [ 2822.279854] __video_do_ioctl+0x49a/0xcd0 [ 2822.279870] ? v4l_querycap+0x340/0x340 [ 2822.279886] ? __might_fault+0x192/0x1d0 [ 2822.279902] ? v4l_querycap+0x340/0x340 [ 2822.279917] video_usercopy+0x13f/0xfa0 [ 2822.279934] ? v4l_enumstd+0x60/0x60 [ 2822.279947] ? do_futex+0x171/0x1880 [ 2822.279963] ? mark_held_locks+0xf0/0xf0 [ 2822.279979] ? lock_downgrade+0x720/0x720 [ 2822.280001] ? check_preemption_disabled+0x41/0x280 [ 2822.280017] ? check_preemption_disabled+0x41/0x280 [ 2822.280037] ? video_usercopy+0xfa0/0xfa0 [ 2822.280049] v4l2_ioctl+0x147/0x1a0 [ 2822.280061] ? video_devdata+0xa0/0xa0 [ 2822.280076] do_vfs_ioctl+0xcdb/0x12e0 [ 2822.280091] ? lock_downgrade+0x720/0x720 [ 2822.280105] ? check_preemption_disabled+0x41/0x280 [ 2822.280118] ? ioctl_preallocate+0x200/0x200 [ 2822.280135] ? __fget+0x356/0x510 [ 2822.280151] ? do_dup2+0x450/0x450 [ 2822.280165] ? __se_sys_futex+0x298/0x3b0 [ 2822.280186] ksys_ioctl+0x9b/0xc0 [ 2822.280201] __x64_sys_ioctl+0x6f/0xb0 [ 2822.280215] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2822.280228] do_syscall_64+0xf9/0x620 [ 2822.280246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2822.280257] RIP: 0033:0x7ff26a4950f9 [ 2822.280271] Code: Bad RIP value. [ 2822.280278] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2822.280290] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2822.280298] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2822.280306] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2822.280313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2822.280321] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2822.302689] Mem-Info: [ 2822.320858] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2822.337218] active_anon:28036 inactive_anon:90088 isolated_anon:0 [ 2822.337218] active_file:17 inactive_file:17 isolated_file:0 [ 2822.337218] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2822.337218] slab_reclaimable:13286 slab_unreclaimable:115896 [ 2822.337218] mapped:22166 shmem:104308 pagetables:582 bounce:0 [ 2822.337218] free:14013 free_pcp:145 free_cma:0 [ 2822.352474] Node 1 Normal: 627*4kB (UME) 448*8kB (ME) 152*16kB (ME) 79*32kB (ME) 34*64kB (UME) 4*128kB (M) 5*256kB (UM) 2*512kB (UM) 3*1024kB (ME) 2*2048kB (M) 1*4096kB (M) = 27308kB [ 2822.364843] Node 0 active_anon:110132kB inactive_anon:155996kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2822.385191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2822.389860] Node 1 active_anon:2012kB inactive_anon:204356kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1596kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2822.395897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2822.403108] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2822.410671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2822.417701] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2822.430209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2822.432316] Node 0 DMA32 free:17872kB min:35996kB low:44992kB high:53988kB active_anon:110132kB inactive_anon:152380kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2228kB bounce:0kB free_pcp:328kB local_pcp:312kB free_cma:0kB [ 2822.436163] 104342 total pagecache pages [ 2822.443277] lowmem_reserve[]: 0 0 1 1 1 [ 2822.455603] 0 pages in swap cache [ 2822.460970] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2822.468153] Swap cache stats: add 0, delete 0, find 0/0 [ 2822.468963] lowmem_reserve[]: 0 0 0 0 0 [ 2822.472811] Free swap = 0kB [ 2822.480597] Node 1 Normal free:27308kB min:53876kB low:67344kB high:80812kB active_anon:2012kB inactive_anon:204356kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2822.497340] Total swap = 0kB [ 2822.504560] lowmem_reserve[]: 0 0 0 0 0 [ 2822.518051] 2097051 pages RAM [ 2822.532099] Node 0 DMA: 0*4kB 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10864kB [ 2822.544996] 0 pages HighMem/MovableOnly [ 2822.562887] Node 0 DMA32: 1238*4kB (ME) 607*8kB (UME) 288*16kB (ME) 64*32kB (ME) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17872kB [ 2822.593499] 369649 pages reserved [ 2822.613412] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2822.640604] 0 pages cma reserved [ 2822.679080] Node 1 Normal: 627*4kB (UME) 448*8kB (ME) 152*16kB (ME) 79*32kB (ME) 34*64kB (UME) 4*128kB (M) 5*256kB (UM) 2*512kB (UM) 3*1024kB (ME) 2*2048kB (M) 1*4096kB (M) = 27308kB [ 2822.714271] Out of memory (oom_kill_allocating_task): Kill process 2208 (in:imklog) score 0 or sacrifice child [ 2822.721635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2822.723971] Killed process 2196 (rsyslogd) total-vm:254332kB, anon-rss:872kB, file-rss:0kB, shmem-rss:0kB [ 2822.948798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2822.958623] oom_reaper: reaped process 2196 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2822.958662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2822.973492] systemd-rfkill invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2822.988960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2822.991230] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2823.002886] CPU: 1 PID: 3232 Comm: systemd-rfkill Not tainted 4.19.211-syzkaller #0 [ 2823.010771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2823.020122] Call Trace: [ 2823.022719] dump_stack+0x1fc/0x2ef [ 2823.026360] dump_header+0x15d/0xc3f [ 2823.030076] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2823.035176] ? ___ratelimit+0x319/0x590 [ 2823.039157] oom_kill_process.cold+0x10/0x692 [ 2823.043658] ? check_preemption_disabled+0x41/0x280 [ 2823.046513] 104342 total pagecache pages [ 2823.048686] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2823.052743] 0 pages in swap cache [ 2823.058093] out_of_memory+0x1072/0x1390 [ 2823.058112] ? oom_killer_disable+0x270/0x270 [ 2823.058127] ? mutex_trylock+0x15f/0x1a0 [ 2823.058144] __alloc_pages_nodemask+0x23a2/0x2890 [ 2823.068165] Swap cache stats: add 0, delete 0, find 0/0 [ 2823.070215] ? find_get_entry+0x4cd/0x8a0 [ 2823.074250] Free swap = 0kB [ 2823.079084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2823.079122] alloc_pages_current+0x193/0x2a0 [ 2823.084678] Total swap = 0kB [ 2823.088987] filemap_fault+0x146e/0x2180 [ 2823.089019] ext4_filemap_fault+0x84/0xb0 [ 2823.092018] 2097051 pages RAM [ 2823.096880] __do_fault+0x10b/0x4b0 [ 2823.096897] __handle_mm_fault+0x273b/0x41c0 [ 2823.096914] ? vm_insert_page+0x9c0/0x9c0 [ 2823.096940] ? check_preemption_disabled+0x41/0x280 [ 2823.096955] handle_mm_fault+0x436/0xb10 [ 2823.096974] __do_page_fault+0x68e/0xd60 [ 2823.096999] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2823.097012] ? spurious_fault+0x840/0x840 [ 2823.097027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2823.097046] ? page_fault+0x8/0x30 [ 2823.097059] page_fault+0x1e/0x30 [ 2823.097069] RIP: 0033:0x7f798bfe992d [ 2823.097084] Code: Bad RIP value. [ 2823.097090] RSP: 002b:00007ffd216b9590 EFLAGS: 00010246 [ 2823.097101] RAX: 0000000000000000 RBX: 000055bbe87c6040 RCX: 00007f798bfe992d [ 2823.097109] RDX: 00007ffd216b95a0 RSI: 0000000000000001 RDI: 00007ffd216b95d8 [ 2823.097117] RBP: 00007ffd216b9648 R08: 0000000000000008 R09: 0000000000000000 [ 2823.097124] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2823.097131] R13: 00007ffd216b9640 R14: 0000000000000000 R15: 0000000000000003 [ 2823.154477] Mem-Info: [ 2823.157964] 0 pages HighMem/MovableOnly [ 2823.181928] active_anon:27794 inactive_anon:90088 isolated_anon:0 [ 2823.181928] active_file:18 inactive_file:16 isolated_file:0 [ 2823.181928] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2823.181928] slab_reclaimable:13286 slab_unreclaimable:115896 [ 2823.181928] mapped:22166 shmem:104308 pagetables:544 bounce:0 [ 2823.181928] free:14439 free_pcp:0 free_cma:0 [ 2823.184490] 369649 pages reserved [ 2823.223046] Node 0 active_anon:109168kB inactive_anon:155996kB active_file:68kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2823.265791] 0 pages cma reserved [ 2823.299396] Node 1 active_anon:2008kB inactive_anon:204356kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1596kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2823.351175] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.393659] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2823.405168] Node 0 DMA32 free:19280kB min:35996kB low:44992kB high:53988kB active_anon:109168kB inactive_anon:152380kB active_file:68kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.439282] lowmem_reserve[]: 0 0 1 1 1 [ 2823.443286] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.473946] lowmem_reserve[]: 0 0 0 0 0 [ 2823.478434] Node 1 Normal free:27604kB min:53876kB low:67344kB high:80812kB active_anon:2008kB inactive_anon:204356kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.512075] lowmem_reserve[]: 0 0 0 0 0 [ 2823.516083] Node 0 DMA: 0*4kB 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10864kB [ 2823.536090] Node 0 DMA32: 1477*4kB (UME) 622*8kB (UME) 302*16kB (UME) 68*32kB (UME) 22*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19428kB [ 2823.555429] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2823.572599] Node 1 Normal: 622*4kB (UME) 452*8kB (UME) 157*16kB (UME) 79*32kB (UME) 32*64kB (ME) 5*128kB (M) 4*256kB (M) 1*512kB (M) 4*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 27656kB [ 2823.605608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2823.633679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2823.662246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2823.690611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2823.711509] 104342 total pagecache pages [ 2823.715599] 0 pages in swap cache [ 2823.722458] Swap cache stats: add 0, delete 0, find 0/0 [ 2823.744382] Free swap = 0kB [ 2823.751054] Total swap = 0kB [ 2823.754084] 2097051 pages RAM [ 2823.771319] 0 pages HighMem/MovableOnly [ 2823.775310] 369649 pages reserved [ 2823.778803] 0 pages cma reserved [ 2823.782169] Out of memory (oom_kill_allocating_task): Kill process 3232 (systemd-rfkill) score 0 or sacrifice child [ 2823.797500] Killed process 3232 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 2823.811997] oom_reaper: reaped process 3232 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2823.834138] kworker/u4:2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2823.851581] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 2823.871653] CPU: 1 PID: 31714 Comm: kworker/u4:2 Not tainted 4.19.211-syzkaller #0 [ 2823.879375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2823.888738] Workqueue: events_unbound call_usermodehelper_exec_work [ 2823.895138] Call Trace: [ 2823.897731] dump_stack+0x1fc/0x2ef [ 2823.901371] dump_header+0x15d/0xc3f [ 2823.905089] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2823.910193] ? ___ratelimit+0x319/0x590 [ 2823.914171] oom_kill_process.cold+0x10/0x692 [ 2823.918667] ? oom_badness.part.0+0x135/0x6e0 [ 2823.923167] ? lock_downgrade+0x720/0x720 [ 2823.927333] ? check_preemption_disabled+0x41/0x280 [ 2823.932366] out_of_memory+0x34d/0x1390 [ 2823.936351] ? oom_killer_disable+0x270/0x270 [ 2823.940848] ? mutex_trylock+0x15f/0x1a0 [ 2823.944911] __alloc_pages_nodemask+0x23a2/0x2890 [ 2823.949769] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2823.954618] ? should_fail+0x142/0x7b0 [ 2823.958502] ? fs_reclaim_release+0xd0/0x110 [ 2823.962918] ? check_preemption_disabled+0x41/0x280 [ 2823.967942] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2823.972960] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2823.977722] copy_process.part.0+0x3cf/0x8260 [ 2823.982224] ? __lock_acquire+0x6de/0x3ff0 [ 2823.986471] ? __lock_acquire+0x6de/0x3ff0 [ 2823.990717] ? umh_complete+0x90/0x90 [ 2823.994527] ? __cleanup_sighand+0x60/0x60 [ 2823.998768] ? mark_held_locks+0xf0/0xf0 [ 2824.002839] ? __lock_acquire+0x6de/0x3ff0 [ 2824.007085] _do_fork+0x22f/0xf30 [ 2824.010544] ? umh_complete+0x90/0x90 [ 2824.014349] ? fork_idle+0x220/0x220 [ 2824.018064] ? lock_acquire+0x170/0x3c0 [ 2824.022041] ? debug_object_deactivate+0xfc/0x2e0 [ 2824.026890] ? trace_hardirqs_off+0x64/0x200 [ 2824.031305] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2824.036415] ? umh_complete+0x90/0x90 [ 2824.040393] kernel_thread+0x2f/0x40 [ 2824.044124] call_usermodehelper_exec_work+0x16d/0x260 [ 2824.049417] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2824.054980] process_one_work+0x864/0x1570 [ 2824.059237] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2824.063926] worker_thread+0x64c/0x1130 [ 2824.067922] ? __kthread_parkme+0x133/0x1e0 [ 2824.072255] ? process_one_work+0x1570/0x1570 [ 2824.076764] kthread+0x33f/0x460 [ 2824.080133] ? kthread_park+0x180/0x180 [ 2824.084130] ret_from_fork+0x24/0x30 [ 2824.155574] Mem-Info: [ 2824.162821] active_anon:27682 inactive_anon:90088 isolated_anon:0 [ 2824.162821] active_file:47 inactive_file:512 isolated_file:0 [ 2824.162821] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2824.162821] slab_reclaimable:13286 slab_unreclaimable:115792 [ 2824.162821] mapped:22466 shmem:104308 pagetables:550 bounce:0 [ 2824.162821] free:116870 free_pcp:577 free_cma:0 [ 2824.202574] Node 0 active_anon:108768kB inactive_anon:155996kB active_file:72kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2824.239308] Node 1 active_anon:1960kB inactive_anon:204356kB active_file:216kB inactive_file:5196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5296kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2824.273998] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2824.312188] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2824.320094] Node 0 DMA32 free:20636kB min:35996kB low:44992kB high:53988kB active_anon:108768kB inactive_anon:152380kB active_file:72kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:2100kB bounce:0kB free_pcp:840kB local_pcp:56kB free_cma:0kB [ 2824.391834] lowmem_reserve[]: 0 0 1 1 1 [ 2824.395850] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2824.432388] lowmem_reserve[]: 0 0 0 0 0 [ 2824.439953] Node 1 Normal free:596756kB min:53876kB low:67344kB high:80812kB active_anon:1960kB inactive_anon:204356kB active_file:416kB inactive_file:6396kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:100kB bounce:0kB free_pcp:2812kB local_pcp:1444kB free_cma:0kB [ 2824.478979] lowmem_reserve[]: 0 0 0 0 0 [ 2824.483719] Node 0 DMA: 0*4kB 6*8kB (UME) 2*16kB (UE) 1*32kB (E) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10864kB [ 2824.510128] Node 0 DMA32: 1588*4kB (UME) 1365*8kB (UME) 342*16kB (UME) 71*32kB (UME) 22*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26552kB [ 2824.553375] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2824.565085] Node 1 Normal: 39*4kB (UE) 17*8kB (E) 70*16kB (UME) 112*32kB (UME) 95*64kB (UME) 104*128kB (UM) 51*256kB (UM) 41*512kB (UM) 27*1024kB (UME) 22*2048kB (UM) 155*4096kB (UM) = 766020kB [ 2824.585415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.598610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.607806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.617497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.626079] 106303 total pagecache pages [ 2824.632032] 0 pages in swap cache [ 2824.646242] Swap cache stats: add 0, delete 0, find 0/0 [ 2824.651658] Free swap = 0kB [ 2824.654668] Total swap = 0kB [ 2824.658949] 2097051 pages RAM [ 2824.662057] 0 pages HighMem/MovableOnly [ 2824.666024] 369649 pages reserved [ 2824.674535] 0 pages cma reserved [ 2824.679178] Out of memory: Kill process 8072 (syz-fuzzer) score 6 or sacrifice child [ 2824.688922] Killed process 2651 (syz-executor.4) total-vm:48512kB, anon-rss:436kB, file-rss:12292kB, shmem-rss:0kB [ 2824.701603] oom_reaper: reaped process 2651 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2828.184029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2828.203132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2828.220326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2828.231070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2828.241816] device bridge_slave_1 left promiscuous mode [ 2828.251861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2828.261146] device bridge_slave_0 left promiscuous mode [ 2828.276022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2828.291106] device veth1_macvtap left promiscuous mode [ 2828.297603] device veth0_macvtap left promiscuous mode [ 2828.302931] device veth1_vlan left promiscuous mode [ 2828.313298] device veth0_vlan left promiscuous mode 06:51:17 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:17 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}, {0x0}], 0x7, 0x0) 06:51:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x3) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1, 0x9, 0x43, 0x0, 0x101, 0xf000, 0x1, '\x00', 0x2}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:51:17 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}], 0x1, 0x0) 06:51:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp={0x0, 0x0, 0x0, 0x2, 0x0, [{}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x1}], 0x0, 0x0, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0x9, 0x0, 0x3031334d, 0x2, 0x2, [{0x4, 0xfffff08d}, {0x4, 0xffff}, {0x80000000, 0x5}, {0x80000000, 0x4}, {0x7ff, 0x101}, {0x4, 0x80}, {0x7, 0x11}, {0x3}], 0x3, 0xd3, 0x8, 0x1, 0x5}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x2, 0x4, 0x0, 0x1f}) r4 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0xff, 0x3, 0x4, 0x1000, 0x7fffffff, {0x0, 0x2710}, {0x4, 0x1, 0x9, 0x40, 0x32, 0xee, 'WY!,'}, 0xe7, 0x1, {}, 0x7ff, 0x0, r5}) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0x3, @vbi={0x4, 0x7ff, 0x100, 0x30313953, [0xfffffff8, 0x8], [0x4, 0x5], 0x2}}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0xa63c0) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000440)={0x3, 0x10001, 0x4, 0x84800}) 06:51:17 executing program 5: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40000, 0x0, [0x4, 0x5, 0x7fffffff, 0x1, 0x8000000000000001, 0x100000000, 0x1, 0x16]}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000400)={0x0, @raw_data="282e28dae189000d720633c9464bccaebf2e223dfbfb73b8af7125fb7f309b8c00fa76d5bdb672690111928b0a93b79fbe72478a92305ad607c4632f16edbb5c9497f57c3273f720641ecc3d4e26c79915347040dd2099f204008c6736d2026db5ffe8cd7b30f6cea8ed01bc6bc0696f1ec0a2b3db21ad2ada067a83e77470862bdc542191770d02f7392a905a224d4a09f04511dabc47a81cb30d0db27f60080e308f6bc83f58b554adf19b50a952037e70ded4c944904500"}) 06:51:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:17 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) 06:51:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:51:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp={0x0, 0x0, 0x0, 0x2, 0x0, [{}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x1}], 0x0, 0x0, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0x9, 0x0, 0x3031334d, 0x2, 0x2, [{0x4, 0xfffff08d}, {0x4, 0xffff}, {0x80000000, 0x5}, {0x80000000, 0x4}, {0x7ff, 0x101}, {0x4, 0x80}, {0x7, 0x11}, {0x3}], 0x3, 0xd3, 0x8, 0x1, 0x5}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x2, 0x4, 0x0, 0x1f}) r4 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0xff, 0x3, 0x4, 0x1000, 0x7fffffff, {0x0, 0x2710}, {0x4, 0x1, 0x9, 0x40, 0x32, 0xee, 'WY!,'}, 0xe7, 0x1, {}, 0x7ff, 0x0, r5}) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0x3, @vbi={0x4, 0x7ff, 0x100, 0x30313953, [0xfffffff8, 0x8], [0x4, 0x5], 0x2}}) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0xa63c0) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000440)={0x3, 0x10001, 0x4, 0x84800}) 06:51:17 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) 06:51:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp={0x0, 0x0, 0x0, 0x2, 0x0, [{}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x1}], 0x0, 0x0, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0x9, 0x0, 0x3031334d, 0x2, 0x2, [{0x4, 0xfffff08d}, {0x4, 0xffff}, {0x80000000, 0x5}, {0x80000000, 0x4}, {0x7ff, 0x101}, {0x4, 0x80}, {0x7, 0x11}, {0x3}], 0x3, 0xd3, 0x8, 0x1, 0x5}}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x2, 0x4, 0x0, 0x1f}) r4 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0xff, 0x3, 0x4, 0x1000, 0x7fffffff, {0x0, 0x2710}, {0x4, 0x1, 0x9, 0x40, 0x32, 0xee, 'WY!,'}, 0xe7, 0x1, {}, 0x7ff, 0x0, r5}) (async) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0x3, @vbi={0x4, 0x7ff, 0x100, 0x30313953, [0xfffffff8, 0x8], [0x4, 0x5], 0x2}}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0xa63c0) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000440)={0x3, 0x10001, 0x4, 0x84800}) [ 2832.824759] Bluetooth: hci2: command 0x0409 tx timeout [ 2834.024699] Bluetooth: hci1: command 0x0406 tx timeout [ 2834.904376] Bluetooth: hci2: command 0x041b tx timeout [ 2836.347773] oom_reaper: reaped process 4017 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2836.356202] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2836.395603] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2836.400493] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2836.407933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2836.417285] Call Trace: [ 2836.419875] dump_stack+0x1fc/0x2ef [ 2836.423504] dump_header+0x15d/0xc3f [ 2836.427217] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2836.432319] ? ___ratelimit+0x319/0x590 [ 2836.436299] oom_kill_process.cold+0x10/0x692 [ 2836.440795] ? check_preemption_disabled+0x41/0x280 [ 2836.445817] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2836.451101] out_of_memory+0x1072/0x1390 [ 2836.455171] ? oom_killer_disable+0x270/0x270 [ 2836.459696] ? mutex_trylock+0x15f/0x1a0 [ 2836.463763] __alloc_pages_nodemask+0x23a2/0x2890 [ 2836.468613] ? find_get_entry+0x4cd/0x8a0 [ 2836.472771] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2836.477641] alloc_pages_current+0x193/0x2a0 [ 2836.482049] filemap_fault+0x146e/0x2180 [ 2836.486123] ext4_filemap_fault+0x84/0xb0 [ 2836.490272] __do_fault+0x10b/0x4b0 [ 2836.493903] __handle_mm_fault+0x273b/0x41c0 [ 2836.498941] ? vm_insert_page+0x9c0/0x9c0 [ 2836.504424] ? check_preemption_disabled+0x41/0x280 [ 2836.509446] handle_mm_fault+0x436/0xb10 [ 2836.513518] __do_page_fault+0x68e/0xd60 [ 2836.517584] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2836.522599] ? spurious_fault+0x840/0x840 [ 2836.526748] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2836.531594] ? page_fault+0x8/0x30 [ 2836.535131] page_fault+0x1e/0x30 [ 2836.538582] RIP: 0033:0x46b583 [ 2836.541769] Code: Bad RIP value. [ 2836.544102] syz-executor.5: vmalloc: allocation failure, allocated 1015549952 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2836.545124] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2836.564280] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2836.571544] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2836.578451] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2836.578825] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.578836] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2836.598424] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2836.638589] Mem-Info: [ 2836.641052] active_anon:27873 inactive_anon:90086 isolated_anon:0 [ 2836.641052] active_file:27 inactive_file:9 isolated_file:0 [ 2836.641052] unevictable:0 dirty:24 writeback:0 unstable:0 [ 2836.641052] slab_reclaimable:13284 slab_unreclaimable:113758 [ 2836.641052] mapped:22262 shmem:104304 pagetables:559 bounce:0 [ 2836.641052] free:13875 free_pcp:937 free_cma:0 [ 2836.682355] CPU: 0 PID: 4017 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2836.690160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2836.699507] Call Trace: [ 2836.702129] dump_stack+0x1fc/0x2ef [ 2836.705758] warn_alloc.cold+0x7b/0x18f [ 2836.709736] ? zone_watermark_ok_safe+0x260/0x260 [ 2836.714583] ? alloc_pages_current+0x164/0x2a0 [ 2836.719172] __vmalloc_area_node+0x4fd/0x780 [ 2836.723583] ? __vmalloc_node_range+0x180/0x180 [ 2836.728254] ? _raw_spin_unlock+0x29/0x40 [ 2836.732397] ? __get_vm_area_node+0x2e2/0x3a0 [ 2836.736894] __vmalloc_node_range+0xed/0x180 [ 2836.741305] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2836.745624] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2836.750985] vmalloc_user+0x70/0xe0 [ 2836.754608] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2836.758928] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2836.763072] __vb2_queue_alloc+0x472/0xe60 [ 2836.767320] vb2_core_create_bufs+0x273/0x7e0 [ 2836.771812] ? __vb2_queue_free+0x870/0x870 [ 2836.776132] ? __video_do_ioctl+0x632/0xcd0 [ 2836.780455] ? __mutex_lock+0x368/0x1190 [ 2836.784518] vb2_create_bufs+0x332/0x620 [ 2836.788581] ? mark_held_locks+0xf0/0xf0 [ 2836.792641] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2836.797749] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2836.802942] v4l_create_bufs+0xb2/0x160 [ 2836.806917] __video_do_ioctl+0x49a/0xcd0 [ 2836.811068] ? v4l_querycap+0x340/0x340 [ 2836.815044] ? __might_fault+0x192/0x1d0 [ 2836.818405] Node 0 active_anon:109460kB inactive_anon:155988kB active_file:52kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87160kB dirty:80kB writeback:0kB shmem:211588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2836.819102] ? v4l_querycap+0x340/0x340 [ 2836.850890] video_usercopy+0x13f/0xfa0 [ 2836.854868] ? v4l_enumstd+0x60/0x60 [ 2836.858579] ? do_futex+0x171/0x1880 [ 2836.862295] ? mark_held_locks+0xf0/0xf0 [ 2836.866359] ? debug_check_no_obj_freed+0x201/0x490 [ 2836.871385] ? video_usercopy+0xfa0/0xfa0 [ 2836.875527] v4l2_ioctl+0x147/0x1a0 [ 2836.879150] ? video_devdata+0xa0/0xa0 [ 2836.883035] do_vfs_ioctl+0xcdb/0x12e0 [ 2836.886923] ? lock_downgrade+0x720/0x720 [ 2836.888402] Node 1 active_anon:1952kB inactive_anon:204356kB active_file:64kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:1804kB dirty:16kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2836.891067] ? check_preemption_disabled+0x41/0x280 [ 2836.891082] ? ioctl_preallocate+0x200/0x200 [ 2836.927900] ? __fget+0x356/0x510 [ 2836.931358] ? do_dup2+0x450/0x450 [ 2836.934895] ? __se_sys_futex+0x298/0x3b0 [ 2836.939049] ksys_ioctl+0x9b/0xc0 [ 2836.942502] __x64_sys_ioctl+0x6f/0xb0 [ 2836.946387] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2836.950966] do_syscall_64+0xf9/0x620 [ 2836.954768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2836.958687] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2836.959953] RIP: 0033:0x7ff26a4950f9 [ 2836.990127] Code: Bad RIP value. [ 2836.993486] RSP: 002b:00007ff2689e6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.001191] RAX: ffffffffffffffda RBX: 00007ff26a5b5050 RCX: 00007ff26a4950f9 [ 2837.008455] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2837.015729] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2837.023001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2837.028469] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2837.030263] R13: 00007ffc254bca1f R14: 00007ff2689e6300 R15: 0000000000022000 [ 2837.042792] Bluetooth: hci2: command 0x040f tx timeout [ 2837.049002] Mem-Info: [ 2837.051441] active_anon:27853 inactive_anon:90085 isolated_anon:0 [ 2837.051441] active_file:15 inactive_file:15 isolated_file:0 [ 2837.051441] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2837.051441] slab_reclaimable:13286 slab_unreclaimable:113690 [ 2837.051441] mapped:22210 shmem:104303 pagetables:559 bounce:0 [ 2837.051441] free:13990 free_pcp:882 free_cma:0 [ 2837.054194] Node 0 DMA32 free:18320kB min:35996kB low:44992kB high:53988kB active_anon:109460kB inactive_anon:152368kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2096kB bounce:0kB free_pcp:1616kB local_pcp:324kB free_cma:0kB [ 2837.119150] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.124765] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.131515] Node 0 active_anon:109460kB inactive_anon:155984kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2837.160953] Node 1 active_anon:1952kB inactive_anon:204356kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2837.189158] lowmem_reserve[]: 0 0 1 1 1 [ 2837.193162] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.219519] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.246111] lowmem_reserve[]: 0 0 0 0 0 [ 2837.250113] Node 1 Normal free:26756kB min:53876kB low:67344kB high:80812kB active_anon:1952kB inactive_anon:204356kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:140kB bounce:0kB free_pcp:1912kB local_pcp:1664kB free_cma:0kB [ 2837.284035] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2837.289073] Node 0 DMA32 free:18424kB min:35996kB low:44992kB high:53988kB active_anon:109460kB inactive_anon:152368kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2096kB bounce:0kB free_pcp:1636kB local_pcp:324kB free_cma:0kB [ 2837.325080] lowmem_reserve[]: 0 0 1 1 1 [ 2837.329621] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.335017] lowmem_reserve[]: 0 0 0 0 0 [ 2837.355649] lowmem_reserve[]: 0 0 0 0 0 [ 2837.363511] Node 1 Normal free:26756kB min:53876kB low:67344kB high:80812kB active_anon:1952kB inactive_anon:204356kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:140kB bounce:0kB free_pcp:1912kB local_pcp:1664kB free_cma:0kB [ 2837.392735] lowmem_reserve[]: 0 0 0 0 0 [ 2837.396932] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2837.412274] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2837.427569] Node 0 DMA32: 1330*4kB (UME) 610*8kB (UME) 320*16kB (UME) 81*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18424kB [ 2837.446819] Node 0 DMA32: 1330*4kB (UME) 610*8kB (UME) 320*16kB (UME) 81*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18424kB [ 2837.462744] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2837.478811] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2837.489950] Node 1 Normal: 585*4kB (UME) 360*8kB (ME) 154*16kB (UME) 74*32kB (UME) 25*64kB (UME) 6*128kB (M) 4*256kB (M) 2*512kB (UM) 4*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26756kB [ 2837.511574] Node 1 Normal: 585*4kB (UME) 360*8kB (ME) 154*16kB (UME) 74*32kB (UME) 25*64kB (UME) 6*128kB (M) 4*256kB (M) 2*512kB (UM) 4*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26756kB [ 2837.533420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.542356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.547539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.555470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.570924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.575794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.581972] 104333 total pagecache pages [ 2837.593662] 0 pages in swap cache [ 2837.600079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.606158] Swap cache stats: add 0, delete 0, find 0/0 [ 2837.615201] Free swap = 0kB [ 2837.616487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.618268] Total swap = 0kB [ 2837.633905] 2097051 pages RAM [ 2837.638390] 0 pages HighMem/MovableOnly [ 2837.642416] 369649 pages reserved [ 2837.651535] 0 pages cma reserved [ 2837.654982] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2837.660421] 104333 total pagecache pages [ 2837.669865] Killed process 2654 (syz-executor.2) total-vm:48512kB, anon-rss:440kB, file-rss:4kB, shmem-rss:0kB [ 2837.678637] 0 pages in swap cache [ 2837.702101] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2837.712511] device hsr_slave_1 left promiscuous mode [ 2837.724483] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2837.729281] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2837.736725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2837.746093] Call Trace: [ 2837.746394] Swap cache stats: add 0, delete 0, find 0/0 [ 2837.748686] dump_stack+0x1fc/0x2ef [ 2837.754060] Free swap = 0kB [ 2837.757639] dump_header+0x15d/0xc3f [ 2837.760627] Total swap = 0kB [ 2837.764325] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2837.764337] ? ___ratelimit+0x319/0x590 [ 2837.764353] oom_kill_process.cold+0x10/0x692 [ 2837.767341] 2097051 pages RAM [ 2837.772429] ? check_preemption_disabled+0x41/0x280 [ 2837.776398] 0 pages HighMem/MovableOnly [ 2837.780862] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2837.783955] 369649 pages reserved [ 2837.789024] out_of_memory+0x1072/0x1390 [ 2837.792979] 0 pages cma reserved [ 2837.798245] ? oom_killer_disable+0x270/0x270 [ 2837.798263] ? mutex_trylock+0x15f/0x1a0 [ 2837.817618] __alloc_pages_nodemask+0x23a2/0x2890 [ 2837.822476] ? find_get_entry+0x4cd/0x8a0 [ 2837.826633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2837.831502] alloc_pages_current+0x193/0x2a0 [ 2837.835914] filemap_fault+0x146e/0x2180 [ 2837.839989] ext4_filemap_fault+0x84/0xb0 [ 2837.844143] __do_fault+0x10b/0x4b0 [ 2837.847776] __handle_mm_fault+0x273b/0x41c0 [ 2837.852191] ? vm_insert_page+0x9c0/0x9c0 [ 2837.856354] ? check_preemption_disabled+0x41/0x280 [ 2837.861376] handle_mm_fault+0x436/0xb10 [ 2837.865448] __do_page_fault+0x68e/0xd60 [ 2837.869514] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2837.874529] ? spurious_fault+0x840/0x840 [ 2837.878679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2837.883528] ? page_fault+0x8/0x30 [ 2837.887066] page_fault+0x1e/0x30 [ 2837.890517] RIP: 0033:0x46b583 [ 2837.893708] Code: Bad RIP value. [ 2837.897067] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2837.902424] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2837.909690] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2837.916952] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2837.924219] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2837.931482] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2837.955890] device hsr_slave_0 left promiscuous mode [ 2838.062976] team0 (unregistering): Port device team_slave_1 removed [ 2838.080815] Mem-Info: [ 2838.083272] active_anon:27737 inactive_anon:90085 isolated_anon:0 [ 2838.083272] active_file:3 inactive_file:27 isolated_file:0 [ 2838.083272] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2838.083272] slab_reclaimable:13286 slab_unreclaimable:113111 [ 2838.083272] mapped:18635 shmem:104303 pagetables:546 bounce:0 [ 2838.083272] free:18743 free_pcp:467 free_cma:0 [ 2838.117214] team0 (unregistering): Port device team_slave_0 removed [ 2838.190105] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2838.201460] Node 0 active_anon:108996kB inactive_anon:155984kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72768kB dirty:0kB writeback:0kB shmem:211584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.259435] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2838.283512] Node 1 active_anon:1952kB inactive_anon:204356kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:0kB writeback:0kB shmem:205628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.433883] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.437398] bond0 (unregistering): Released all slaves [ 2838.481333] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2838.494452] Node 0 DMA32 free:35532kB min:35996kB low:44992kB high:53988kB active_anon:109396kB inactive_anon:152368kB active_file:528kB inactive_file:1060kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2044kB bounce:0kB free_pcp:1460kB local_pcp:524kB free_cma:0kB [ 2838.534968] lowmem_reserve[]: 0 0 1 1 1 [ 2838.548406] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.643677] lowmem_reserve[]: 0 0 0 0 0 [ 2838.647693] Node 1 Normal free:127444kB min:53876kB low:67344kB high:80812kB active_anon:1952kB inactive_anon:204356kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:140kB bounce:0kB free_pcp:1284kB local_pcp:0kB free_cma:0kB [ 2838.738527] lowmem_reserve[]: 0 0 0 0 0 [ 2838.743174] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10876kB [ 2838.811695] Node 0 DMA32: 1050*4kB (UME) 1094*8kB (UME) 404*16kB (UME) 143*32kB (UME) 186*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35896kB [ 2838.863189] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2838.934294] Node 1 Normal: 36*4kB (UME) 34*8kB (UE) 14*16kB (UME) 64*32kB (UME) 32*64kB (UME) 10*128kB (UM) 18*256kB (UM) 18*512kB (UM) 16*1024kB (UME) 8*2048kB (UM) 47*4096kB (UM) = 245120kB [ 2838.994818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.038790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.072200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.091292] IPVS: ftp: loaded support on port[0] = 21 [ 2839.127628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.176537] 107202 total pagecache pages [ 2839.180636] 0 pages in swap cache [ 2839.199854] Bluetooth: hci2: command 0x0419 tx timeout [ 2839.205923] Swap cache stats: add 0, delete 0, find 0/0 [ 2839.211303] Free swap = 0kB [ 2839.216017] Total swap = 0kB [ 2839.219037] 2097051 pages RAM [ 2839.228680] 0 pages HighMem/MovableOnly [ 2839.233023] 369649 pages reserved [ 2839.241287] 0 pages cma reserved [ 2839.246067] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2839.272344] Killed process 2652 (syz-executor.3) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 2839.904603] chnl_net:caif_netlink_parms(): no params data found [ 2840.061690] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.074000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2840.081378] device bridge_slave_0 entered promiscuous mode [ 2840.105177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2840.111588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2840.134517] device bridge_slave_1 entered promiscuous mode [ 2840.167432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2840.176943] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2840.201390] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2840.209784] team0: Port device team_slave_0 added [ 2840.215997] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2840.223902] team0: Port device team_slave_1 added [ 2840.244594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2840.250841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.278500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2840.291113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2840.299321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.330651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2840.350783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2840.358718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2840.395226] device hsr_slave_0 entered promiscuous mode [ 2840.403220] device hsr_slave_1 entered promiscuous mode [ 2840.414741] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2840.435074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2840.656088] bridge0: port 2(bridge_slave_1) entered blocking state [ 2840.662472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2840.669166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.675571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2840.753661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2840.764262] bridge0: port 2(bridge_slave_1) entered disabled state [ 2840.804191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2840.813900] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2840.822902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2840.830465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2840.839406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2840.849619] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2840.859706] 8021q: adding VLAN 0 to HW filter on device team0 [ 2840.871435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2840.881636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2840.892382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2840.906525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.912882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2840.928974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2840.939391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2840.951625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2840.962994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2840.969409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2841.639342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2841.646557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2841.660485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2841.668267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2842.032351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2842.040582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2842.050143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2842.061432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2842.069654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2842.078122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2842.086898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2842.432387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2842.439631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2842.448921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2842.825680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2842.833687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2842.841349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2842.852639] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2842.859557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2843.070468] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2843.080126] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2843.090336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2843.100399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2843.306581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2843.720502] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2843.730855] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2843.744464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2843.754257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2844.131514] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2844.140072] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2844.148226] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2844.481202] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2844.489365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2844.499912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2844.511196] device veth0_vlan entered promiscuous mode [ 2844.518499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2844.526703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2844.925559] device veth1_vlan entered promiscuous mode [ 2844.945794] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2844.956235] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2844.965293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2844.974914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2845.309931] device veth0_macvtap entered promiscuous mode [ 2845.316784] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2845.328793] device veth1_macvtap entered promiscuous mode [ 2845.340783] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2845.532731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2845.540188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2845.550584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2845.561493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2845.572274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.583158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.592277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.603876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.613781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.624307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.634172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.645598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.655489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.665976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.677176] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2845.685166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2845.694956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2845.704328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2845.732860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.744623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.754989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.765494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.775325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.788945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.798933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.809515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.819186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.829560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.840235] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2845.848085] batman_adv: batadv0: Interface activated: batadv_slave_1 06:51:34 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) 06:51:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) [ 2845.974213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2845.983147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2846.313094] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2846.320120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2846.329555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2846.338618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2846.346993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2846.356047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2846.363576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2846.371122] device bridge_slave_1 left promiscuous mode [ 2846.377210] bridge0: port 2(bridge_slave_1) entered disabled state [ 2846.385056] device bridge_slave_0 left promiscuous mode [ 2846.390518] bridge0: port 1(bridge_slave_0) entered disabled state [ 2846.399777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2846.406770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2846.414729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2846.421404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2846.429770] device bridge_slave_1 left promiscuous mode [ 2846.435771] bridge0: port 2(bridge_slave_1) entered disabled state [ 2846.443302] device bridge_slave_0 left promiscuous mode [ 2846.448764] bridge0: port 1(bridge_slave_0) entered disabled state [ 2846.459024] device veth1_macvtap left promiscuous mode [ 2846.464425] device veth0_macvtap left promiscuous mode [ 2846.469729] device veth1_vlan left promiscuous mode [ 2846.474860] device veth0_vlan left promiscuous mode [ 2846.480126] device veth1_macvtap left promiscuous mode [ 2846.485549] device veth0_macvtap left promiscuous mode [ 2846.490850] device veth1_vlan left promiscuous mode [ 2846.496245] device veth0_vlan left promiscuous mode [ 2854.879817] device hsr_slave_1 left promiscuous mode [ 2854.887352] device hsr_slave_0 left promiscuous mode [ 2854.902709] team0 (unregistering): Port device team_slave_1 removed [ 2854.912435] team0 (unregistering): Port device team_slave_0 removed [ 2854.923711] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2854.933546] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2854.966406] bond0 (unregistering): Released all slaves [ 2855.006763] device hsr_slave_1 left promiscuous mode [ 2855.014328] device hsr_slave_0 left promiscuous mode [ 2855.029153] team0 (unregistering): Port device team_slave_1 removed [ 2855.041248] team0 (unregistering): Port device team_slave_0 removed [ 2855.050200] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2855.062555] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2855.092293] bond0 (unregistering): Released all slaves [ 2855.104375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 06:51:43 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}, {0x0}], 0x6, 0x0) 06:51:43 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:51:43 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) [ 2855.149387] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2855.159767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2855.167252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2855.175806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:51:43 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) 06:51:43 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r15 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x100}, @generic={0xc1, 0x2, 0x6, 0xff, 0x12}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000380)=""/140, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, r2, r3, r4, 0x1, r5, r14, r15, 0xffffffffffffffff]}, 0x80) 06:51:43 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:51:43 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000400)=""/20, 0x14}], 0x5, 0x0) 06:51:43 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x0, 0x8000}}) 06:51:43 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000800)=""/57, 0x39}], 0x4, 0x0) 06:51:43 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) 06:51:43 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/61, 0x3d}], 0x3, 0x0) 06:51:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) [ 2856.696882] IPVS: ftp: loaded support on port[0] = 21 [ 2856.723042] IPVS: ftp: loaded support on port[0] = 21 [ 2857.039494] chnl_net:caif_netlink_parms(): no params data found [ 2857.080058] chnl_net:caif_netlink_parms(): no params data found [ 2857.147823] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.164698] bridge0: port 1(bridge_slave_0) entered disabled state [ 2857.176061] device bridge_slave_0 entered promiscuous mode [ 2857.199645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.207341] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.216567] device bridge_slave_1 entered promiscuous mode [ 2857.223826] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.231116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2857.238664] device bridge_slave_0 entered promiscuous mode [ 2857.262234] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.269204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.278257] device bridge_slave_1 entered promiscuous mode [ 2857.287486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2857.316217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2857.326852] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2857.352450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2857.361921] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2857.369955] team0: Port device team_slave_0 added [ 2857.392046] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2857.401728] team0: Port device team_slave_1 added [ 2857.407492] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2857.416831] team0: Port device team_slave_0 added [ 2857.439044] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2857.447723] team0: Port device team_slave_1 added [ 2857.454961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2857.462223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.488459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2857.515706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2857.522986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.550509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2857.563316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2857.569671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.596622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2857.612545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2857.621925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2857.629876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2857.637590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.663804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2857.694174] device hsr_slave_0 entered promiscuous mode [ 2857.701608] device hsr_slave_1 entered promiscuous mode [ 2857.712768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2857.721574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2857.729140] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2857.738085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2857.771003] device hsr_slave_0 entered promiscuous mode [ 2857.777274] device hsr_slave_1 entered promiscuous mode [ 2857.804803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2857.813093] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2857.895763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.902280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2857.908967] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.915389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2858.014164] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2858.020994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2858.027308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2858.036439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2858.046341] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2858.059969] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2858.080632] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2858.088407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2858.095475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2858.104403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2858.118548] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2858.127278] 8021q: adding VLAN 0 to HW filter on device team0 [ 2858.147212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2858.155850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2858.165328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2858.173991] bridge0: port 1(bridge_slave_0) entered blocking state [ 2858.180423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2858.199442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2858.209794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2858.223530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2858.232825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2858.239237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2858.255132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2858.269390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2858.282033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2858.290352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2858.302165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2858.316299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2858.328448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2858.337329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2858.354131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2858.363282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2858.376193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2858.384326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2858.398947] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2858.401331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2858.417576] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2858.425429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2858.434121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2858.442926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2858.450793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2858.461802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2858.472852] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2858.478924] 8021q: adding VLAN 0 to HW filter on device team0 [ 2858.488297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2858.497355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2858.509498] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2858.516674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2858.529400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2858.538039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2858.552202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2858.559928] bridge0: port 1(bridge_slave_0) entered blocking state [ 2858.566349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2858.587385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2858.594945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2858.608741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2858.617164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2858.632452] bridge0: port 2(bridge_slave_1) entered blocking state [ 2858.638813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2858.651277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2858.659202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2858.671159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2858.687820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2858.695242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2858.704090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2858.712869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2858.729752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2858.740381] Bluetooth: hci4: command 0x0409 tx timeout [ 2858.745740] Bluetooth: hci3: command 0x0409 tx timeout [ 2858.746254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2858.758696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2858.772533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2858.785112] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2858.795737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2858.807008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2858.816837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2858.832255] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2858.842774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2858.856102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2858.863372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2858.875397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2858.884858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2858.901745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2858.909834] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2858.921171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2859.004669] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2859.019247] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2859.026846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2859.045656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2859.058612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2859.071065] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2859.082969] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2859.090801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2859.098795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2859.196534] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2859.214106] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2859.227726] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2859.237134] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2859.252371] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2859.260302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2859.274036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2859.287281] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2859.306661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2859.318547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2859.331213] device veth0_vlan entered promiscuous mode [ 2859.345858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2859.359538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2859.375430] device veth1_vlan entered promiscuous mode [ 2859.385985] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2859.403438] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2859.437410] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2859.453723] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2859.468397] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2859.477440] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2859.493872] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2859.509385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2859.517696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2859.530266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2859.538096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2859.557565] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2859.567265] device veth0_macvtap entered promiscuous mode [ 2859.578276] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2859.586780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2859.598917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2859.607703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2859.622391] device veth0_vlan entered promiscuous mode [ 2859.638945] device veth1_macvtap entered promiscuous mode [ 2859.647995] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2859.659393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2859.667513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2859.679731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2859.723944] device veth1_vlan entered promiscuous mode [ 2859.734513] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2859.752240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2859.771943] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2859.783761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2859.792976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2859.803995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2859.813993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2859.824560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2859.834420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2859.850601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2859.865599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2859.875853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2859.891356] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2859.898339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2859.916710] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2859.928686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2859.938606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2859.953916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2859.965385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2859.978416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2859.994911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.005995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.024304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.037214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.049224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.060419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.070386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.081496] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2860.088396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2860.098536] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2860.115364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2860.123419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2860.132091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2860.144179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2860.157678] device veth0_macvtap entered promiscuous mode [ 2860.165183] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2860.175509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2860.191903] device veth1_macvtap entered promiscuous mode [ 2860.203376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2860.219508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2860.236565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.257516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.277640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.288227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.302815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.314891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.327789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.340117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.349239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.366889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.378208] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2860.391344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2860.403462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2860.413770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2860.433607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.449449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.459551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.475787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.485889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.502361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.515259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.527806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.540766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.554807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.568725] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2860.584016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2860.596378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2860.607437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2860.823320] Bluetooth: hci3: command 0x041b tx timeout [ 2860.829301] Bluetooth: hci4: command 0x041b tx timeout [ 2860.846601] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2860.859273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2860.872191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2860.922579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2860.942244] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2860.956377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2860.966921] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2860.974295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2860.985387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2861.009097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2861.010440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.027343] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2861.056626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2861.090159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2861.104117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.112257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:51:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) 06:51:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 06:51:50 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) [ 2862.834145] oom_reaper: reaped process 4377 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 2862.877164] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2862.895065] systemd-journal cpuset=/ mems_allowed=0-1 [ 2862.901117] Bluetooth: hci4: command 0x040f tx timeout [ 2862.906489] Bluetooth: hci3: command 0x040f tx timeout [ 2862.920324] CPU: 0 PID: 3219 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2862.928210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2862.937567] Call Trace: [ 2862.940155] dump_stack+0x1fc/0x2ef [ 2862.943780] dump_header+0x15d/0xc3f [ 2862.947496] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2862.952593] ? ___ratelimit+0x319/0x590 [ 2862.956567] oom_kill_process.cold+0x10/0x692 [ 2862.961078] ? check_preemption_disabled+0x41/0x280 [ 2862.966099] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2862.971368] out_of_memory+0x1072/0x1390 [ 2862.975449] ? oom_killer_disable+0x270/0x270 [ 2862.979587] syz-executor.5: vmalloc: allocation failure, allocated 1014489088 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2862.980233] ? mutex_trylock+0x15f/0x1a0 [ 2862.994094] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2862.998063] __alloc_pages_nodemask+0x23a2/0x2890 [ 2863.008024] ? find_get_entry+0x4cd/0x8a0 [ 2863.012193] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2863.017044] alloc_pages_current+0x193/0x2a0 [ 2863.021440] filemap_fault+0x146e/0x2180 [ 2863.025501] ext4_filemap_fault+0x84/0xb0 [ 2863.029640] __do_fault+0x10b/0x4b0 [ 2863.033256] __handle_mm_fault+0x273b/0x41c0 [ 2863.037655] ? vm_insert_page+0x9c0/0x9c0 [ 2863.041801] ? check_preemption_disabled+0x41/0x280 [ 2863.046809] handle_mm_fault+0x436/0xb10 [ 2863.050862] __do_page_fault+0x68e/0xd60 [ 2863.054917] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2863.059926] ? spurious_fault+0x840/0x840 [ 2863.064065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2863.068898] ? page_fault+0x8/0x30 [ 2863.072425] page_fault+0x1e/0x30 [ 2863.075864] RIP: 0033:0x7f0dbd68b2e3 [ 2863.079568] Code: Bad RIP value. [ 2863.082919] RSP: 002b:00007ffcbb05c678 EFLAGS: 00010246 [ 2863.088264] RAX: 0000000000000001 RBX: 000055e3c64131e0 RCX: 00007f0dbd68b2e3 [ 2863.095520] RDX: 0000000000000013 RSI: 00007ffcbb05c680 RDI: 000000000000000b [ 2863.102773] RBP: 00007ffcbb05c870 R08: 00007ffcbb101000 R09: 000002ddd047c5da [ 2863.110027] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbb05c680 [ 2863.117282] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d125831bc8 [ 2863.124558] CPU: 1 PID: 4377 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2863.132360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2863.139061] Mem-Info: [ 2863.141708] Call Trace: [ 2863.141730] dump_stack+0x1fc/0x2ef [ 2863.141748] warn_alloc.cold+0x7b/0x18f [ 2863.141767] ? zone_watermark_ok_safe+0x260/0x260 [ 2863.144174] active_anon:27974 inactive_anon:90088 isolated_anon:0 [ 2863.144174] active_file:12 inactive_file:12 isolated_file:0 [ 2863.144174] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2863.144174] slab_reclaimable:13436 slab_unreclaimable:114341 [ 2863.144174] mapped:22282 shmem:104308 pagetables:580 bounce:0 [ 2863.144174] free:13893 free_pcp:278 free_cma:0 [ 2863.146728] ? retint_kernel+0x2d/0x2d [ 2863.150365] Node 0 active_anon:109600kB inactive_anon:155980kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2863.154347] __vmalloc_area_node+0x4fd/0x780 [ 2863.159215] Node 1 active_anon:2296kB inactive_anon:204372kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2060kB dirty:0kB writeback:0kB shmem:205660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2863.192491] ? __vmalloc_node_range+0x180/0x180 [ 2863.192506] ? _raw_spin_unlock+0x29/0x40 [ 2863.192519] ? __get_vm_area_node+0x2e2/0x3a0 [ 2863.192537] __vmalloc_node_range+0xed/0x180 [ 2863.196405] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2863.224149] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2863.224165] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2863.224183] vmalloc_user+0x70/0xe0 [ 2863.230824] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2863.255793] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2863.255808] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2863.255824] __vb2_queue_alloc+0x472/0xe60 [ 2863.260488] Node 0 DMA32 free:17956kB min:35996kB low:44992kB high:53988kB active_anon:109600kB inactive_anon:152364kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2172kB bounce:0kB free_pcp:612kB local_pcp:268kB free_cma:0kB [ 2863.264614] vb2_core_create_bufs+0x273/0x7e0 [ 2863.269066] lowmem_reserve[]: 0 0 1 1 1 [ 2863.273460] ? __vb2_queue_free+0x870/0x870 [ 2863.299817] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2863.304141] ? __video_do_ioctl+0x632/0xcd0 [ 2863.309488] lowmem_reserve[]: 0 0 0 0 0 [ 2863.313087] ? pi_state_update_owner+0x450/0x450 [ 2863.318073] Node 1 Normal free:26728kB min:53876kB low:67344kB high:80812kB active_anon:2296kB inactive_anon:204372kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:148kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 2863.322395] ? __mutex_lock+0x368/0x1190 [ 2863.322413] vb2_create_bufs+0x332/0x620 [ 2863.322431] ? mark_held_locks+0xf0/0xf0 [ 2863.326545] lowmem_reserve[]: 0 0 0 0 0 [ 2863.330767] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2863.330780] ? futex_wait_queue_me+0x404/0x5e0 [ 2863.330795] ? pi_state_update_owner+0x450/0x450 [ 2863.330809] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2863.330822] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2863.330841] v4l_create_bufs+0xb2/0x160 [ 2863.330859] __video_do_ioctl+0x49a/0xcd0 [ 2863.330881] ? v4l_querycap+0x340/0x340 [ 2863.330897] ? __might_fault+0x192/0x1d0 [ 2863.330915] ? v4l_querycap+0x340/0x340 [ 2863.330931] video_usercopy+0x13f/0xfa0 [ 2863.330950] ? v4l_enumstd+0x60/0x60 [ 2863.330963] ? do_futex+0x171/0x1880 [ 2863.330978] ? mark_held_locks+0xf0/0xf0 [ 2863.330999] ? debug_check_no_obj_freed+0x201/0x490 [ 2863.331022] ? video_usercopy+0xfa0/0xfa0 [ 2863.331035] v4l2_ioctl+0x147/0x1a0 [ 2863.331048] ? video_devdata+0xa0/0xa0 [ 2863.331064] do_vfs_ioctl+0xcdb/0x12e0 [ 2863.331080] ? lock_downgrade+0x720/0x720 [ 2863.331094] ? check_preemption_disabled+0x41/0x280 [ 2863.331109] ? ioctl_preallocate+0x200/0x200 [ 2863.331128] ? __fget+0x356/0x510 [ 2863.331145] ? do_dup2+0x450/0x450 [ 2863.331160] ? __se_sys_futex+0x298/0x3b0 [ 2863.331182] ksys_ioctl+0x9b/0xc0 [ 2863.331198] __x64_sys_ioctl+0x6f/0xb0 [ 2863.331213] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2863.331227] do_syscall_64+0xf9/0x620 [ 2863.331246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2863.331258] RIP: 0033:0x7ff26a4950f9 [ 2863.331271] Code: Bad RIP value. [ 2863.331279] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2863.331292] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2863.331300] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2863.331308] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2863.331316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2863.331324] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2863.350345] Mem-Info: [ 2863.372029] Node 0 DMA: 0*4kB 6*8kB (UME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10880kB [ 2863.381337] active_anon:27974 inactive_anon:90088 isolated_anon:0 [ 2863.381337] active_file:12 inactive_file:12 isolated_file:0 [ 2863.381337] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2863.381337] slab_reclaimable:13436 slab_unreclaimable:114341 [ 2863.381337] mapped:22282 shmem:104308 pagetables:580 bounce:0 [ 2863.381337] free:13893 free_pcp:278 free_cma:0 [ 2863.403797] Node 0 DMA32: 1291*4kB (ME) 662*8kB (ME) 339*16kB (UME) 55*32kB (UME) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18028kB [ 2863.416128] Node 0 active_anon:109600kB inactive_anon:155980kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2863.447426] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2863.460543] Node 1 active_anon:2296kB inactive_anon:204372kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2060kB dirty:0kB writeback:0kB shmem:205660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2863.468054] Node 1 Normal: 658*4kB (ME) 476*8kB (UME) 144*16kB (UME) 72*32kB (UME) 19*64kB (ME) 9*128kB (M) 4*256kB (M) 2*512kB (UM) 3*1024kB (ME) 2*2048kB (M) 1*4096kB (M) = 26728kB [ 2863.472451] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2863.477831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2863.482378] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2863.486440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2863.488399] Node 0 DMA32 free:17956kB min:35996kB low:44992kB high:53988kB active_anon:109600kB inactive_anon:152364kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2172kB bounce:0kB free_pcp:612kB local_pcp:344kB free_cma:0kB [ 2863.498344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2863.506785] lowmem_reserve[]: 0 0 1 1 1 [ 2863.508601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2863.512452] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2863.522973] 104332 total pagecache pages [ 2863.530262] lowmem_reserve[]: 0 0 0 0 0 [ 2863.537350] 0 pages in swap cache [ 2863.545738] Node 1 Normal free:26728kB min:53876kB low:67344kB high:80812kB active_anon:2296kB inactive_anon:204372kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:148kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 2863.554990] Swap cache stats: add 0, delete 0, find 0/0 [ 2863.565101] lowmem_reserve[]: 0 0 0 0 0 [ 2863.565935] Free swap = 0kB [ 2863.569400] Node 0 DMA: 0*4kB 6*8kB (UME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10880kB [ 2863.577979] Total swap = 0kB [ 2863.587296] Node 0 DMA32: 1291*4kB (ME) 662*8kB (ME) 339*16kB (UME) 55*32kB (UME) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18028kB [ 2863.598414] 2097051 pages RAM [ 2863.607882] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2863.608995] 0 pages HighMem/MovableOnly [ 2863.616354] Node 1 Normal: 658*4kB (ME) 476*8kB (UME) 144*16kB (UME) 72*32kB (UME) 19*64kB (ME) 9*128kB (M) 4*256kB (M) 2*512kB (UM) 3*1024kB (ME) 2*2048kB (M) 1*4096kB (M) = 26728kB [ 2863.616442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2863.616453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2863.616466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2863.633155] 369649 pages reserved [ 2863.644837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2863.665679] 0 pages cma reserved [ 2863.703635] 104332 total pagecache pages [ 2863.707842] Out of memory (oom_kill_allocating_task): Kill process 3219 (systemd-journal) score 0 or sacrifice child [ 2863.738635] 0 pages in swap cache [ 2863.753244] Killed process 3219 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:4kB, shmem-rss:1960kB [ 2863.778256] Swap cache stats: add 0, delete 0, find 0/0 [ 2863.796960] oom_reaper: reaped process 3219 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1960kB [ 2863.823986] Free swap = 0kB [ 2863.831039] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2863.844014] Total swap = 0kB [ 2863.877570] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2863.915846] 2097051 pages RAM [ 2863.927815] CPU: 0 PID: 8074 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2863.959748] 0 pages HighMem/MovableOnly [ 2863.962467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2863.965460] 369649 pages reserved [ 2863.965468] 0 pages cma reserved [ 2863.980356] Call Trace: [ 2863.980375] dump_stack+0x1fc/0x2ef [ 2863.980391] dump_header+0x15d/0xc3f [ 2863.980407] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2863.980419] ? ___ratelimit+0x319/0x590 [ 2863.980435] oom_kill_process.cold+0x10/0x692 [ 2863.980451] ? check_preemption_disabled+0x41/0x280 [ 2863.980470] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2864.203893] out_of_memory+0x1072/0x1390 [ 2864.207971] ? oom_killer_disable+0x270/0x270 [ 2864.212475] ? mutex_trylock+0x15f/0x1a0 [ 2864.216539] __alloc_pages_nodemask+0x23a2/0x2890 [ 2864.221395] ? find_get_entry+0x4cd/0x8a0 [ 2864.225552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.230508] alloc_pages_current+0x193/0x2a0 [ 2864.234919] filemap_fault+0x146e/0x2180 [ 2864.238992] ext4_filemap_fault+0x84/0xb0 [ 2864.243138] __do_fault+0x10b/0x4b0 [ 2864.246768] __handle_mm_fault+0x273b/0x41c0 [ 2864.251183] ? vm_insert_page+0x9c0/0x9c0 [ 2864.255327] ? __fget+0x356/0x510 [ 2864.258797] ? check_preemption_disabled+0x41/0x280 [ 2864.263820] handle_mm_fault+0x436/0xb10 [ 2864.267893] __do_page_fault+0x68e/0xd60 [ 2864.271959] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2864.276978] ? spurious_fault+0x840/0x840 [ 2864.281124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2864.285967] ? page_fault+0x8/0x30 [ 2864.289509] page_fault+0x1e/0x30 [ 2864.292960] RIP: 0033:0x403ace [ 2864.296148] Code: Bad RIP value. [ 2864.299506] RSP: 002b:000000c000069778 EFLAGS: 00010246 [ 2864.304867] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 2864.312137] RDX: 0000000000000080 RSI: 000000c000069840 RDI: 0000000000000004 [ 2864.319402] RBP: 000000c0000697c0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.326670] R10: 00000000000003e7 R11: 0000000000000246 R12: 000000c000069850 [ 2864.334114] R13: 0000000000000000 R14: 000000c0000069c0 R15: 0000029cd27f700c [ 2864.363552] Mem-Info: [ 2864.366003] active_anon:27873 inactive_anon:90088 isolated_anon:0 [ 2864.366003] active_file:12 inactive_file:12 isolated_file:0 [ 2864.366003] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2864.366003] slab_reclaimable:13436 slab_unreclaimable:113868 [ 2864.366003] mapped:21782 shmem:104308 pagetables:543 bounce:0 [ 2864.366003] free:14670 free_pcp:154 free_cma:0 [ 2864.409670] Node 0 active_anon:109600kB inactive_anon:155980kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:211572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2864.447506] Node 1 active_anon:1892kB inactive_anon:204372kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:205660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2864.486139] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2864.522232] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2864.527280] Node 0 DMA32 free:20064kB min:35996kB low:44992kB high:53988kB active_anon:109600kB inactive_anon:152364kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2172kB bounce:0kB free_pcp:480kB local_pcp:240kB free_cma:0kB [ 2864.561784] lowmem_reserve[]: 0 0 1 1 1 [ 2864.565776] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2864.595291] lowmem_reserve[]: 0 0 0 0 0 [ 2864.599361] Node 1 Normal free:42828kB min:53876kB low:67344kB high:80812kB active_anon:1892kB inactive_anon:204372kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:0kB bounce:0kB free_pcp:1300kB local_pcp:0kB free_cma:0kB [ 2864.631756] lowmem_reserve[]: 0 0 0 0 0 [ 2864.635756] Node 0 DMA: 0*4kB 6*8kB (UME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10880kB [ 2864.651987] Node 0 DMA32: 1298*4kB (ME) 787*8kB (UME) 344*16kB (UME) 58*32kB (UME) 11*64kB (UM) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20064kB [ 2864.669366] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2864.681605] Node 1 Normal: 488*4kB (UME) 468*8kB (UME) 145*16kB (UME) 77*32kB (UME) 25*64kB (UME) 10*128kB (UM) 6*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 3*2048kB (UM) 17*4096kB (UM) = 96816kB [ 2864.699620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2864.712960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2864.722659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2864.732550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2864.742119] 104713 total pagecache pages [ 2864.746787] 0 pages in swap cache [ 2864.751814] Swap cache stats: add 0, delete 0, find 0/0 [ 2864.757249] Free swap = 0kB [ 2864.760470] Total swap = 0kB [ 2864.763482] 2097051 pages RAM [ 2864.768235] 0 pages HighMem/MovableOnly [ 2864.772866] 369649 pages reserved [ 2864.776889] 0 pages cma reserved [ 2864.780976] Out of memory (oom_kill_allocating_task): Kill process 8074 (syz-fuzzer) score 0 or sacrifice child [ 2864.792271] Killed process 4399 (syz-executor.2) total-vm:48512kB, anon-rss:432kB, file-rss:4kB, shmem-rss:0kB [ 2864.951736] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2864.972347] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2864.981940] Bluetooth: hci4: command 0x0419 tx timeout [ 2865.023854] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2865.050595] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2865.057442] systemd[1]: Stopped Journal Service. [ 2865.146920] systemd[1]: Starting Journal Service... [ 2865.274801] systemd-journald[4947]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2865.843658] systemd[1]: Started Journal Service. [ 2868.477053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2868.495580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2868.513577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2868.522586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2868.535858] device bridge_slave_1 left promiscuous mode [ 2868.544498] bridge0: port 2(bridge_slave_1) entered disabled state [ 2868.557268] device bridge_slave_0 left promiscuous mode [ 2868.564628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2868.583746] device veth1_macvtap left promiscuous mode [ 2868.593058] device veth0_macvtap left promiscuous mode [ 2868.600731] device veth1_vlan left promiscuous mode [ 2868.605807] device veth0_vlan left promiscuous mode 06:51:58 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}], 0x2, 0x0) 06:51:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xfffffffffffffff8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x4, 0x1, 0x2, "99a21307695b8f671f3f94159320c035193248cd88dd0101e62d66bc23dd10ba", 0x31364d59}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x2000000, 0x1, 0x2, 0x0, 0x3}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:51:58 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:51:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) (async) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) (async) 06:51:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) (async) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) (async) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) r15 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x100}, @generic={0xc1, 0x2, 0x6, 0xff, 0x12}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000380)=""/140, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, r2, r3, r4, 0x1, r5, r14, r15, 0xffffffffffffffff]}, 0x80) 06:51:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 06:51:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sdr={0x0, 0x8000}}) 06:51:59 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:51:59 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}], 0x1, 0x0) 06:51:59 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:51:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sdr={0x0, 0x8000}}) 06:51:59 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) [ 2874.177730] Bluetooth: hci3: command 0x0409 tx timeout [ 2876.256762] Bluetooth: hci3: command 0x041b tx timeout [ 2876.291228] device hsr_slave_1 left promiscuous mode [ 2876.300938] device hsr_slave_0 left promiscuous mode [ 2876.321019] team0 (unregistering): Port device team_slave_1 removed [ 2876.335558] team0 (unregistering): Port device team_slave_0 removed [ 2876.348509] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2876.360735] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2876.401060] bond0 (unregistering): Released all slaves [ 2876.420247] IPVS: ftp: loaded support on port[0] = 21 [ 2876.711766] chnl_net:caif_netlink_parms(): no params data found [ 2876.801878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2876.813231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2876.825489] device bridge_slave_0 entered promiscuous mode [ 2876.838723] bridge0: port 2(bridge_slave_1) entered blocking state [ 2876.846001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2876.859929] device bridge_slave_1 entered promiscuous mode [ 2876.891967] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2876.920268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2876.989301] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2877.009784] team0: Port device team_slave_0 added [ 2877.029265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2877.050924] team0: Port device team_slave_1 added [ 2877.109785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2877.116057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2877.209081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2877.249722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2877.264620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2877.351537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2877.381008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2877.393494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2877.432506] device hsr_slave_0 entered promiscuous mode [ 2877.451510] device hsr_slave_1 entered promiscuous mode [ 2877.472521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2877.493935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2877.715425] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2877.826543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2877.835744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2877.846005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2877.853066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2877.870002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2877.884563] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2877.892561] 8021q: adding VLAN 0 to HW filter on device team0 [ 2877.908373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2877.915405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2877.930261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2877.943144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2877.949549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2877.966576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2877.975443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2877.984224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2877.993100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2878.001999] bridge0: port 2(bridge_slave_1) entered blocking state [ 2878.008400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2878.019649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2878.026969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2878.039245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2878.046095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2878.059298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2878.066273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2878.076129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2878.091983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2878.102259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2878.112330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2878.123347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2878.137441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2878.148306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2878.155146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2878.164606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2878.179993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2878.192204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2878.204129] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2878.214426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2878.269790] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2878.285410] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2878.292144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2878.304414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2878.316893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2878.336411] Bluetooth: hci3: command 0x040f tx timeout [ 2878.372269] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2878.385684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2878.451709] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2878.459219] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2878.466121] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2878.485071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2878.496005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2878.510122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2878.522034] device veth0_vlan entered promiscuous mode [ 2878.539938] device veth1_vlan entered promiscuous mode [ 2878.618875] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2878.633152] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2878.664166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2878.673558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2878.699460] device veth0_macvtap entered promiscuous mode [ 2878.705975] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2878.739138] device veth1_macvtap entered promiscuous mode [ 2878.745900] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2879.068657] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2879.080614] systemd-journal cpuset=/ mems_allowed=0-1 [ 2879.085819] CPU: 1 PID: 4947 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2879.093690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2879.103037] Call Trace: [ 2879.105888] dump_stack+0x1fc/0x2ef [ 2879.109522] dump_header+0x15d/0xc3f [ 2879.113239] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2879.118336] ? ___ratelimit+0x319/0x590 [ 2879.122309] oom_kill_process.cold+0x10/0x692 [ 2879.126809] ? check_preemption_disabled+0x41/0x280 [ 2879.131831] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2879.137137] out_of_memory+0x1072/0x1390 [ 2879.141216] ? oom_killer_disable+0x270/0x270 [ 2879.145714] ? mutex_trylock+0x15f/0x1a0 [ 2879.149879] __alloc_pages_nodemask+0x23a2/0x2890 [ 2879.154739] ? find_get_entry+0x4cd/0x8a0 [ 2879.158900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2879.163769] alloc_pages_current+0x193/0x2a0 [ 2879.168179] filemap_fault+0x146e/0x2180 [ 2879.172249] ext4_filemap_fault+0x84/0xb0 [ 2879.176394] __do_fault+0x10b/0x4b0 [ 2879.180020] __handle_mm_fault+0x273b/0x41c0 [ 2879.184434] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2879.189018] ? vm_insert_page+0x9c0/0x9c0 [ 2879.193162] ? debug_object_active_state+0x254/0x330 [ 2879.198273] ? check_preemption_disabled+0x41/0x280 [ 2879.203294] handle_mm_fault+0x436/0xb10 [ 2879.207358] __do_page_fault+0x68e/0xd60 [ 2879.211425] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2879.216463] ? spurious_fault+0x840/0x840 [ 2879.220613] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2879.225463] ? page_fault+0x8/0x30 [ 2879.229003] page_fault+0x1e/0x30 [ 2879.232457] RIP: 0033:0x7f47eeca2e30 [ 2879.236167] Code: Bad RIP value. [ 2879.239523] RSP: 002b:00007fff752b7bc8 EFLAGS: 00010202 [ 2879.244882] RAX: 00000000b279cfcd RBX: 00005627b9eff250 RCX: 0000000000000000 [ 2879.252144] RDX: 00007fff752b7be0 RSI: 00000000b279cfcd RDI: 00007fff752b7bf0 [ 2879.259406] RBP: 00000000b279cfcd R08: 0000000000989680 R09: 000002e23a31d9c8 [ 2879.266667] R10: 000335cc56f3748e R11: 0000000000000202 R12: 00000000b02a8873 [ 2879.273931] R13: 00007f47eecca147 R14: 00007f47eed27800 R15: 0005f5d1268a1882 [ 2879.301516] Mem-Info: [ 2879.318421] active_anon:28397 inactive_anon:90085 isolated_anon:0 [ 2879.318421] active_file:0 inactive_file:5 isolated_file:0 [ 2879.318421] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2879.318421] slab_reclaimable:13515 slab_unreclaimable:113523 [ 2879.318421] mapped:22137 shmem:104303 pagetables:556 bounce:0 [ 2879.318421] free:25120 free_pcp:107 free_cma:0 [ 2879.432512] Node 0 active_anon:111396kB inactive_anon:148504kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87044kB dirty:12kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2879.521973] Node 1 active_anon:2192kB inactive_anon:211836kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1504kB dirty:16kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2879.556631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2879.564082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2879.636396] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2879.762505] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2879.783253] Node 0 DMA32 free:35388kB min:35996kB low:44992kB high:53988kB active_anon:111396kB inactive_anon:144888kB active_file:44kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2084kB bounce:0kB free_pcp:484kB local_pcp:236kB free_cma:0kB [ 2879.857737] lowmem_reserve[]: 0 0 1 1 1 [ 2879.861753] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2879.981612] lowmem_reserve[]: 0 0 0 0 0 [ 2879.985728] Node 1 Normal free:53780kB min:53876kB low:67344kB high:80812kB active_anon:2192kB inactive_anon:211836kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2880.030860] lowmem_reserve[]: 0 0 0 0 0 [ 2880.034870] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 4*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 2880.083413] Node 0 DMA32: 1512*4kB (ME) 909*8kB (ME) 386*16kB (ME) 133*32kB (ME) 35*64kB (ME) 13*128kB (UM) 3*256kB (UM) 0*512kB 3*1024kB (U) 0*2048kB 1*4096kB (M) = 35592kB [ 2880.135618] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2880.178824] Node 1 Normal: 626*4kB (UME) 461*8kB (ME) 154*16kB (UME) 86*32kB (ME) 32*64kB (UME) 13*128kB (UM) 4*256kB (UM) 0*512kB 1*1024kB (E) 2*2048kB (UM) 8*4096kB (U) = 54032kB [ 2880.222853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2880.251918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2880.294242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2880.332901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2880.379493] 104331 total pagecache pages [ 2880.383580] 0 pages in swap cache [ 2880.412496] Swap cache stats: add 0, delete 0, find 0/0 [ 2880.415974] Bluetooth: hci3: command 0x0419 tx timeout [ 2880.427261] Free swap = 0kB [ 2880.430744] Total swap = 0kB [ 2880.433772] 2097051 pages RAM [ 2880.455690] 0 pages HighMem/MovableOnly [ 2880.479379] 369649 pages reserved [ 2880.482845] 0 pages cma reserved [ 2880.511263] Out of memory (oom_kill_allocating_task): Kill process 4947 (systemd-journal) score 0 or sacrifice child [ 2880.546655] Killed process 4947 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1288kB [ 2880.601916] oom_reaper: reaped process 4947 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1424kB [ 2880.636338] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2880.687401] in:imklog cpuset=/ mems_allowed=0-1 [ 2880.692222] CPU: 0 PID: 3993 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2880.699578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2880.708925] Call Trace: [ 2880.711511] dump_stack+0x1fc/0x2ef [ 2880.715135] dump_header+0x15d/0xc3f [ 2880.718849] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2880.723946] ? ___ratelimit+0x319/0x590 [ 2880.727952] oom_kill_process.cold+0x10/0x692 [ 2880.732468] ? check_preemption_disabled+0x41/0x280 [ 2880.737493] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2880.742849] out_of_memory+0x1072/0x1390 [ 2880.746920] ? oom_killer_disable+0x270/0x270 [ 2880.751418] ? mutex_trylock+0x15f/0x1a0 [ 2880.755478] __alloc_pages_nodemask+0x23a2/0x2890 [ 2880.760328] ? find_get_entry+0x4cd/0x8a0 [ 2880.764480] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2880.769344] alloc_pages_current+0x193/0x2a0 [ 2880.773750] filemap_fault+0x146e/0x2180 [ 2880.777822] ext4_filemap_fault+0x84/0xb0 [ 2880.781972] __do_fault+0x10b/0x4b0 [ 2880.785606] __handle_mm_fault+0x273b/0x41c0 [ 2880.790017] ? vm_insert_page+0x9c0/0x9c0 [ 2880.794164] ? lock_downgrade+0x720/0x720 [ 2880.798323] ? check_preemption_disabled+0x41/0x280 [ 2880.803344] handle_mm_fault+0x436/0xb10 [ 2880.807410] __do_page_fault+0x68e/0xd60 [ 2880.811476] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2880.816492] ? spurious_fault+0x840/0x840 [ 2880.820637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2880.825476] ? page_fault+0x8/0x30 [ 2880.829009] page_fault+0x1e/0x30 [ 2880.832453] RIP: 0033:0x7f8ae897e22d [ 2880.836159] Code: Bad RIP value. [ 2880.839519] RSP: 002b:00007f8ae631a580 EFLAGS: 00010293 [ 2880.844875] RAX: 0000000000000993 RBX: 0000000000000000 RCX: 00007f8ae897e22d [ 2880.852136] RDX: 0000000000001fa0 RSI: 00007f8ae631ada0 RDI: 0000000000000004 [ 2880.859390] RBP: 00005558365fa9d0 R08: 0000000000000000 R09: 0000000000000000 [ 2880.866644] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f8ae631ada0 [ 2880.873897] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f8ae631ae28 [ 2880.923759] Mem-Info: [ 2880.926271] active_anon:28279 inactive_anon:90084 isolated_anon:0 [ 2880.926271] active_file:15 inactive_file:0 isolated_file:9 [ 2880.926271] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2880.926271] slab_reclaimable:13515 slab_unreclaimable:113101 [ 2880.926271] mapped:21766 shmem:104303 pagetables:532 bounce:0 [ 2880.926271] free:25112 free_pcp:72 free_cma:0 [ 2880.959835] Node 0 active_anon:111380kB inactive_anon:148504kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:87064kB dirty:0kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2880.987882] Node 1 active_anon:1736kB inactive_anon:211832kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2881.014918] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.041914] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2881.047368] Node 0 DMA32 free:35660kB min:35996kB low:44992kB high:53988kB active_anon:111380kB inactive_anon:144888kB active_file:40kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2084kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2881.076412] lowmem_reserve[]: 0 0 1 1 1 [ 2881.080390] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.106423] lowmem_reserve[]: 0 0 0 0 0 [ 2881.110386] Node 1 Normal free:53808kB min:53876kB low:67344kB high:80812kB active_anon:1736kB inactive_anon:211832kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.139063] lowmem_reserve[]: 0 0 0 0 0 [ 2881.143031] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 4*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 2881.159736] Node 0 DMA32: 1513*4kB (UME) 926*8kB (UME) 387*16kB (UME) 132*32kB (ME) 37*64kB (UME) 12*128kB (M) 3*256kB (UM) 0*512kB 3*1024kB (U) 0*2048kB 1*4096kB (M) = 35716kB [ 2881.175717] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2881.186951] Node 1 Normal: 611*4kB (UME) 451*8kB (UME) 155*16kB (ME) 87*32kB (UME) 33*64kB (UME) 12*128kB (M) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 8*4096kB (U) = 53876kB [ 2881.203742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2881.212637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2881.221647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2881.230541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2881.239175] 104349 total pagecache pages [ 2881.243226] 0 pages in swap cache [ 2881.246751] Swap cache stats: add 0, delete 0, find 0/0 [ 2881.253062] Free swap = 0kB [ 2881.256156] Total swap = 0kB [ 2881.259248] 2097051 pages RAM [ 2881.262350] 0 pages HighMem/MovableOnly [ 2881.266363] 369649 pages reserved [ 2881.269802] 0 pages cma reserved [ 2881.273161] Out of memory (oom_kill_allocating_task): Kill process 3993 (in:imklog) score 0 or sacrifice child [ 2881.284915] Killed process 3980 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 2881.296713] oom_reaper: reaped process 3980 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2881.666541] kworker/u4:7 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2881.711915] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 2881.728864] CPU: 1 PID: 1093 Comm: kworker/u4:7 Not tainted 4.19.211-syzkaller #0 [ 2881.736494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2881.745850] Workqueue: events_unbound call_usermodehelper_exec_work [ 2881.752274] Call Trace: [ 2881.754860] dump_stack+0x1fc/0x2ef [ 2881.758489] dump_header+0x15d/0xc3f [ 2881.762216] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2881.767316] ? ___ratelimit+0x319/0x590 [ 2881.771306] oom_kill_process.cold+0x10/0x692 [ 2881.775800] ? oom_badness.part.0+0x135/0x6e0 [ 2881.780294] ? lock_downgrade+0x720/0x720 [ 2881.784448] ? check_preemption_disabled+0x41/0x280 [ 2881.789466] out_of_memory+0x34d/0x1390 [ 2881.793439] ? oom_killer_disable+0x270/0x270 [ 2881.797930] ? mutex_trylock+0x15f/0x1a0 [ 2881.801993] __alloc_pages_nodemask+0x23a2/0x2890 [ 2881.806852] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2881.811692] ? should_fail+0x142/0x7b0 [ 2881.815576] ? fs_reclaim_release+0xd0/0x110 [ 2881.819989] ? check_preemption_disabled+0x41/0x280 [ 2881.825007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2881.830020] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2881.834780] copy_process.part.0+0x3cf/0x8260 [ 2881.839284] ? load_balance+0xbae/0x2080 [ 2881.843351] ? __lock_acquire+0x6de/0x3ff0 [ 2881.847588] ? umh_complete+0x90/0x90 [ 2881.851386] ? __cleanup_sighand+0x60/0x60 [ 2881.855617] ? mark_held_locks+0xf0/0xf0 [ 2881.859680] ? __lock_acquire+0x6de/0x3ff0 [ 2881.863922] _do_fork+0x22f/0xf30 [ 2881.867373] ? umh_complete+0x90/0x90 [ 2881.871170] ? fork_idle+0x220/0x220 [ 2881.874889] ? lock_acquire+0x170/0x3c0 [ 2881.878856] ? debug_object_deactivate+0xfc/0x2e0 [ 2881.883702] ? trace_hardirqs_off+0x64/0x200 [ 2881.888111] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2881.893214] ? umh_complete+0x90/0x90 [ 2881.897015] kernel_thread+0x2f/0x40 [ 2881.900728] call_usermodehelper_exec_work+0x16d/0x260 [ 2881.906003] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2881.911539] process_one_work+0x864/0x1570 [ 2881.915785] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2881.920465] worker_thread+0x64c/0x1130 [ 2881.924445] ? __kthread_parkme+0x133/0x1e0 [ 2881.928761] ? process_one_work+0x1570/0x1570 [ 2881.933254] kthread+0x33f/0x460 [ 2881.936617] ? kthread_park+0x180/0x180 [ 2881.940589] ret_from_fork+0x24/0x30 [ 2882.010258] Mem-Info: [ 2882.012722] active_anon:28047 inactive_anon:90084 isolated_anon:0 [ 2882.012722] active_file:14 inactive_file:15 isolated_file:0 [ 2882.012722] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2882.012722] slab_reclaimable:13515 slab_unreclaimable:113127 [ 2882.012722] mapped:21766 shmem:104303 pagetables:501 bounce:0 [ 2882.012722] free:25165 free_pcp:115 free_cma:0 [ 2882.059050] Node 0 active_anon:110588kB inactive_anon:148504kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2882.189104] Node 1 active_anon:1600kB inactive_anon:211832kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2882.320041] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.431299] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2882.459400] Node 0 DMA32 free:35588kB min:35996kB low:44992kB high:53988kB active_anon:110588kB inactive_anon:144888kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2000kB bounce:0kB free_pcp:372kB local_pcp:144kB free_cma:0kB [ 2882.591974] lowmem_reserve[]: 0 0 1 1 1 [ 2882.607976] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.714893] lowmem_reserve[]: 0 0 0 0 0 [ 2882.731914] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:1600kB inactive_anon:211832kB active_file:40kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:4kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2882.857261] lowmem_reserve[]: 0 0 0 0 0 [ 2882.861281] Node 0 DMA: 1*4kB (U) 5*8kB (ME) 1*16kB (E) 1*32kB (E) 2*64kB (ME) 4*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 2882.944720] Node 0 DMA32: 1637*4kB (UME) 915*8kB (UME) 386*16kB (UME) 141*32kB (UME) 37*64kB (UME) 12*128kB (M) 2*256kB (M) 1*512kB (U) 2*1024kB (U) 0*2048kB 1*4096kB (M) = 35628kB [ 2882.964606] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2883.021681] Node 1 Normal: 596*4kB (ME) 442*8kB (ME) 153*16kB (ME) 87*32kB (ME) 35*64kB (UME) 14*128kB (UM) 3*256kB (M) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 8*4096kB (U) = 53840kB [ 2883.082229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2883.124115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2883.147586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2883.156511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2883.165088] 104332 total pagecache pages [ 2883.188263] 0 pages in swap cache [ 2883.191744] Swap cache stats: add 0, delete 0, find 0/0 [ 2883.237159] Free swap = 0kB [ 2883.240204] Total swap = 0kB [ 2883.243220] 2097051 pages RAM [ 2883.289436] 0 pages HighMem/MovableOnly [ 2883.293456] 369649 pages reserved [ 2883.319925] 0 pages cma reserved [ 2883.323320] Out of memory: Kill process 4963 (syz-executor.5) score 1002 or sacrifice child [ 2883.369532] Killed process 4966 (syz-executor.5) total-vm:57764kB, anon-rss:2552kB, file-rss:14336kB, shmem-rss:68kB [ 2883.416061] oom_reaper: reaped process 4966 (syz-executor.5), now anon-rss:0kB, file-rss:14332kB, shmem-rss:4kB [ 2883.417333] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2883.472039] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2883.491281] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2883.498752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2883.508110] Call Trace: [ 2883.510703] dump_stack+0x1fc/0x2ef [ 2883.514347] dump_header+0x15d/0xc3f [ 2883.518080] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2883.523188] ? ___ratelimit+0x319/0x590 [ 2883.527177] oom_kill_process.cold+0x10/0x692 [ 2883.531894] ? check_preemption_disabled+0x41/0x280 [ 2883.536925] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2883.542209] out_of_memory+0x1072/0x1390 [ 2883.546279] ? oom_killer_disable+0x270/0x270 [ 2883.550947] ? mutex_trylock+0x15f/0x1a0 [ 2883.555011] __alloc_pages_nodemask+0x23a2/0x2890 [ 2883.559962] ? find_get_entry+0x4cd/0x8a0 [ 2883.564485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2883.569389] alloc_pages_current+0x193/0x2a0 [ 2883.573927] filemap_fault+0x146e/0x2180 [ 2883.578005] ext4_filemap_fault+0x84/0xb0 [ 2883.578563] syz-executor.5: vmalloc: allocation failure, allocated 1021689856 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2883.582152] __do_fault+0x10b/0x4b0 [ 2883.599530] __handle_mm_fault+0x273b/0x41c0 [ 2883.603943] ? vm_insert_page+0x9c0/0x9c0 [ 2883.608111] ? check_preemption_disabled+0x41/0x280 [ 2883.613149] handle_mm_fault+0x436/0xb10 [ 2883.614417] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2883.617212] __do_page_fault+0x68e/0xd60 [ 2883.617231] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2883.617244] ? spurious_fault+0x840/0x840 [ 2883.617258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2883.617276] ? page_fault+0x8/0x30 [ 2883.617289] page_fault+0x1e/0x30 [ 2883.617300] RIP: 0033:0x43278f [ 2883.617312] Code: Bad RIP value. [ 2883.654476] RSP: 002b:000000c000067e80 EFLAGS: 00010202 [ 2883.659833] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2883.667099] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2883.674361] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.681624] R10: 000000c000067eb0 R11: 0000000000000202 R12: 000000c000067eb0 [ 2883.688893] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2883.702216] CPU: 1 PID: 4966 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2883.710029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2883.719378] Call Trace: [ 2883.721982] dump_stack+0x1fc/0x2ef [ 2883.725620] warn_alloc.cold+0x7b/0x18f [ 2883.729255] Mem-Info: [ 2883.729600] ? zone_watermark_ok_safe+0x260/0x260 [ 2883.732005] active_anon:27535 inactive_anon:90084 isolated_anon:0 [ 2883.732005] active_file:26 inactive_file:3 isolated_file:0 [ 2883.732005] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2883.732005] slab_reclaimable:13515 slab_unreclaimable:113200 [ 2883.732005] mapped:21766 shmem:104303 pagetables:501 bounce:0 [ 2883.732005] free:13881 free_pcp:195 free_cma:0 [ 2883.736810] ? retint_kernel+0x2d/0x2d [ 2883.736831] ? alloc_pages_current+0x164/0x2a0 [ 2883.736855] __vmalloc_area_node+0x4fd/0x780 [ 2883.736875] ? __vmalloc_node_range+0x180/0x180 [ 2883.736888] ? _raw_spin_unlock+0x29/0x40 [ 2883.736901] ? __get_vm_area_node+0x2e2/0x3a0 [ 2883.736919] __vmalloc_node_range+0xed/0x180 [ 2883.736955] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2883.785808] Node 0 active_anon:108448kB inactive_anon:148504kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2883.787758] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2883.791899] Node 1 active_anon:1596kB inactive_anon:211832kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2883.796361] vmalloc_user+0x70/0xe0 [ 2883.796374] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2883.796387] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2883.796401] __vb2_queue_alloc+0x472/0xe60 [ 2883.796426] vb2_core_create_bufs+0x273/0x7e0 [ 2883.796441] ? __vb2_queue_free+0x870/0x870 [ 2883.796456] ? __video_do_ioctl+0x632/0xcd0 [ 2883.796474] ? pi_state_update_owner+0x450/0x450 [ 2883.796487] ? __mutex_lock+0x368/0x1190 [ 2883.796503] vb2_create_bufs+0x332/0x620 [ 2883.818987] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.832936] ? mark_held_locks+0xf0/0xf0 [ 2883.832952] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2883.832965] ? futex_wait_queue_me+0x404/0x5e0 [ 2883.832978] ? pi_state_update_owner+0x450/0x450 [ 2883.832992] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2883.833009] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2883.856071] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2883.865347] v4l_create_bufs+0xb2/0x160 [ 2883.865365] __video_do_ioctl+0x49a/0xcd0 [ 2883.865384] ? v4l_querycap+0x340/0x340 [ 2883.865403] ? __might_fault+0x192/0x1d0 [ 2883.865419] ? v4l_querycap+0x340/0x340 [ 2883.865434] video_usercopy+0x13f/0xfa0 [ 2883.865452] ? v4l_enumstd+0x60/0x60 [ 2883.865468] ? do_futex+0x171/0x1880 [ 2883.885348] Node 0 DMA32 free:18216kB min:35996kB low:44992kB high:53988kB active_anon:108448kB inactive_anon:144888kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1996kB bounce:0kB free_pcp:528kB local_pcp:320kB free_cma:0kB [ 2883.886234] ? mark_held_locks+0xf0/0xf0 [ 2883.890532] lowmem_reserve[]: 0 0 1 1 1 [ 2883.894843] ? debug_check_no_obj_freed+0x201/0x490 [ 2883.918734] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.934031] ? video_usercopy+0xfa0/0xfa0 [ 2883.934043] v4l2_ioctl+0x147/0x1a0 [ 2883.934055] ? video_devdata+0xa0/0xa0 [ 2883.934070] do_vfs_ioctl+0xcdb/0x12e0 [ 2883.934086] ? lock_downgrade+0x720/0x720 [ 2883.934100] ? check_preemption_disabled+0x41/0x280 [ 2883.934112] ? ioctl_preallocate+0x200/0x200 [ 2883.934128] ? __fget+0x356/0x510 [ 2883.934142] ? do_dup2+0x450/0x450 [ 2883.960003] lowmem_reserve[]: 0 0 0 0 0 [ 2883.962858] ? __se_sys_futex+0x298/0x3b0 [ 2883.984887] Node 1 Normal free:26876kB min:53876kB low:67344kB high:80812kB active_anon:1596kB inactive_anon:211832kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:4kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2883.987906] ksys_ioctl+0x9b/0xc0 [ 2883.987924] __x64_sys_ioctl+0x6f/0xb0 [ 2883.987938] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2883.987952] do_syscall_64+0xf9/0x620 [ 2883.987969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2883.987980] RIP: 0033:0x7ff26a4950f9 [ 2883.987992] Code: Bad RIP value. [ 2884.007962] lowmem_reserve[]: 0 0 0 0 0 [ 2884.028409] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2884.028424] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2884.028431] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2884.028438] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2884.028444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2884.028450] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2884.042131] Mem-Info: [ 2884.052860] Node 0 DMA: 0*4kB 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10872kB [ 2884.075209] active_anon:27511 inactive_anon:90084 isolated_anon:0 [ 2884.075209] active_file:15 inactive_file:14 isolated_file:0 [ 2884.075209] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2884.075209] slab_reclaimable:13515 slab_unreclaimable:113097 [ 2884.075209] mapped:21766 shmem:104303 pagetables:500 bounce:0 [ 2884.075209] free:13993 free_pcp:181 free_cma:0 [ 2884.091717] Node 0 DMA32: 1399*4kB (UME) 671*8kB (UME) 260*16kB (UME) 80*32kB (UME) 11*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18644kB [ 2884.120757] Node 0 active_anon:108448kB inactive_anon:148504kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2884.150404] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2884.173639] Node 1 active_anon:1596kB inactive_anon:211832kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2884.194418] Node 1 Normal: 596*4kB (UME) 441*8kB (ME) 154*16kB (ME) 88*32kB (UME) 35*64kB (UME) 13*128kB (M) 3*256kB (M) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 27128kB [ 2884.202361] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2884.224641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.246175] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2884.278391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.302864] Node 0 DMA32 free:18716kB min:35996kB low:44992kB high:53988kB active_anon:108448kB inactive_anon:144888kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1996kB bounce:0kB free_pcp:444kB local_pcp:228kB free_cma:0kB [ 2884.322237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.340802] lowmem_reserve[]: 0 0 1 1 1 [ 2884.359601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.373238] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2884.413674] 104332 total pagecache pages [ 2884.422794] lowmem_reserve[]: 0 0 0 0 0 [ 2884.472329] 0 pages in swap cache [ 2884.507160] Node 1 Normal free:27076kB min:53876kB low:67344kB high:80812kB active_anon:1596kB inactive_anon:211832kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2884.520902] Swap cache stats: add 0, delete 0, find 0/0 [ 2884.540404] lowmem_reserve[]: 0 0 0 0 0 [ 2884.547256] Node 0 DMA: 0*4kB 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10872kB [ 2884.561586] Free swap = 0kB [ 2884.565412] Node 0 DMA32: 1399*4kB (ME) 657*8kB (UME) 255*16kB (ME) 78*32kB (UME) 10*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18324kB [ 2884.574540] Total swap = 0kB [ 2884.579902] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2884.596580] 2097051 pages RAM [ 2884.602923] 0 pages HighMem/MovableOnly [ 2884.604309] Node 1 Normal: 596*4kB (UME) 441*8kB (ME) 154*16kB (ME) 88*32kB (UME) 35*64kB (UME) 13*128kB (M) 3*256kB (M) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 27128kB [ 2884.610029] 369649 pages reserved [ 2884.632401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.641352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.641518] 0 pages cma reserved [ 2884.659063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.666192] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2884.672422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.688985] Killed process 4045 (syz-executor.4) total-vm:48512kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 2884.712424] 104332 total pagecache pages [ 2884.715652] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2884.721543] 0 pages in swap cache [ 2884.746193] Swap cache stats: add 0, delete 0, find 0/0 [ 2884.751582] Free swap = 0kB [ 2884.753373] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2884.754596] Total swap = 0kB [ 2884.762639] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2884.770086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2884.770246] 2097051 pages RAM [ 2884.779528] Call Trace: [ 2884.779551] dump_stack+0x1fc/0x2ef [ 2884.779567] dump_header+0x15d/0xc3f [ 2884.779583] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2884.782664] 0 pages HighMem/MovableOnly [ 2884.785231] ? ___ratelimit+0x319/0x590 [ 2884.785248] oom_kill_process.cold+0x10/0x692 [ 2884.785265] ? check_preemption_disabled+0x41/0x280 [ 2884.788870] 369649 pages reserved [ 2884.792570] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2884.797673] 0 pages cma reserved [ 2884.801616] out_of_memory+0x1072/0x1390 [ 2884.831205] ? oom_killer_disable+0x270/0x270 [ 2884.835884] ? mutex_trylock+0x15f/0x1a0 [ 2884.839970] __alloc_pages_nodemask+0x23a2/0x2890 [ 2884.844959] ? find_get_entry+0x4cd/0x8a0 [ 2884.849122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2884.853998] alloc_pages_current+0x193/0x2a0 [ 2884.858514] filemap_fault+0x146e/0x2180 [ 2884.862602] ext4_filemap_fault+0x84/0xb0 [ 2884.866759] __do_fault+0x10b/0x4b0 [ 2884.870397] __handle_mm_fault+0x273b/0x41c0 [ 2884.874826] ? vm_insert_page+0x9c0/0x9c0 [ 2884.879015] ? check_preemption_disabled+0x41/0x280 [ 2884.884045] handle_mm_fault+0x436/0xb10 [ 2884.888118] __do_page_fault+0x68e/0xd60 [ 2884.892279] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2884.897395] ? spurious_fault+0x840/0x840 [ 2884.902598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2884.907538] ? page_fault+0x8/0x30 [ 2884.911086] page_fault+0x1e/0x30 [ 2884.914538] RIP: 0033:0x43278f [ 2884.917732] Code: Bad RIP value. [ 2884.921106] RSP: 002b:000000c000067e80 EFLAGS: 00010202 [ 2884.926471] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2884.933737] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2884.941005] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.948285] R10: 000000c000067eb0 R11: 0000000000000202 R12: 000000c000067eb0 [ 2884.955558] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2884.969084] Mem-Info: [ 2884.971528] active_anon:27390 inactive_anon:90084 isolated_anon:0 [ 2884.971528] active_file:14 inactive_file:15 isolated_file:0 [ 2884.971528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2884.971528] slab_reclaimable:13510 slab_unreclaimable:113123 [ 2884.971528] mapped:18206 shmem:104303 pagetables:487 bounce:0 [ 2884.971528] free:14091 free_pcp:248 free_cma:0 [ 2885.008362] Node 0 active_anon:107964kB inactive_anon:148504kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72824kB dirty:0kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2885.042046] Node 1 active_anon:1596kB inactive_anon:211832kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2885.084213] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2885.132867] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2885.160844] Node 0 DMA32 free:33008kB min:35996kB low:44992kB high:53988kB active_anon:107964kB inactive_anon:144888kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1944kB bounce:0kB free_pcp:1932kB local_pcp:632kB free_cma:0kB [ 2885.211018] lowmem_reserve[]: 0 0 1 1 1 [ 2885.232837] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2885.311722] lowmem_reserve[]: 0 0 0 0 0 [ 2885.320890] Node 1 Normal free:27128kB min:53876kB low:67344kB high:80812kB active_anon:1596kB inactive_anon:211832kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2885.400592] lowmem_reserve[]: 0 0 0 0 0 [ 2885.404590] Node 0 DMA: 0*4kB 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10872kB [ 2885.472382] Node 0 DMA32: 1526*4kB (UME) 895*8kB (UME) 314*16kB (UME) 130*32kB (UME) 156*64kB (UM) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33072kB [ 2885.514642] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2885.569391] Node 1 Normal: 596*4kB (UME) 441*8kB (ME) 154*16kB (ME) 88*32kB (UME) 35*64kB (UME) 13*128kB (M) 3*256kB (M) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 27128kB [ 2885.691936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2885.802160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2885.881750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2886.011910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2886.110231] 104332 total pagecache pages [ 2886.114326] 0 pages in swap cache [ 2886.218834] Swap cache stats: add 0, delete 0, find 0/0 [ 2886.224224] Free swap = 0kB [ 2886.311768] Total swap = 0kB [ 2886.340966] 2097051 pages RAM [ 2886.344093] 0 pages HighMem/MovableOnly [ 2886.363964] 369649 pages reserved [ 2886.391009] 0 pages cma reserved [ 2886.394398] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2886.423698] Killed process 4994 (syz-executor.2) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2886.489938] kworker/u4:7 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2886.514593] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 2886.523068] CPU: 1 PID: 1093 Comm: kworker/u4:7 Not tainted 4.19.211-syzkaller #0 [ 2886.530687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2886.540085] Workqueue: events_unbound call_usermodehelper_exec_work [ 2886.546493] Call Trace: [ 2886.549083] dump_stack+0x1fc/0x2ef [ 2886.552716] dump_header+0x15d/0xc3f [ 2886.556452] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2886.561646] ? ___ratelimit+0x319/0x590 [ 2886.565625] oom_kill_process.cold+0x10/0x692 [ 2886.570121] ? oom_badness.part.0+0x135/0x6e0 [ 2886.574620] ? lock_downgrade+0x720/0x720 [ 2886.578783] ? check_preemption_disabled+0x41/0x280 [ 2886.583819] out_of_memory+0x34d/0x1390 [ 2886.587802] ? oom_killer_disable+0x270/0x270 [ 2886.592302] ? mutex_trylock+0x15f/0x1a0 [ 2886.596369] __alloc_pages_nodemask+0x23a2/0x2890 [ 2886.601230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2886.606092] ? should_fail+0x142/0x7b0 [ 2886.609984] ? fs_reclaim_release+0xd0/0x110 [ 2886.614405] ? check_preemption_disabled+0x41/0x280 [ 2886.619424] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2886.624441] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2886.629200] copy_process.part.0+0x3cf/0x8260 [ 2886.633702] ? load_balance+0xbae/0x2080 [ 2886.637772] ? __lock_acquire+0x6de/0x3ff0 [ 2886.642011] ? umh_complete+0x90/0x90 [ 2886.645818] ? __cleanup_sighand+0x60/0x60 [ 2886.650054] ? mark_held_locks+0xf0/0xf0 [ 2886.654121] ? __lock_acquire+0x6de/0x3ff0 [ 2886.658363] _do_fork+0x22f/0xf30 [ 2886.661814] ? umh_complete+0x90/0x90 [ 2886.665626] ? fork_idle+0x220/0x220 [ 2886.669340] ? lock_acquire+0x170/0x3c0 [ 2886.673316] ? debug_object_deactivate+0xfc/0x2e0 [ 2886.678164] ? trace_hardirqs_off+0x64/0x200 [ 2886.682579] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2886.687684] ? umh_complete+0x90/0x90 [ 2886.691489] kernel_thread+0x2f/0x40 [ 2886.695208] call_usermodehelper_exec_work+0x16d/0x260 [ 2886.700483] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2886.706039] process_one_work+0x864/0x1570 [ 2886.710284] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2886.714964] worker_thread+0x64c/0x1130 [ 2886.718949] ? __kthread_parkme+0x133/0x1e0 [ 2886.723278] ? process_one_work+0x1570/0x1570 [ 2886.727776] kthread+0x33f/0x460 [ 2886.731139] ? kthread_park+0x180/0x180 [ 2886.735114] ret_from_fork+0x24/0x30 [ 2886.742082] Mem-Info: [ 2886.745175] active_anon:27253 inactive_anon:90084 isolated_anon:0 [ 2886.745175] active_file:42 inactive_file:1376 isolated_file:0 [ 2886.745175] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2886.745175] slab_reclaimable:13510 slab_unreclaimable:112648 [ 2886.745175] mapped:15479 shmem:104303 pagetables:447 bounce:0 [ 2886.745175] free:65710 free_pcp:1337 free_cma:0 [ 2886.787482] Node 0 active_anon:107420kB inactive_anon:148504kB active_file:128kB inactive_file:540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58592kB dirty:0kB writeback:0kB shmem:204032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2886.823975] Node 1 active_anon:1592kB inactive_anon:211832kB active_file:140kB inactive_file:5464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3624kB dirty:0kB writeback:0kB shmem:213180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2886.868466] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2886.913338] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2886.924398] Node 0 DMA32 free:45500kB min:35996kB low:44992kB high:53988kB active_anon:107520kB inactive_anon:144888kB active_file:328kB inactive_file:2340kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1784kB bounce:0kB free_pcp:2608kB local_pcp:1440kB free_cma:0kB [ 2886.969842] lowmem_reserve[]: 0 0 1 1 1 [ 2886.983507] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2887.010066] lowmem_reserve[]: 0 0 0 0 0 [ 2887.019943] Node 1 Normal free:457512kB min:53876kB low:67344kB high:80812kB active_anon:1592kB inactive_anon:211832kB active_file:1440kB inactive_file:5464kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:4kB bounce:0kB free_pcp:2660kB local_pcp:1264kB free_cma:0kB [ 2887.058141] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2887.077738] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2887.091832] lowmem_reserve[]: 0 0 0 0 0 [ 2887.097051] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2887.103761] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2887.113895] Node 0 DMA: 0*4kB 5*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10872kB [ 2887.129829] systemd[1]: Stopped Journal Service. [ 2887.152132] Node 0 DMA32: 448*4kB (UME) 1077*8kB (UME) 399*16kB (UME) 179*32kB (UME) 317*64kB (UM) 6*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43832kB [ 2887.168727] systemd[1]: Starting Journal Service... [ 2887.193810] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2887.201045] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2887.217645] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2887.226815] Node 1 Normal: 32*4kB (UME) 26*8kB (UME) 21*16kB (UME) 14*32kB (UE) 12*64kB (UE) 6*128kB (UM) 9*256kB (U) 8*512kB (UM) 9*1024kB (UME) 8*2048kB (U) 125*4096kB (U) = 546656kB [ 2887.247993] systemd[1]: Stopped System Logging Service. [ 2887.254890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2887.294699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2887.303300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2887.312735] systemd[1]: Starting System Logging Service... [ 2887.325790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2887.334379] 110416 total pagecache pages [ 2887.338922] 0 pages in swap cache [ 2887.343152] Swap cache stats: add 0, delete 0, find 0/0 [ 2887.357963] Free swap = 0kB [ 2887.361021] Total swap = 0kB [ 2887.364038] 2097051 pages RAM [ 2887.370229] 0 pages HighMem/MovableOnly [ 2887.374723] 369649 pages reserved [ 2887.378183] 0 pages cma reserved [ 2887.381550] Out of memory: Kill process 8072 (syz-fuzzer) score 6 or sacrifice child [ 2887.390631] Killed process 4398 (syz-executor.3) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2887.409572] systemd-journald[5230]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2888.871682] IPVS: ftp: loaded support on port[0] = 21 [ 2889.891939] chnl_net:caif_netlink_parms(): no params data found [ 2890.406592] bridge0: port 1(bridge_slave_0) entered blocking state [ 2890.412983] bridge0: port 1(bridge_slave_0) entered disabled state [ 2890.429045] device bridge_slave_0 entered promiscuous mode [ 2890.439284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2890.450276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2890.460194] device bridge_slave_1 entered promiscuous mode [ 2890.498901] Bluetooth: hci2: command 0x0409 tx timeout [ 2890.651313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2890.661519] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2890.856517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2890.865006] team0: Port device team_slave_0 added [ 2890.872133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2890.879779] team0: Port device team_slave_1 added [ 2891.107856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2891.114604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2891.142039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2891.155074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2891.161332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2891.188267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2891.437494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2891.451120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2891.496298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2891.503016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2891.519018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2891.530221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2891.542292] device bridge_slave_1 left promiscuous mode [ 2891.551903] bridge0: port 2(bridge_slave_1) entered disabled state [ 2891.562357] device bridge_slave_0 left promiscuous mode [ 2891.571769] bridge0: port 1(bridge_slave_0) entered disabled state [ 2891.589468] device veth1_macvtap left promiscuous mode [ 2891.597527] device veth0_macvtap left promiscuous mode [ 2891.602858] device veth1_vlan left promiscuous mode [ 2891.612540] device veth0_vlan left promiscuous mode [ 2892.573794] Bluetooth: hci2: command 0x041b tx timeout [ 2894.653316] Bluetooth: hci2: command 0x040f tx timeout [ 2896.522042] device hsr_slave_1 left promiscuous mode [ 2896.531371] device hsr_slave_0 left promiscuous mode [ 2896.552560] team0 (unregistering): Port device team_slave_1 removed [ 2896.562770] team0 (unregistering): Port device team_slave_0 removed [ 2896.573513] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2896.584687] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2896.617455] bond0 (unregistering): Released all slaves [ 2896.633615] device hsr_slave_0 entered promiscuous mode [ 2896.639272] device hsr_slave_1 entered promiscuous mode [ 2896.646745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2896.657581] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2896.733153] Bluetooth: hci2: command 0x0419 tx timeout [ 2896.747401] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2896.806021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2896.819299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2896.835902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2896.842039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2896.850487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2896.860851] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2896.867899] 8021q: adding VLAN 0 to HW filter on device team0 [ 2896.878168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2896.885918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2896.894986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2896.902625] bridge0: port 1(bridge_slave_0) entered blocking state [ 2896.909017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2896.921547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2896.930344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2896.938624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2896.951664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2896.961516] bridge0: port 2(bridge_slave_1) entered blocking state [ 2896.967916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2896.984075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2896.999536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2897.006741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2897.024277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2897.034979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2897.044511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2897.052728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2897.071513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2897.080068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2897.093738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2897.101610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2897.113950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2897.124465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2897.132077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2897.142395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2897.151352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2897.163713] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2897.169738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2897.178150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2897.186805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2897.240997] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2897.250420] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2897.258092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2897.266364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2897.278709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2897.345792] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2897.356875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2897.436351] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2897.446303] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2897.457634] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2897.469895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2897.481599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2897.489783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2897.500948] device veth0_vlan entered promiscuous mode [ 2897.517763] device veth1_vlan entered promiscuous mode [ 2897.527830] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2897.544728] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2897.560591] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2897.571744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2897.581027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2897.589440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2897.600467] device veth0_macvtap entered promiscuous mode [ 2897.608343] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2897.619920] device veth1_macvtap entered promiscuous mode [ 2897.631742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2897.644753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2897.652965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2897.664182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2897.673962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.685226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2897.696556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.706546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2897.717037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.726904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2897.737155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.748275] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2897.755494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2897.763961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2897.771881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2897.782229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2897.792555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.802068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2897.812343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.821833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2897.831642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.840847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2897.850639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2897.861294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2897.868378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2897.875357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2897.883467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2898.225222] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2898.231574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2898.250037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2898.252480] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2898.369610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2898.369935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2898.376795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2898.390681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2898.495999] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.501597] ieee802154 phy1 wpan1: encryption failed: -22 06:52:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) (async) r15 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x100}, @generic={0xc1, 0x2, 0x6, 0xff, 0x12}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000380)=""/140, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, r2, r3, r4, 0x1, r5, r14, r15, 0xffffffffffffffff]}, 0x80) 06:52:26 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) 06:52:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 32) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xfffffffffffffff8) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x4, 0x1, 0x2, "99a21307695b8f671f3f94159320c035193248cd88dd0101e62d66bc23dd10ba", 0x31364d59}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x2000000, 0x1, 0x2, 0x0, 0x3}) (async) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) (async) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) 06:52:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sdr={0x0, 0x8000}}) 06:52:26 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) (async, rerun: 64) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) (async, rerun: 64) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:26 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000003cc0), &(0x7f0000003d00)=0x14) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr}) 06:52:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x2000, 0x1, {r1, r2/1000+60000}, {0x5, 0x2, 0x2, 0x0, 0x5, 0xd2, "3225e9d4"}, 0x9, 0x2, {&(0x7f0000000040)}, 0x800}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:52:27 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:27 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) 06:52:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x2000, 0x1, {r1, r2/1000+60000}, {0x5, 0x2, 0x2, 0x0, 0x5, 0xd2, "3225e9d4"}, 0x9, 0x2, {&(0x7f0000000040)}, 0x800}) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (rerun: 32) 06:52:27 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:27 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}], 0x1, 0x0) 06:52:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x2000, 0x1, {r1, r2/1000+60000}, {0x5, 0x2, 0x2, 0x0, 0x5, 0xd2, "3225e9d4"}, 0x9, 0x2, {&(0x7f0000000040)}, 0x800}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) [ 2899.969826] IPVS: ftp: loaded support on port[0] = 21 [ 2899.986529] IPVS: ftp: loaded support on port[0] = 21 [ 2900.572222] Bluetooth: hci0: command 0x0406 tx timeout [ 2901.044690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2901.058650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2901.068126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2901.078886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2901.088352] device bridge_slave_1 left promiscuous mode [ 2901.098403] bridge0: port 2(bridge_slave_1) entered disabled state [ 2901.106991] device bridge_slave_0 left promiscuous mode [ 2901.117084] bridge0: port 1(bridge_slave_0) entered disabled state [ 2901.128372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2901.141159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2901.150600] device bridge_slave_1 left promiscuous mode [ 2901.160486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2901.169037] device bridge_slave_0 left promiscuous mode [ 2901.179192] bridge0: port 1(bridge_slave_0) entered disabled state [ 2901.196537] device veth1_macvtap left promiscuous mode [ 2901.201915] device veth0_macvtap left promiscuous mode [ 2901.208505] device veth1_vlan left promiscuous mode [ 2901.220740] device veth0_vlan left promiscuous mode [ 2901.228517] device veth1_macvtap left promiscuous mode [ 2901.238260] device veth0_macvtap left promiscuous mode [ 2901.244595] device veth1_vlan left promiscuous mode [ 2901.249715] device veth0_vlan left promiscuous mode [ 2901.772044] Bluetooth: hci3: command 0x0409 tx timeout [ 2901.931962] Bluetooth: hci4: command 0x0409 tx timeout [ 2903.860504] Bluetooth: hci3: command 0x041b tx timeout [ 2904.011598] Bluetooth: hci4: command 0x041b tx timeout [ 2905.571545] oom_reaper: reaped process 5519 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2905.647601] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2905.674889] systemd-journal cpuset=/ mems_allowed=0-1 [ 2905.686159] CPU: 1 PID: 5230 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2905.694048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2905.703394] Call Trace: [ 2905.705988] dump_stack+0x1fc/0x2ef [ 2905.709618] dump_header+0x15d/0xc3f [ 2905.713337] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2905.718439] ? ___ratelimit+0x319/0x590 [ 2905.722414] oom_kill_process.cold+0x10/0x692 [ 2905.726907] ? check_preemption_disabled+0x41/0x280 [ 2905.731926] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2905.737203] out_of_memory+0x1072/0x1390 [ 2905.741274] ? oom_killer_disable+0x270/0x270 [ 2905.745807] ? mutex_trylock+0x15f/0x1a0 [ 2905.749868] __alloc_pages_nodemask+0x23a2/0x2890 [ 2905.754718] ? find_get_entry+0x4cd/0x8a0 [ 2905.758874] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2905.763744] alloc_pages_current+0x193/0x2a0 [ 2905.768158] filemap_fault+0x146e/0x2180 [ 2905.772249] ext4_filemap_fault+0x84/0xb0 [ 2905.776398] __do_fault+0x10b/0x4b0 [ 2905.780038] __handle_mm_fault+0x273b/0x41c0 [ 2905.784454] ? vm_insert_page+0x9c0/0x9c0 [ 2905.788616] ? check_preemption_disabled+0x41/0x280 [ 2905.793636] handle_mm_fault+0x436/0xb10 [ 2905.797700] __do_page_fault+0x68e/0xd60 [ 2905.801768] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2905.806786] ? spurious_fault+0x840/0x840 [ 2905.810931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2905.815781] ? page_fault+0x8/0x30 [ 2905.819323] page_fault+0x1e/0x30 [ 2905.822776] RIP: 0033:0x7fbdeb2932e3 [ 2905.826489] Code: Bad RIP value. [ 2905.829846] RSP: 002b:00007ffc191cce88 EFLAGS: 00010246 [ 2905.835203] RAX: 0000000000000001 RBX: 000055cf6f5251e0 RCX: 00007fbdeb2932e3 [ 2905.841238] syz-executor.5: vmalloc: allocation failure, allocated 1008484352 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2905.842472] RDX: 0000000000000013 RSI: 00007ffc191cce90 RDI: 000000000000000b [ 2905.842483] RBP: 00007ffc191cd080 R08: 00007ffc191e0000 R09: 000002e8c2ead0e8 [ 2905.857079] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2905.863504] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc191cce90 [ 2905.863513] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d1280f6c05 [ 2905.867110] Mem-Info: [ 2905.885966] CPU: 0 PID: 5519 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2905.891164] active_anon:27986 inactive_anon:90084 isolated_anon:0 [ 2905.891164] active_file:15 inactive_file:14 isolated_file:0 [ 2905.891164] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2905.891164] slab_reclaimable:13398 slab_unreclaimable:115141 [ 2905.891164] mapped:22166 shmem:104300 pagetables:577 bounce:0 [ 2905.891164] free:13879 free_pcp:977 free_cma:0 [ 2905.892934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2905.900742] Node 0 active_anon:109708kB inactive_anon:151176kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:206640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2905.934200] Call Trace: [ 2905.934223] dump_stack+0x1fc/0x2ef [ 2905.934244] warn_alloc.cold+0x7b/0x18f [ 2905.946350] Node 1 active_anon:2236kB inactive_anon:209160kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1596kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2905.971329] ? zone_watermark_ok_safe+0x260/0x260 [ 2905.971343] ? retint_kernel+0x2d/0x2d [ 2905.971374] __vmalloc_area_node+0x4fd/0x780 [ 2905.973951] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2905.977571] ? __vmalloc_node_range+0x180/0x180 [ 2905.981540] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2906.008741] ? _raw_spin_unlock+0x29/0x40 [ 2906.008754] ? __get_vm_area_node+0x2e2/0x3a0 [ 2906.008772] __vmalloc_node_range+0xed/0x180 [ 2906.013606] Node 0 DMA32 free:17924kB min:35996kB low:44992kB high:53988kB active_anon:109708kB inactive_anon:147560kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2180kB bounce:0kB free_pcp:2112kB local_pcp:1120kB free_cma:0kB [ 2906.017462] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2906.021873] lowmem_reserve[]: 0 0 1 1 1 [ 2906.048215] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2906.048228] vmalloc_user+0x70/0xe0 [ 2906.048241] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2906.048256] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2906.059359] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.062030] __vb2_queue_alloc+0x472/0xe60 [ 2906.062057] vb2_core_create_bufs+0x273/0x7e0 [ 2906.066524] lowmem_reserve[]: 0 0 0 0 0 [ 2906.070920] ? __vb2_queue_free+0x870/0x870 [ 2906.100156] Node 1 Normal free:26708kB min:53876kB low:67344kB high:80812kB active_anon:2236kB inactive_anon:209160kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:128kB bounce:0kB free_pcp:1796kB local_pcp:1532kB free_cma:0kB [ 2906.104437] ? __video_do_ioctl+0x632/0xcd0 [ 2906.104462] ? __mutex_lock+0x368/0x1190 [ 2906.108407] lowmem_reserve[]: 0 0 0 0 0 [ 2906.113759] vb2_create_bufs+0x332/0x620 [ 2906.113780] ? mark_held_locks+0xf0/0xf0 [ 2906.117376] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10876kB [ 2906.121681] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2906.121697] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2906.121715] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2906.125829] Node 0 DMA32: 1349*4kB (UME) 334*8kB (UME) 160*16kB (ME) 118*32kB (ME) 35*64kB (UME) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17924kB [ 2906.151667] v4l_create_bufs+0xb2/0x160 [ 2906.151687] __video_do_ioctl+0x49a/0xcd0 [ 2906.155908] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2906.160413] ? v4l_querycap+0x340/0x340 [ 2906.164399] Node 1 Normal: 559*4kB (ME) 439*8kB (UME) 190*16kB (UME) 118*32kB (UME) 49*64kB (ME) 24*128kB (M) 13*256kB (M) 3*512kB (UM) 3*1024kB (ME) 0*2048kB 0*4096kB = 26708kB [ 2906.168676] ? __might_fault+0x192/0x1d0 [ 2906.197673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2906.201954] ? v4l_querycap+0x340/0x340 [ 2906.201971] video_usercopy+0x13f/0xfa0 [ 2906.206010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2906.209971] ? v4l_enumstd+0x60/0x60 [ 2906.214135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2906.218168] ? do_futex+0x171/0x1880 [ 2906.232745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2906.237813] ? mark_held_locks+0xf0/0xf0 [ 2906.242905] 104329 total pagecache pages [ 2906.248065] ? debug_check_no_obj_freed+0x201/0x490 [ 2906.269285] 0 pages in swap cache [ 2906.270877] ? video_usercopy+0xfa0/0xfa0 [ 2906.281877] Swap cache stats: add 0, delete 0, find 0/0 [ 2906.285812] v4l2_ioctl+0x147/0x1a0 [ 2906.301760] Free swap = 0kB [ 2906.305783] ? video_devdata+0xa0/0xa0 [ 2906.305799] do_vfs_ioctl+0xcdb/0x12e0 [ 2906.305813] ? lock_downgrade+0x720/0x720 [ 2906.305831] ? check_preemption_disabled+0x41/0x280 [ 2906.314753] Total swap = 0kB [ 2906.318597] ? ioctl_preallocate+0x200/0x200 [ 2906.322566] 2097051 pages RAM [ 2906.331107] ? __fget+0x356/0x510 [ 2906.331127] ? do_dup2+0x450/0x450 [ 2906.334824] 0 pages HighMem/MovableOnly [ 2906.343834] ? __se_sys_futex+0x298/0x3b0 [ 2906.343860] ksys_ioctl+0x9b/0xc0 [ 2906.347985] 369649 pages reserved [ 2906.356546] __x64_sys_ioctl+0x6f/0xb0 [ 2906.356560] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2906.356576] do_syscall_64+0xf9/0x620 [ 2906.360606] 0 pages cma reserved [ 2906.364657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2906.364669] RIP: 0033:0x7ff26a4950f9 [ 2906.364683] Code: Bad RIP value. [ 2906.369674] Out of memory (oom_kill_allocating_task): Kill process 5230 (systemd-journal) score 0 or sacrifice child [ 2906.373099] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2906.373112] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2906.373119] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2906.373129] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2906.377289] Killed process 5230 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1552kB [ 2906.382596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2906.382604] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2906.404235] Bluetooth: hci3: command 0x040f tx timeout [ 2906.438461] oom_reaper: reaped process 5230 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1552kB [ 2906.456935] Bluetooth: hci4: command 0x040f tx timeout [ 2906.497852] systemd-rfkill invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2906.550405] Mem-Info: [ 2906.582087] active_anon:27886 inactive_anon:90084 isolated_anon:0 [ 2906.582087] active_file:15 inactive_file:14 isolated_file:0 [ 2906.582087] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2906.582087] slab_reclaimable:13398 slab_unreclaimable:114960 [ 2906.582087] mapped:21791 shmem:104300 pagetables:577 bounce:0 [ 2906.582087] free:15137 free_pcp:0 free_cma:0 [ 2906.628147] Node 0 active_anon:109708kB inactive_anon:151176kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:206640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2906.651012] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2906.672133] CPU: 1 PID: 5496 Comm: systemd-rfkill Not tainted 4.19.211-syzkaller #0 [ 2906.674052] Node 1 active_anon:1836kB inactive_anon:209160kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2906.679934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2906.679942] Call Trace: [ 2906.718924] dump_stack+0x1fc/0x2ef [ 2906.722556] dump_header+0x15d/0xc3f [ 2906.726271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2906.731371] ? ___ratelimit+0x319/0x590 [ 2906.735353] oom_kill_process.cold+0x10/0x692 [ 2906.739847] ? check_preemption_disabled+0x41/0x280 [ 2906.744869] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2906.750152] out_of_memory+0x1072/0x1390 [ 2906.754220] ? oom_killer_disable+0x270/0x270 [ 2906.758718] ? mutex_trylock+0x15f/0x1a0 [ 2906.762781] __alloc_pages_nodemask+0x23a2/0x2890 [ 2906.767633] ? find_get_entry+0x4cd/0x8a0 [ 2906.771790] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2906.776661] alloc_pages_current+0x193/0x2a0 [ 2906.781068] filemap_fault+0x146e/0x2180 [ 2906.784061] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.785163] ext4_filemap_fault+0x84/0xb0 [ 2906.815644] __do_fault+0x10b/0x4b0 [ 2906.819274] __handle_mm_fault+0x273b/0x41c0 [ 2906.823685] ? vm_insert_page+0x9c0/0x9c0 [ 2906.827846] ? check_preemption_disabled+0x41/0x280 [ 2906.832864] handle_mm_fault+0x436/0xb10 [ 2906.836929] __do_page_fault+0x68e/0xd60 [ 2906.840995] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2906.846016] ? spurious_fault+0x840/0x840 [ 2906.850167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2906.855010] ? page_fault+0x8/0x30 [ 2906.858548] page_fault+0x1e/0x30 [ 2906.861997] RIP: 0033:0x7fe2e743f92d [ 2906.865710] Code: Bad RIP value. [ 2906.869067] RSP: 002b:00007ffd5f08e650 EFLAGS: 00010246 [ 2906.874425] RAX: 0000000000000000 RBX: 000056028ee9a040 RCX: 00007fe2e743f92d [ 2906.881694] RDX: 00007ffd5f08e660 RSI: 0000000000000001 RDI: 00007ffd5f08e698 [ 2906.887123] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2906.888955] RBP: 00007ffd5f08e708 R08: 0000000000000008 R09: 0000000000000010 [ 2906.888965] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2906.908480] R13: 00007ffd5f08e700 R14: 0000000000000001 R15: 0000000000000003 [ 2906.915329] Node 0 DMA32 free:20732kB min:35996kB low:44992kB high:53988kB active_anon:109708kB inactive_anon:147560kB active_file:68kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.926561] Mem-Info: [ 2906.957983] active_anon:27868 inactive_anon:90083 isolated_anon:0 [ 2906.957983] active_file:15 inactive_file:14 isolated_file:0 [ 2906.957983] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2906.957983] slab_reclaimable:13398 slab_unreclaimable:114957 [ 2906.957983] mapped:21766 shmem:104300 pagetables:553 bounce:0 [ 2906.957983] free:15191 free_pcp:1 free_cma:0 [ 2907.002223] Node 0 active_anon:109680kB inactive_anon:151176kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:206640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2907.028424] lowmem_reserve[]: 0 0 1 1 1 [ 2907.040063] Node 1 active_anon:1792kB inactive_anon:209156kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2907.050081] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.105219] lowmem_reserve[]: 0 0 0 0 0 [ 2907.109219] Node 1 Normal free:29092kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:209156kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.120929] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.159308] lowmem_reserve[]: 0 0 0 0 0 [ 2907.184862] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2907.186555] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10876kB [ 2907.189918] Node 0 DMA32 free:20788kB min:35996kB low:44992kB high:53988kB active_anon:109680kB inactive_anon:147560kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2172kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2907.219789] Node 0 DMA32: 1515*4kB (UME) 494*8kB (UME) 199*16kB (UME) 116*32kB (ME) 37*64kB (UME) 10*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20812kB [ 2907.278540] lowmem_reserve[]: 0 0 1 1 1 [ 2907.280885] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2907.300354] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.310871] Node 1 Normal: 597*4kB (UME) 448*8kB (UME) 191*16kB (UME) 103*32kB (UME) 48*64kB (ME) 31*128kB (UM) 20*256kB (UM) 3*512kB (UM) 3*1024kB (ME) 0*2048kB 0*4096kB = 29092kB [ 2907.347339] lowmem_reserve[]: 0 0 0 0 0 [ 2907.369044] Node 1 Normal free:29092kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:209156kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.380866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2907.415836] lowmem_reserve[]: 0 0 0 0 0 [ 2907.419848] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10876kB [ 2907.434667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2907.464477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2907.469283] Node 0 DMA32: 1515*4kB (UME) 494*8kB (UME) 199*16kB (UME) 116*32kB (ME) 37*64kB (UME) 10*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20812kB [ 2907.489212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2907.495911] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2907.519401] 104329 total pagecache pages [ 2907.523072] Node 1 Normal: 597*4kB (UME) 448*8kB (UME) 191*16kB (UME) 103*32kB (UME) 48*64kB (ME) 31*128kB (UM) 20*256kB (UM) 3*512kB (UM) 3*1024kB (ME) 0*2048kB 0*4096kB = 29092kB [ 2907.523523] 0 pages in swap cache [ 2907.539884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2907.554481] Swap cache stats: add 0, delete 0, find 0/0 [ 2907.560322] Free swap = 0kB [ 2907.572329] Total swap = 0kB [ 2907.575355] 2097051 pages RAM [ 2907.578450] 0 pages HighMem/MovableOnly [ 2907.586591] 369649 pages reserved [ 2907.590038] 0 pages cma reserved [ 2907.590465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2907.644542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2907.689559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2907.709384] 104329 total pagecache pages [ 2907.713517] 0 pages in swap cache [ 2907.716963] Swap cache stats: add 0, delete 0, find 0/0 [ 2907.765530] Free swap = 0kB [ 2907.779988] Total swap = 0kB [ 2907.805634] 2097051 pages RAM [ 2907.808766] 0 pages HighMem/MovableOnly [ 2907.830827] 369649 pages reserved [ 2907.834304] 0 pages cma reserved [ 2907.837669] Out of memory (oom_kill_allocating_task): Kill process 5496 (systemd-rfkill) score 0 or sacrifice child [ 2907.895981] Killed process 5496 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 2907.948796] oom_reaper: reaped process 5496 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2907.969940] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2908.029265] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2908.034121] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2908.041567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2908.050916] Call Trace: [ 2908.053511] dump_stack+0x1fc/0x2ef [ 2908.057145] dump_header+0x15d/0xc3f [ 2908.060864] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2908.065970] ? ___ratelimit+0x319/0x590 [ 2908.069956] oom_kill_process.cold+0x10/0x692 [ 2908.074459] ? check_preemption_disabled+0x41/0x280 [ 2908.079483] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2908.084765] out_of_memory+0x1072/0x1390 [ 2908.088838] ? oom_killer_disable+0x270/0x270 [ 2908.093373] ? mutex_trylock+0x15f/0x1a0 [ 2908.097438] __alloc_pages_nodemask+0x23a2/0x2890 [ 2908.102290] ? find_get_entry+0x4cd/0x8a0 [ 2908.106450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2908.111318] alloc_pages_current+0x193/0x2a0 [ 2908.115733] filemap_fault+0x146e/0x2180 [ 2908.119828] ext4_filemap_fault+0x84/0xb0 [ 2908.123980] __do_fault+0x10b/0x4b0 [ 2908.127611] __handle_mm_fault+0x273b/0x41c0 [ 2908.132028] ? vm_insert_page+0x9c0/0x9c0 [ 2908.136196] ? check_preemption_disabled+0x41/0x280 [ 2908.141225] handle_mm_fault+0x436/0xb10 [ 2908.145297] __do_page_fault+0x68e/0xd60 [ 2908.149370] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2908.154742] ? spurious_fault+0x840/0x840 [ 2908.158918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2908.163776] ? page_fault+0x8/0x30 [ 2908.167321] page_fault+0x1e/0x30 [ 2908.170779] RIP: 0033:0x46b583 [ 2908.173971] Code: Bad RIP value. [ 2908.177332] RSP: 002b:000000c000067e78 EFLAGS: 00010206 [ 2908.182692] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000000046b583 [ 2908.189961] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001ec3840 [ 2908.197236] RBP: 000000c000067ec0 R08: 0000000000000000 R09: 0000000000000000 [ 2908.204500] R10: 000000c000067eb0 R11: 0000000000000206 R12: 000000c000067eb0 [ 2908.211755] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2908.466389] Mem-Info: [ 2908.468850] active_anon:27768 inactive_anon:90083 isolated_anon:0 [ 2908.468850] active_file:72 inactive_file:732 isolated_file:0 [ 2908.468850] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2908.468850] slab_reclaimable:13373 slab_unreclaimable:114606 [ 2908.468850] mapped:22216 shmem:104300 pagetables:553 bounce:0 [ 2908.468850] free:56390 free_pcp:532 free_cma:0 [ 2908.491221] Bluetooth: hci3: command 0x0419 tx timeout [ 2908.511182] Node 0 active_anon:109280kB inactive_anon:151176kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87064kB dirty:0kB writeback:0kB shmem:206640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2908.544181] Node 1 active_anon:1792kB inactive_anon:209156kB active_file:232kB inactive_file:4492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3500kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2908.570862] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2908.579819] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 2908.588772] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2908.588803] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2908.588821] Node 0 DMA32 free:22772kB min:35996kB low:44992kB high:53988kB active_anon:109280kB inactive_anon:147560kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2172kB bounce:0kB free_pcp:368kB local_pcp:0kB free_cma:0kB [ 2908.588851] lowmem_reserve[]: 0 0 1 1 1 [ 2908.588869] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2908.588897] lowmem_reserve[]: 0 0 0 0 0 [ 2908.588916] Node 1 Normal free:222732kB min:53876kB low:67344kB high:80812kB active_anon:1892kB inactive_anon:209156kB active_file:232kB inactive_file:4992kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:40kB bounce:0kB free_pcp:3048kB local_pcp:1548kB free_cma:0kB [ 2908.588945] lowmem_reserve[]: 0 0 0 0 0 [ 2908.588964] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10876kB [ 2908.589039] Node 0 DMA32: 1540*4kB (UME) 706*8kB (UME) 219*16kB (UME) 119*32kB (UME) 37*64kB (UME) 12*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23280kB [ 2908.589107] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2908.589159] Node 1 Normal: 32*4kB (UE) 38*8kB (UME) 189*16kB (UME) 106*32kB (UME) 62*64kB (UME) 42*128kB (UM) 31*256kB (UM) 16*512kB (UM) 12*1024kB (UME) 7*2048kB (U) 40*4096kB (U) = 222784kB [ 2908.589241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2908.589251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2908.589261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2908.589271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2908.589276] 105698 total pagecache pages [ 2908.589290] 0 pages in swap cache [ 2908.589298] Swap cache stats: add 0, delete 0, find 0/0 [ 2908.589303] Free swap = 0kB [ 2908.589307] Total swap = 0kB [ 2908.589315] 2097051 pages RAM [ 2908.589320] 0 pages HighMem/MovableOnly [ 2908.589325] 369649 pages reserved [ 2908.589329] 0 pages cma reserved [ 2908.589340] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2908.589401] Killed process 5551 (syz-executor.4) total-vm:48512kB, anon-rss:436kB, file-rss:12292kB, shmem-rss:0kB [ 2908.589776] oom_reaper: reaped process 5551 (syz-executor.4), now anon-rss:0kB, file-rss:12288kB, shmem-rss:0kB [ 2908.616707] Bluetooth: hci4: command 0x0419 tx timeout [ 2908.816440] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 2908.980983] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 2908.988793] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2909.041939] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2909.048728] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2909.071388] systemd[1]: Stopped Journal Service. [ 2909.097513] systemd[1]: Starting Journal Service... [ 2909.341405] systemd-journald[5737]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2909.829997] systemd[1]: Started Journal Service. [ 2911.900308] device hsr_slave_1 left promiscuous mode [ 2911.916842] device hsr_slave_0 left promiscuous mode [ 2911.940155] team0 (unregistering): Port device team_slave_1 removed [ 2911.958443] team0 (unregistering): Port device team_slave_0 removed [ 2911.977054] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2911.996136] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2912.048664] bond0 (unregistering): Released all slaves [ 2912.121378] device hsr_slave_1 left promiscuous mode [ 2912.130196] device hsr_slave_0 left promiscuous mode [ 2912.160319] team0 (unregistering): Port device team_slave_1 removed [ 2912.179392] team0 (unregistering): Port device team_slave_0 removed [ 2912.196830] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2912.210315] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2912.264139] bond0 (unregistering): Released all slaves [ 2912.445019] chnl_net:caif_netlink_parms(): no params data found [ 2912.620119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2912.635621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2912.652463] device bridge_slave_0 entered promiscuous mode [ 2912.659888] bridge0: port 2(bridge_slave_1) entered blocking state [ 2912.680705] bridge0: port 2(bridge_slave_1) entered disabled state [ 2912.701644] device bridge_slave_1 entered promiscuous mode [ 2912.749888] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2912.773707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2912.816175] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2912.832376] team0: Port device team_slave_0 added [ 2912.843541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2912.851106] team0: Port device team_slave_1 added [ 2912.899825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2912.913730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2912.984760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2913.014423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2913.020691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.081482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2913.128671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2913.147946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2913.213588] device hsr_slave_0 entered promiscuous mode [ 2913.231989] device hsr_slave_1 entered promiscuous mode [ 2913.246573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2913.262125] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2913.461391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2913.540605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2913.564828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2913.584461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2913.590635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2913.612400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2913.622719] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2913.628792] 8021q: adding VLAN 0 to HW filter on device team0 [ 2913.654146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2913.661220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2913.673733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2913.681433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2913.687856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2913.702845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2913.719442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2913.727846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2913.741557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2913.750117] bridge0: port 2(bridge_slave_1) entered blocking state [ 2913.756531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2913.772701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2913.790832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2913.798156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2913.813657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2913.829012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2913.838131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2913.856264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2913.870690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2913.889356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2913.898600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2913.916170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2913.952495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2913.967196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2913.992167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2914.000225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2914.023463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2914.043250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2914.067207] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2914.085015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2914.129191] IPVS: ftp: loaded support on port[0] = 21 [ 2914.218186] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2914.236046] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2914.249376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2914.257415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2914.279171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2914.398794] chnl_net:caif_netlink_parms(): no params data found [ 2914.435324] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2914.471417] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2914.488134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2914.497721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2914.550714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2914.564831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2914.584157] device bridge_slave_0 entered promiscuous mode [ 2914.598676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2914.606878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2914.624592] device bridge_slave_1 entered promiscuous mode [ 2914.661618] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2914.670894] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2914.681296] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2914.698797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2914.717696] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2914.730989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2914.746363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2914.756682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2914.771817] device veth0_vlan entered promiscuous mode [ 2914.793103] bond0 (unregistering): Released all slaves [ 2914.810623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2914.826359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2914.868703] device veth1_vlan entered promiscuous mode [ 2914.883249] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2914.890522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2914.913863] team0: Port device team_slave_0 added [ 2914.921753] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2914.946939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2914.966815] team0: Port device team_slave_1 added [ 2914.975329] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2915.029330] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2915.044849] device veth0_macvtap entered promiscuous mode [ 2915.062092] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2915.069420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2915.085966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2915.116364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2915.127546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2915.142626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2915.162910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2915.170718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2915.193080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2915.214064] device veth1_macvtap entered promiscuous mode [ 2915.220426] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2915.243347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2915.249596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2915.332045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2915.363581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2915.374163] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2915.381703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2915.403690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2915.428753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2915.455308] device hsr_slave_0 entered promiscuous mode [ 2915.487133] device hsr_slave_1 entered promiscuous mode [ 2915.499661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2915.519410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.529865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 06:52:43 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) [ 2915.549078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.559514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2915.581860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.601950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2915.612352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.623534] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2915.630524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2915.641459] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2915.651267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2915.660415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2915.674478] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2915.683263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2915.698310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.709874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2915.724608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.735809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2915.748870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.761322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2915.780316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.791701] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2915.803893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2915.817382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2915.827033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2915.960246] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2916.041092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2916.056323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2916.079422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2916.088299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2916.096247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2916.116181] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2916.126720] 8021q: adding VLAN 0 to HW filter on device team0 [ 2916.137151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2916.150075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2916.159505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2916.172811] bridge0: port 1(bridge_slave_0) entered blocking state [ 2916.175953] Bluetooth: hci3: command 0x0409 tx timeout [ 2916.179159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2916.192148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2916.202589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2916.210171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2916.218661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2916.226788] bridge0: port 2(bridge_slave_1) entered blocking state [ 2916.233198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2916.242866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2916.252894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2916.260673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2916.269584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2916.281471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2916.305175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2916.313199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2916.322703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2916.331185] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2916.339975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2916.348145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2916.348176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2916.359417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2916.369305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2916.378876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2916.389160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2916.399574] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2916.421790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2916.429725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2916.437576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2916.445575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2916.459491] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2916.471861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2916.480050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2916.487659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2916.498382] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2916.509487] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2916.516091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2916.523665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2916.541379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2916.586503] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2916.597692] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2916.606051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2916.618421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2916.646210] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2916.654170] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2916.660783] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2916.670291] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2916.677231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2916.684802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2916.695447] device veth0_vlan entered promiscuous mode [ 2916.701186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2916.708203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2916.721881] device veth1_vlan entered promiscuous mode [ 2916.727757] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2916.737772] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2916.749215] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2916.759031] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2916.766366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2916.774626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2916.783673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2916.791240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2916.800701] device veth0_macvtap entered promiscuous mode [ 2916.807479] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2916.821249] device veth1_macvtap entered promiscuous mode [ 2916.827693] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2916.837551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2916.847266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2916.856587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.866641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.875986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.885760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.895056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.904830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.914419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.924173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.933380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.943367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.954992] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2916.962165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2916.970370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2916.977920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2916.986948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2916.995103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2917.007633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2917.017511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2917.027164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2917.036939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2917.046122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2917.056419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2917.065611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2917.075353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2917.084518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2917.094256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2917.105185] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2917.112082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2917.120016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2917.128205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2917.243622] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2917.249975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2917.268888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2917.279559] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 06:52:45 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740), 0x0, 0x0) 06:52:45 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/99, 0x63}], 0x2, 0x0) 06:52:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x2000, 0x2, 0x0, "1cb2a607d1720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x30395056}) 06:52:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:52:45 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:45 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xfffffffffffffff8) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x4, 0x1, 0x2, "99a21307695b8f671f3f94159320c035193248cd88dd0101e62d66bc23dd10ba", 0x31364d59}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x2000000, 0x1, 0x2, 0x0, 0x3}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) [ 2917.287479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2917.295393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2917.298327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2917.309078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:52:45 executing program 0: add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x2000, 0x2, 0x0, "1cb2a607d1720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x30395056}) 06:52:45 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) 06:52:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r15 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x100}, @generic={0xc1, 0x2, 0x6, 0xff, 0x12}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000380)=""/140, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, r2, r3, r4, 0x1, r5, r14, r15, 0xffffffffffffffff]}, 0x80) 06:52:45 executing program 0: add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x2000, 0x2, 0x0, "1cb2a607d1720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4", 0x30395056}) 06:52:45 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) 06:52:45 executing program 0: add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x3, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) [ 2918.253798] Bluetooth: hci3: command 0x041b tx timeout [ 2920.333654] Bluetooth: hci3: command 0x040f tx timeout [ 2922.417184] Bluetooth: hci3: command 0x0419 tx timeout [ 2922.438646] systemd-rfkill invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2922.459615] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2922.471555] CPU: 1 PID: 5780 Comm: systemd-rfkill Not tainted 4.19.211-syzkaller #0 [ 2922.479349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2922.488691] Call Trace: [ 2922.491283] dump_stack+0x1fc/0x2ef [ 2922.494911] dump_header+0x15d/0xc3f [ 2922.498628] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2922.503732] ? ___ratelimit+0x319/0x590 [ 2922.507706] oom_kill_process.cold+0x10/0x692 [ 2922.512201] ? check_preemption_disabled+0x41/0x280 [ 2922.517221] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2922.522500] out_of_memory+0x1072/0x1390 [ 2922.526564] ? oom_killer_disable+0x270/0x270 [ 2922.531054] ? mutex_trylock+0x15f/0x1a0 [ 2922.535128] __alloc_pages_nodemask+0x23a2/0x2890 [ 2922.539979] ? find_get_entry+0x4cd/0x8a0 [ 2922.544143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2922.549014] alloc_pages_current+0x193/0x2a0 [ 2922.553422] filemap_fault+0x146e/0x2180 [ 2922.557493] ext4_filemap_fault+0x84/0xb0 [ 2922.561639] __do_fault+0x10b/0x4b0 [ 2922.565269] __handle_mm_fault+0x273b/0x41c0 [ 2922.569680] ? vm_insert_page+0x9c0/0x9c0 [ 2922.573838] ? check_preemption_disabled+0x41/0x280 [ 2922.579294] handle_mm_fault+0x436/0xb10 [ 2922.583360] __do_page_fault+0x68e/0xd60 [ 2922.587429] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2922.592441] ? spurious_fault+0x840/0x840 [ 2922.596588] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2922.601435] ? page_fault+0x8/0x30 [ 2922.604971] page_fault+0x1e/0x30 [ 2922.608418] RIP: 0033:0x7f6b8d50b92d [ 2922.612132] Code: Bad RIP value. [ 2922.615485] RSP: 002b:00007ffc31922fe0 EFLAGS: 00010246 [ 2922.620840] RAX: 0000000000000000 RBX: 000055b59e2f8040 RCX: 00007f6b8d50b92d [ 2922.628103] RDX: 00007ffc31922ff0 RSI: 0000000000000001 RDI: 00007ffc31923028 [ 2922.635369] RBP: 00007ffc31923098 R08: 0000000000000008 R09: 0000000000000000 [ 2922.642628] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2922.649878] R13: 00007ffc31923090 R14: 0000000000000000 R15: 0000000000000003 [ 2922.658155] Mem-Info: [ 2922.660755] active_anon:28033 inactive_anon:90088 isolated_anon:0 [ 2922.660755] active_file:52 inactive_file:0 isolated_file:0 [ 2922.660755] unevictable:0 dirty:22 writeback:5 unstable:0 [ 2922.660755] slab_reclaimable:13430 slab_unreclaimable:116267 [ 2922.660755] mapped:22198 shmem:104308 pagetables:579 bounce:0 [ 2922.660755] free:25198 free_pcp:0 free_cma:0 [ 2922.694029] Node 0 active_anon:109988kB inactive_anon:151192kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87216kB dirty:44kB writeback:8kB shmem:206672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2922.721989] Node 1 active_anon:2144kB inactive_anon:209160kB active_file:52kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1576kB dirty:44kB writeback:12kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2922.749612] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.781939] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2922.787075] Node 0 DMA32 free:35736kB min:35996kB low:44992kB high:53988kB active_anon:109988kB inactive_anon:147576kB active_file:60kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2184kB bounce:0kB free_pcp:316kB local_pcp:0kB free_cma:0kB [ 2922.849459] lowmem_reserve[]: 0 0 1 1 1 [ 2922.853457] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.904008] lowmem_reserve[]: 0 0 0 0 0 [ 2922.908017] Node 1 Normal free:53692kB min:53876kB low:67344kB high:80812kB active_anon:2148kB inactive_anon:209160kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.937726] lowmem_reserve[]: 0 0 0 0 0 [ 2922.941709] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2922.955654] Node 0 DMA32: 1365*4kB (ME) 476*8kB (UME) 268*16kB (UME) 135*32kB (ME) 51*64kB (ME) 16*128kB (UM) 2*256kB (M) 14*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 35988kB [ 2922.976821] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2922.989644] Node 1 Normal: 598*4kB (ME) 432*8kB (ME) 186*16kB (ME) 64*32kB (ME) 13*64kB (UME) 4*128kB (UM) 17*256kB (M) 5*512kB (UM) 6*1024kB (UME) 2*2048kB (M) 6*4096kB (U) = 53944kB [ 2923.011277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2923.042420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2923.069400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2923.094525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2923.103100] 104355 total pagecache pages [ 2923.132951] 0 pages in swap cache [ 2923.141745] Swap cache stats: add 0, delete 0, find 0/0 [ 2923.147183] Free swap = 0kB [ 2923.150193] Total swap = 0kB [ 2923.153207] 2097051 pages RAM [ 2923.157873] 0 pages HighMem/MovableOnly [ 2923.161845] 369649 pages reserved [ 2923.200608] 0 pages cma reserved [ 2923.204005] Out of memory (oom_kill_allocating_task): Kill process 5780 (systemd-rfkill) score 0 or sacrifice child [ 2923.252670] Killed process 5780 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 2923.519455] oom_reaper: reaped process 6208 (syz-executor.5), now anon-rss:0kB, file-rss:13568kB, shmem-rss:0kB [ 2923.582917] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2923.598943] systemd-journal cpuset=/ mems_allowed=0-1 [ 2923.604210] CPU: 1 PID: 5737 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2923.612083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2923.621450] Call Trace: [ 2923.624041] dump_stack+0x1fc/0x2ef [ 2923.627672] dump_header+0x15d/0xc3f [ 2923.631410] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2923.636511] ? ___ratelimit+0x319/0x590 [ 2923.640492] oom_kill_process.cold+0x10/0x692 [ 2923.644992] ? check_preemption_disabled+0x41/0x280 [ 2923.650013] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2923.655287] out_of_memory+0x1072/0x1390 [ 2923.659350] ? oom_killer_disable+0x270/0x270 [ 2923.663842] ? mutex_trylock+0x15f/0x1a0 [ 2923.667905] __alloc_pages_nodemask+0x23a2/0x2890 [ 2923.672749] ? find_get_entry+0x4cd/0x8a0 [ 2923.676905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2923.681771] alloc_pages_current+0x193/0x2a0 [ 2923.686177] filemap_fault+0x146e/0x2180 [ 2923.690254] ext4_filemap_fault+0x84/0xb0 [ 2923.694390] __do_fault+0x10b/0x4b0 [ 2923.697998] __handle_mm_fault+0x273b/0x41c0 [ 2923.702388] ? vm_insert_page+0x9c0/0x9c0 [ 2923.706523] ? check_preemption_disabled+0x41/0x280 [ 2923.711519] handle_mm_fault+0x436/0xb10 [ 2923.715564] __do_page_fault+0x68e/0xd60 [ 2923.719609] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2923.724603] ? spurious_fault+0x840/0x840 [ 2923.728729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2923.733551] ? page_fault+0x8/0x30 [ 2923.737070] page_fault+0x1e/0x30 [ 2923.740500] RIP: 0033:0x7fc3730ce0e0 [ 2923.744204] Code: Bad RIP value. [ 2923.747552] RSP: 002b:00007ffc7879ed88 EFLAGS: 00010246 [ 2923.752916] RAX: 0000000000000001 RBX: 000055ca2a61a310 RCX: 00007fc3727912e3 [ 2923.760176] RDX: 0000000000000013 RSI: 00007ffc7879eda0 RDI: 0000000000000000 [ 2923.767441] RBP: 00007ffc7879ef90 R08: 00007ffc787a4000 R09: 000002ecfcf8ff72 [ 2923.774688] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7879eda0 [ 2923.781935] R13: 0000000000000001 R14: 0000000000000001 R15: 0005f5d1290b3140 [ 2923.793680] Mem-Info: [ 2923.796166] active_anon:27908 inactive_anon:90088 isolated_anon:0 [ 2923.796166] active_file:22 inactive_file:13 isolated_file:2 [ 2923.796166] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2923.796166] slab_reclaimable:13430 slab_unreclaimable:116001 [ 2923.796166] mapped:22149 shmem:104308 pagetables:579 bounce:0 [ 2923.796166] free:13876 free_pcp:164 free_cma:0 [ 2923.807835] syz-executor.5: vmalloc: allocation failure, allocated 1008611328 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2923.832904] Node 0 active_anon:109436kB inactive_anon:151192kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:206672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2923.854416] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2923.876343] Node 1 active_anon:2144kB inactive_anon:209160kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2923.876350] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2923.876380] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2923.876399] Node 0 DMA32 free:18032kB min:35996kB low:44992kB high:53988kB active_anon:109436kB inactive_anon:147576kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2096kB bounce:0kB free_pcp:408kB local_pcp:156kB free_cma:0kB [ 2923.876428] lowmem_reserve[]: 0 0 1 1 1 [ 2923.915956] CPU: 0 PID: 6208 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2923.933237] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2923.934962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2923.934967] Call Trace: [ 2923.934990] dump_stack+0x1fc/0x2ef [ 2923.935009] warn_alloc.cold+0x7b/0x18f [ 2923.935027] ? zone_watermark_ok_safe+0x260/0x260 [ 2923.935046] ? rcu_nmi_exit+0xb3/0x180 [ 2923.969164] lowmem_reserve[]: 0 0 0 0 0 [ 2923.975852] __vmalloc_area_node+0x4fd/0x780 [ 2923.975874] ? __vmalloc_node_range+0x180/0x180 [ 2923.975893] ? _raw_spin_unlock+0x29/0x40 [ 2924.006241] Node 1 Normal free:26832kB min:53876kB low:67344kB high:80812kB active_anon:2144kB inactive_anon:209160kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:132kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2924.012124] ? __get_vm_area_node+0x2e2/0x3a0 [ 2924.014739] lowmem_reserve[]: 0 0 0 0 0 [ 2924.018305] __vmalloc_node_range+0xed/0x180 [ 2924.022244] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2924.027074] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2924.027091] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2924.027103] vmalloc_user+0x70/0xe0 [ 2924.027117] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2924.027133] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2924.033276] Node 0 DMA32: 1300*4kB (UME) 375*8kB (UME) 230*16kB (ME) 109*32kB (UME) 36*64kB (ME) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 2924.034951] __vb2_queue_alloc+0x472/0xe60 [ 2924.034978] vb2_core_create_bufs+0x273/0x7e0 [ 2924.034994] ? __vb2_queue_free+0x870/0x870 [ 2924.039379] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2924.044037] ? __video_do_ioctl+0x632/0xcd0 [ 2924.050735] Node 1 Normal: 598*4kB (ME) 444*8kB (UME) 190*16kB (UME) 65*32kB (UME) 13*64kB (UME) 3*128kB (M) 17*256kB (M) 4*512kB (M) 6*1024kB (UME) 1*2048kB (M) 0*4096kB = 26872kB [ 2924.076689] ? __mutex_lock+0x368/0x1190 [ 2924.076708] vb2_create_bufs+0x332/0x620 [ 2924.076725] ? mark_held_locks+0xf0/0xf0 [ 2924.076738] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2924.076753] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2924.076769] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2924.076788] v4l_create_bufs+0xb2/0x160 [ 2924.076804] __video_do_ioctl+0x49a/0xcd0 [ 2924.076822] ? v4l_querycap+0x340/0x340 [ 2924.084456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2924.085261] ? __might_fault+0x192/0x1d0 [ 2924.089644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2924.103753] ? v4l_querycap+0x340/0x340 [ 2924.103769] video_usercopy+0x13f/0xfa0 [ 2924.103789] ? v4l_enumstd+0x60/0x60 [ 2924.103802] ? do_futex+0x171/0x1880 [ 2924.103817] ? mark_held_locks+0xf0/0xf0 [ 2924.103833] ? debug_check_no_obj_freed+0x201/0x490 [ 2924.103857] ? video_usercopy+0xfa0/0xfa0 [ 2924.103868] v4l2_ioctl+0x147/0x1a0 [ 2924.103880] ? video_devdata+0xa0/0xa0 [ 2924.103896] do_vfs_ioctl+0xcdb/0x12e0 [ 2924.103909] ? lock_downgrade+0x720/0x720 [ 2924.103923] ? check_preemption_disabled+0x41/0x280 [ 2924.103935] ? ioctl_preallocate+0x200/0x200 [ 2924.103952] ? __fget+0x356/0x510 [ 2924.103966] ? do_dup2+0x450/0x450 [ 2924.103978] ? __se_sys_futex+0x298/0x3b0 [ 2924.103998] ksys_ioctl+0x9b/0xc0 [ 2924.104013] __x64_sys_ioctl+0x6f/0xb0 [ 2924.104028] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2924.104043] do_syscall_64+0xf9/0x620 [ 2924.104062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2924.104074] RIP: 0033:0x7ff26a4950f9 [ 2924.104087] Code: Bad RIP value. [ 2924.104094] RSP: 002b:00007ff268a07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2924.104107] RAX: ffffffffffffffda RBX: 00007ff26a5b4f80 RCX: 00007ff26a4950f9 [ 2924.104115] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2924.104123] RBP: 00007ff26a4f0ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2924.104130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2924.104139] R13: 00007ffc254bca1f R14: 00007ff268a07300 R15: 0000000000022000 [ 2924.123547] Mem-Info: [ 2924.132726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2924.152554] active_anon:27895 inactive_anon:90088 isolated_anon:0 [ 2924.152554] active_file:17 inactive_file:17 isolated_file:0 [ 2924.152554] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2924.152554] slab_reclaimable:13430 slab_unreclaimable:115975 [ 2924.152554] mapped:22151 shmem:104308 pagetables:557 bounce:0 [ 2924.152554] free:13933 free_pcp:166 free_cma:0 [ 2924.170819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2924.200136] Node 0 active_anon:109436kB inactive_anon:151192kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:206672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2924.214149] 104342 total pagecache pages [ 2924.216268] Node 1 active_anon:2144kB inactive_anon:209160kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2924.218217] 0 pages in swap cache [ 2924.222312] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2924.240184] Swap cache stats: add 0, delete 0, find 0/0 [ 2924.252510] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2924.279910] Free swap = 0kB [ 2924.286548] Node 0 DMA32 free:18032kB min:35996kB low:44992kB high:53988kB active_anon:109436kB inactive_anon:147576kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2096kB bounce:0kB free_pcp:412kB local_pcp:252kB free_cma:0kB [ 2924.297680] Total swap = 0kB [ 2924.312313] lowmem_reserve[]: 0 0 1 1 1 [ 2924.322446] 2097051 pages RAM [ 2924.336561] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2924.347621] 0 pages HighMem/MovableOnly [ 2924.357278] lowmem_reserve[]: 0 0 0 0 0 [ 2924.357300] Node 1 Normal free:26832kB min:53876kB low:67344kB high:80812kB active_anon:2144kB inactive_anon:209160kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:132kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2924.357341] lowmem_reserve[]: 0 0 0 0 0 [ 2924.357361] Node 0 DMA: 0*4kB 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10864kB [ 2924.357438] Node 0 DMA32: 1300*4kB (UME) 375*8kB (UME) 230*16kB (ME) 109*32kB (UME) 36*64kB (ME) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 2924.357507] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2924.357560] Node 1 Normal: 598*4kB (ME) 444*8kB (UME) 190*16kB (UME) 65*32kB (UME) 13*64kB (UME) 3*128kB (M) 17*256kB (M) 4*512kB (M) 6*1024kB (UME) 1*2048kB (M) 0*4096kB = 26872kB [ 2924.357644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2924.357655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2924.357666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2924.357676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2924.357682] 104342 total pagecache pages [ 2924.357695] 0 pages in swap cache [ 2924.357704] Swap cache stats: add 0, delete 0, find 0/0 [ 2924.357709] Free swap = 0kB [ 2924.357714] Total swap = 0kB [ 2924.357722] 2097051 pages RAM [ 2924.357727] 0 pages HighMem/MovableOnly [ 2924.357732] 369649 pages reserved [ 2924.357736] 0 pages cma reserved [ 2924.781227] 369649 pages reserved [ 2924.784719] 0 pages cma reserved [ 2924.788080] Out of memory (oom_kill_allocating_task): Kill process 5737 (systemd-journal) score 0 or sacrifice child [ 2924.798865] Killed process 5737 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1532kB [ 2924.810524] oom_reaper: reaped process 5737 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1532kB [ 2924.822030] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2924.884523] in:imklog cpuset=/ mems_allowed=0-1 [ 2924.889242] CPU: 1 PID: 5242 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2924.896603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2924.905950] Call Trace: [ 2924.908552] dump_stack+0x1fc/0x2ef [ 2924.912271] dump_header+0x15d/0xc3f [ 2924.915990] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2924.921092] ? ___ratelimit+0x319/0x590 [ 2924.925074] oom_kill_process.cold+0x10/0x692 [ 2924.929577] ? check_preemption_disabled+0x41/0x280 [ 2924.934599] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2924.939881] out_of_memory+0x1072/0x1390 [ 2924.943948] ? oom_killer_disable+0x270/0x270 [ 2924.948446] ? mutex_trylock+0x15f/0x1a0 [ 2924.952512] __alloc_pages_nodemask+0x23a2/0x2890 [ 2924.957366] ? find_get_entry+0x4cd/0x8a0 [ 2924.961527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2924.966397] alloc_pages_current+0x193/0x2a0 [ 2924.970815] filemap_fault+0x146e/0x2180 [ 2924.974895] ext4_filemap_fault+0x84/0xb0 [ 2924.979052] __do_fault+0x10b/0x4b0 [ 2924.982688] __handle_mm_fault+0x273b/0x41c0 [ 2924.987108] ? vm_insert_page+0x9c0/0x9c0 [ 2924.991263] ? lock_downgrade+0x720/0x720 [ 2924.995433] ? check_preemption_disabled+0x41/0x280 [ 2925.000456] handle_mm_fault+0x436/0xb10 [ 2925.004526] __do_page_fault+0x68e/0xd60 [ 2925.008600] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2925.013621] ? spurious_fault+0x840/0x840 [ 2925.017779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2925.022623] ? page_fault+0x8/0x30 [ 2925.026154] page_fault+0x1e/0x30 [ 2925.029595] RIP: 0033:0x7f20f96a4585 [ 2925.033296] Code: Bad RIP value. [ 2925.036646] RSP: 002b:00007f20f8c54470 EFLAGS: 00010207 [ 2925.041993] RAX: 00007f20f8c75660 RBX: 00007f20f8c544a0 RCX: 0000000000000000 [ 2925.049255] RDX: 0000000000000000 RSI: 00007f20f8c544ac RDI: 00007f20f8c544a0 [ 2925.056517] RBP: 00007f20f8c544ac R08: 0000000000000000 R09: 0000000004000001 [ 2925.063779] R10: 0000000000000001 R11: 0000000000000000 R12: 00007f20f8c54da0 [ 2925.071034] R13: 00000000fffff7e7 R14: 0000000000001f9f R15: 00007f20f8c54ddd [ 2925.081728] Mem-Info: [ 2925.084179] active_anon:27795 inactive_anon:90088 isolated_anon:0 [ 2925.084179] active_file:18 inactive_file:16 isolated_file:0 [ 2925.084179] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2925.084179] slab_reclaimable:13427 slab_unreclaimable:115840 [ 2925.084179] mapped:21776 shmem:104308 pagetables:557 bounce:0 [ 2925.084179] free:15153 free_pcp:371 free_cma:0 [ 2925.117639] Node 0 active_anon:109436kB inactive_anon:151192kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:206672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2925.145980] Node 1 active_anon:1744kB inactive_anon:209160kB active_file:108kB inactive_file:1604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:936kB dirty:0kB writeback:0kB shmem:210560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2925.173608] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2925.201808] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2925.206932] Node 0 DMA32 free:18772kB min:35996kB low:44992kB high:53988kB active_anon:109436kB inactive_anon:147576kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2096kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2925.235789] lowmem_reserve[]: 0 0 1 1 1 [ 2925.239779] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2925.265800] lowmem_reserve[]: 0 0 0 0 0 [ 2925.269792] Node 1 Normal free:117564kB min:53876kB low:67344kB high:80812kB active_anon:1744kB inactive_anon:209160kB active_file:308kB inactive_file:8104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:132kB bounce:0kB free_pcp:1340kB local_pcp:0kB free_cma:0kB [ 2925.300778] lowmem_reserve[]: 0 0 0 0 0 [ 2925.304991] Node 0 DMA: 0*4kB 4*8kB (M) 2*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10880kB [ 2925.310930] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2925.319279] Node 0 DMA32: 1315*4kB (UME) 435*8kB (UME) 237*16kB (UME) 112*32kB (UME) 37*64kB (UME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18996kB [ 2925.341667] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2925.353613] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 2925.364615] Node 1 Normal: 44*4kB (UE) 27*8kB (UME) 39*16kB (UE) 60*32kB (UME) 27*64kB (UME) 16*128kB (UM) 32*256kB (UM) 11*512kB (UM) 14*1024kB (UME) 8*2048kB (UM) 31*4096kB (U) = 178232kB [ 2925.390352] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 2925.397749] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 2925.405208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2925.414054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2925.419849] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2925.423587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2925.440885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2925.449585] 106895 total pagecache pages [ 2925.453650] 0 pages in swap cache [ 2925.457191] Swap cache stats: add 0, delete 0, find 0/0 [ 2925.462548] Free swap = 0kB [ 2925.465676] Total swap = 0kB [ 2925.468699] 2097051 pages RAM [ 2925.471795] 0 pages HighMem/MovableOnly [ 2925.475867] 369649 pages reserved [ 2925.479316] 0 pages cma reserved [ 2925.479364] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2925.484907] Out of memory (oom_kill_allocating_task): Kill process 5242 (in:imklog) score 0 or sacrifice child [ 2925.500266] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2925.502374] Killed process 5232 (rsyslogd) total-vm:254332kB, anon-rss:644kB, file-rss:0kB, shmem-rss:0kB [ 2925.523555] oom_reaper: reaped process 5232 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2925.533835] systemd[1]: Stopped Journal Service. [ 2925.581396] systemd[1]: Starting Journal Service... [ 2925.601432] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2925.741523] systemd-journald[6243]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 06:52:57 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="43000000000000006162636565666768696a6b6c6d6e6f7071727374758f7778797a30313233343536"], 0x29, 0xfffffffffffffffc) 06:52:57 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) 06:52:57 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x8, 0x60000) syz_open_dev$vim2m(0x0, 0x1000000000000002, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7b, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0xffffffff, 0x7, 0x380, 0x59455247, [0x1, 0x10000], [0x4d3fc88e, 0xf10c], 0x108}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x2, 0x2, 0x2, "4720205f2e376bf758469f61614160e6bc19fc86f372a38fa06ffd9fdf98e7dc", 0x30314752}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0x9, 0x7f}) 06:52:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x3, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:52:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:52:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r15 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x100}, @generic={0xc1, 0x2, 0x6, 0xff, 0x12}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000380)=""/140, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, r2, r3, r4, 0x1, r5, r14, r15, 0xffffffffffffffff]}, 0x80) 06:52:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x3, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) 06:52:57 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x8, 0x60000) (async, rerun: 64) syz_open_dev$vim2m(0x0, 0x1000000000000002, 0x2) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7b, 0x2) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0xffffffff, 0x7, 0x380, 0x59455247, [0x1, 0x10000], [0x4d3fc88e, 0xf10c], 0x108}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x2, 0x2, 0x2, "4720205f2e376bf758469f61614160e6bc19fc86f372a38fa06ffd9fdf98e7dc", 0x30314752}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0x9, 0x7f}) (rerun: 64) 06:52:57 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x29, 0xfffffffffffffffc) 06:52:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:52:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0x3f, 0x80, 0x5, "287247e7"}, 0x5, 0x1, {&(0x7f00000000c0)=[{0x3, 0x8, {0x6}, 0xa54}, {0x3, 0x1, {0x1}, 0xffff}]}, 0x400}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x81, 0x81, 0x80}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 06:52:57 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x29, 0xfffffffffffffffc) 06:52:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0x3f, 0x80, 0x5, "287247e7"}, 0x5, 0x1, {&(0x7f00000000c0)=[{0x3, 0x8, {0x6}, 0xa54}, {0x3, 0x1, {0x1}, 0xffff}]}, 0x400}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x81, 0x81, 0x80}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) [ 2934.125593] oom_reaper: reaped process 6257 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:36kB [ 2934.153650] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2934.165617] systemd-journal cpuset=/ mems_allowed=0-1 [ 2934.170935] CPU: 1 PID: 6243 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2934.178809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2934.188161] Call Trace: [ 2934.190758] dump_stack+0x1fc/0x2ef [ 2934.194390] dump_header+0x15d/0xc3f [ 2934.198115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2934.203222] ? ___ratelimit+0x319/0x590 [ 2934.207206] oom_kill_process.cold+0x10/0x692 [ 2934.211701] ? check_preemption_disabled+0x41/0x280 [ 2934.216716] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2934.221979] out_of_memory+0x1072/0x1390 [ 2934.226027] ? oom_killer_disable+0x270/0x270 [ 2934.230509] ? mutex_trylock+0x15f/0x1a0 [ 2934.234561] __alloc_pages_nodemask+0x23a2/0x2890 [ 2934.239407] ? find_get_entry+0x4cd/0x8a0 [ 2934.243548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2934.248417] alloc_pages_current+0x193/0x2a0 [ 2934.252811] filemap_fault+0x146e/0x2180 [ 2934.256861] ext4_filemap_fault+0x84/0xb0 [ 2934.260994] __do_fault+0x10b/0x4b0 [ 2934.264615] __handle_mm_fault+0x273b/0x41c0 [ 2934.269022] ? vm_insert_page+0x9c0/0x9c0 [ 2934.273179] ? check_preemption_disabled+0x41/0x280 [ 2934.278188] handle_mm_fault+0x436/0xb10 [ 2934.282232] __do_page_fault+0x68e/0xd60 [ 2934.286277] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2934.291272] ? spurious_fault+0x840/0x840 [ 2934.295401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2934.300228] ? page_fault+0x8/0x30 [ 2934.303766] page_fault+0x1e/0x30 [ 2934.307200] RIP: 0033:0x7f0da0d1c2e3 [ 2934.310896] Code: Bad RIP value. [ 2934.314236] RSP: 002b:00007ffc35f18ca8 EFLAGS: 00010246 [ 2934.319580] RAX: 0000000000000001 RBX: 0000560f7d9c11e0 RCX: 00007f0da0d1c2e3 [ 2934.326825] RDX: 0000000000000012 RSI: 00007ffc35f18cb0 RDI: 000000000000000b [ 2934.334074] RBP: 00007ffc35f18e90 R08: 0000000000989680 R09: 000002ee867ebce2 [ 2934.341322] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35f18cb0 [ 2934.348569] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d12966bebe [ 2934.360476] Mem-Info: [ 2934.362925] active_anon:27862 inactive_anon:90087 isolated_anon:0 [ 2934.362925] active_file:43 inactive_file:24 isolated_file:0 [ 2934.362925] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2934.362925] slab_reclaimable:13483 slab_unreclaimable:116644 [ 2934.362925] mapped:22157 shmem:104307 pagetables:557 bounce:0 [ 2934.362925] free:13920 free_pcp:949 free_cma:0 [ 2934.369675] syz-executor.1: vmalloc: allocation failure, allocated 1003122688 of 1568755712 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2934.398108] Node 0 active_anon:109140kB inactive_anon:145684kB active_file:128kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87104kB dirty:52kB writeback:0kB shmem:201164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2934.425159] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2934.444770] Node 1 active_anon:2308kB inactive_anon:214664kB active_file:44kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1524kB dirty:12kB writeback:0kB shmem:216064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2934.452972] CPU: 0 PID: 6257 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2934.476600] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.479879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2934.479885] Call Trace: [ 2934.479908] dump_stack+0x1fc/0x2ef [ 2934.479927] warn_alloc.cold+0x7b/0x18f [ 2934.479952] ? zone_watermark_ok_safe+0x260/0x260 [ 2934.513160] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2934.515732] ? rcu_nmi_exit+0xb3/0x180 [ 2934.518342] Node 0 DMA32 free:17984kB min:35996kB low:44992kB high:53988kB active_anon:109240kB inactive_anon:142068kB active_file:328kB inactive_file:372kB unevictable:0kB writepending:252kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2060kB bounce:0kB free_pcp:1872kB local_pcp:204kB free_cma:0kB [ 2934.521918] __vmalloc_area_node+0x4fd/0x780 [ 2934.525848] lowmem_reserve[]: 0 0 1 1 1 [ 2934.530707] ? __vmalloc_node_range+0x180/0x180 [ 2934.530722] ? _raw_spin_unlock+0x29/0x40 [ 2934.530734] ? __get_vm_area_node+0x2e2/0x3a0 [ 2934.530754] __vmalloc_node_range+0xed/0x180 [ 2934.530770] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2934.530785] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2934.530800] vmalloc_user+0x70/0xe0 [ 2934.540169] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.569147] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2934.569162] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2934.569176] __vb2_queue_alloc+0x472/0xe60 [ 2934.569199] vb2_core_create_bufs+0x273/0x7e0 [ 2934.569215] ? __vb2_queue_free+0x870/0x870 [ 2934.569230] ? __video_do_ioctl+0x632/0xcd0 [ 2934.569250] ? __mutex_lock+0x368/0x1190 [ 2934.569265] vb2_create_bufs+0x332/0x620 [ 2934.569284] ? mark_held_locks+0xf0/0xf0 [ 2934.576714] lowmem_reserve[]: 0 0 0 0 0 [ 2934.577634] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2934.582273] Node 1 Normal free:26824kB min:53876kB low:67344kB high:80812kB active_anon:2308kB inactive_anon:214664kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:168kB bounce:0kB free_pcp:1924kB local_pcp:1676kB free_cma:0kB [ 2934.586411] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2934.594775] lowmem_reserve[]: 0 0 0 0 0 [ 2934.595273] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2934.601817] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2934.604942] v4l_create_bufs+0xb2/0x160 [ 2934.612956] Node 0 DMA32: 1181*4kB (UME) 474*8kB (UME) 242*16kB (UME) 105*32kB (UME) 31*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17732kB [ 2934.634375] __video_do_ioctl+0x49a/0xcd0 [ 2934.634396] ? v4l_querycap+0x340/0x340 [ 2934.634415] ? __might_fault+0x192/0x1d0 [ 2934.634433] ? v4l_querycap+0x340/0x340 [ 2934.634450] video_usercopy+0x13f/0xfa0 [ 2934.634469] ? v4l_enumstd+0x60/0x60 [ 2934.634485] ? do_futex+0x171/0x1880 [ 2934.643251] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2934.647141] ? mark_held_locks+0xf0/0xf0 [ 2934.647161] ? debug_check_no_obj_freed+0x201/0x490 [ 2934.647184] ? video_usercopy+0xfa0/0xfa0 [ 2934.651650] Node 1 Normal: 532*4kB (UME) 419*8kB (UME) 208*16kB (UME) 87*32kB (UME) 20*64kB (UME) 3*128kB (M) 3*256kB (M) 3*512kB (M) 1*1024kB (E) 1*2048kB (M) 2*4096kB (U) = 26824kB [ 2934.655961] v4l2_ioctl+0x147/0x1a0 [ 2934.664700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.668344] ? video_devdata+0xa0/0xa0 [ 2934.668361] do_vfs_ioctl+0xcdb/0x12e0 [ 2934.668377] ? lock_downgrade+0x720/0x720 [ 2934.668391] ? check_preemption_disabled+0x41/0x280 [ 2934.668406] ? ioctl_preallocate+0x200/0x200 [ 2934.672470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.676428] ? __fget+0x356/0x510 [ 2934.685904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.710471] ? do_dup2+0x450/0x450 [ 2934.710487] ? __se_sys_futex+0x298/0x3b0 [ 2934.710508] ksys_ioctl+0x9b/0xc0 [ 2934.710524] __x64_sys_ioctl+0x6f/0xb0 [ 2934.710537] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2934.710550] do_syscall_64+0xf9/0x620 [ 2934.710570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2934.710582] RIP: 0033:0x7f4752c960f9 [ 2934.710595] Code: Bad RIP value. [ 2934.710603] RSP: 002b:00007f4751208168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2934.710616] RAX: ffffffffffffffda RBX: 00007f4752db5f80 RCX: 00007f4752c960f9 [ 2934.710625] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 2934.710633] RBP: 00007f4752cf1ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2934.710640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2934.710647] R13: 00007ffca8d0287f R14: 00007f4751208300 R15: 0000000000022000 [ 2934.720394] Mem-Info: [ 2934.736560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.750853] active_anon:27863 inactive_anon:90087 isolated_anon:0 [ 2934.750853] active_file:34 inactive_file:8 isolated_file:0 [ 2934.750853] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2934.750853] slab_reclaimable:13482 slab_unreclaimable:116622 [ 2934.750853] mapped:22137 shmem:104307 pagetables:557 bounce:0 [ 2934.750853] free:13920 free_pcp:949 free_cma:0 [ 2934.764103] 104333 total pagecache pages [ 2934.777073] Node 0 active_anon:109132kB inactive_anon:145684kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:0kB writeback:0kB shmem:201164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2934.784899] 0 pages in swap cache [ 2934.796473] Node 1 active_anon:2312kB inactive_anon:214664kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:216064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2934.802822] Swap cache stats: add 0, delete 0, find 0/0 [ 2934.807321] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.807355] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2934.807372] Node 0 DMA32 free:17732kB min:35996kB low:44992kB high:53988kB active_anon:109132kB inactive_anon:142068kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2060kB bounce:0kB free_pcp:1872kB local_pcp:1668kB free_cma:0kB [ 2934.807403] lowmem_reserve[]: 0 0 1 1 1 [ 2934.807421] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.807447] lowmem_reserve[]: 0 0 0 0 0 [ 2934.807467] Node 1 Normal free:26824kB min:53876kB low:67344kB high:80812kB active_anon:2312kB inactive_anon:214664kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:168kB bounce:0kB free_pcp:1924kB local_pcp:248kB free_cma:0kB [ 2934.807496] lowmem_reserve[]: 0 0 0 0 0 [ 2934.807515] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2934.807595] Node 0 DMA32: 1181*4kB (UME) 474*8kB (UME) 242*16kB (UME) 105*32kB (UME) 31*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17732kB [ 2934.807660] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2934.807716] Node 1 Normal: 532*4kB (UME) 419*8kB (UME) 208*16kB (UME) 87*32kB (UME) 20*64kB (UME) 3*128kB (M) 3*256kB (M) 3*512kB (M) 1*1024kB (E) 1*2048kB (M) 2*4096kB (U) = 26824kB [ 2934.807803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.807813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.807824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.807834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.807839] 104333 total pagecache pages [ 2934.807852] 0 pages in swap cache [ 2934.807860] Swap cache stats: add 0, delete 0, find 0/0 [ 2934.807865] Free swap = 0kB [ 2934.807870] Total swap = 0kB [ 2934.807878] 2097051 pages RAM [ 2934.807883] 0 pages HighMem/MovableOnly [ 2934.807888] 369649 pages reserved [ 2934.807893] 0 pages cma reserved [ 2935.344424] Free swap = 0kB [ 2935.347551] Total swap = 0kB [ 2935.350567] 2097051 pages RAM [ 2935.353662] 0 pages HighMem/MovableOnly [ 2935.357703] 369649 pages reserved [ 2935.361176] 0 pages cma reserved [ 2935.364542] Out of memory (oom_kill_allocating_task): Kill process 6243 (systemd-journal) score 0 or sacrifice child [ 2935.375391] Killed process 6243 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1300kB [ 2935.387657] oom_reaper: reaped process 6243 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 2935.409164] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2935.444477] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2935.449383] CPU: 1 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2935.456926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2935.466464] Call Trace: [ 2935.469367] dump_stack+0x1fc/0x2ef [ 2935.473024] dump_header+0x15d/0xc3f [ 2935.476924] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2935.482040] ? ___ratelimit+0x319/0x590 [ 2935.486032] oom_kill_process.cold+0x10/0x692 [ 2935.490548] ? check_preemption_disabled+0x41/0x280 [ 2935.495578] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2935.500871] out_of_memory+0x1072/0x1390 [ 2935.504956] ? oom_killer_disable+0x270/0x270 [ 2935.509468] ? mutex_trylock+0x15f/0x1a0 [ 2935.513544] __alloc_pages_nodemask+0x23a2/0x2890 [ 2935.518398] ? find_get_entry+0x4cd/0x8a0 [ 2935.522543] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2935.527392] alloc_pages_current+0x193/0x2a0 [ 2935.531792] filemap_fault+0x146e/0x2180 [ 2935.535850] ext4_filemap_fault+0x84/0xb0 [ 2935.540007] __do_fault+0x10b/0x4b0 [ 2935.543624] __handle_mm_fault+0x273b/0x41c0 [ 2935.548026] ? vm_insert_page+0x9c0/0x9c0 [ 2935.552168] ? __fget+0x356/0x510 [ 2935.555619] ? check_preemption_disabled+0x41/0x280 [ 2935.560626] handle_mm_fault+0x436/0xb10 [ 2935.564681] __do_page_fault+0x68e/0xd60 [ 2935.568733] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2935.573755] ? spurious_fault+0x840/0x840 [ 2935.578064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2935.582899] ? page_fault+0x8/0x30 [ 2935.586429] page_fault+0x1e/0x30 [ 2935.589868] RIP: 0033:0x403ace [ 2935.593047] Code: Bad RIP value. [ 2935.596394] RSP: 002b:000000c0004d1778 EFLAGS: 00010246 [ 2935.601741] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 2935.608995] RDX: 0000000000000080 RSI: 000000c0004d1840 RDI: 0000000000000004 [ 2935.616246] RBP: 000000c0004d17c0 R08: 0000000000000000 R09: 0000000000000000 [ 2935.623502] R10: 0000000000000166 R11: 0000000000000246 R12: 000000c0004d1850 [ 2935.630756] R13: 0000000000000001 R14: 000000c0003a76c0 R15: 0000000000000001 [ 2935.639935] systemd-journal: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 2935.652434] Mem-Info: [ 2935.654879] active_anon:27761 inactive_anon:90087 isolated_anon:0 [ 2935.654879] active_file:13 inactive_file:13 isolated_file:0 [ 2935.654879] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2935.654879] slab_reclaimable:13472 slab_unreclaimable:116606 [ 2935.654879] mapped:22111 shmem:104307 pagetables:557 bounce:0 [ 2935.654879] free:16108 free_pcp:1171 free_cma:0 [ 2935.688448] systemd-journal cpuset=/ mems_allowed=0-1 [ 2935.693662] CPU: 1 PID: 6243 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2935.701543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2935.710897] Call Trace: [ 2935.713493] dump_stack+0x1fc/0x2ef [ 2935.717127] warn_alloc.cold+0x7b/0x18f [ 2935.721112] ? zone_watermark_ok_safe+0x260/0x260 [ 2935.725965] ? usleep_range+0x170/0x170 [ 2935.729945] ? mark_held_locks+0xa6/0xf0 [ 2935.734022] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2935.739133] ? collect_expired_timers+0x2a0/0x2a0 [ 2935.743997] __alloc_pages_nodemask+0x232f/0x2890 [ 2935.748856] ? find_get_entry+0x4cd/0x8a0 [ 2935.753016] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2935.757882] alloc_pages_current+0x193/0x2a0 [ 2935.762300] filemap_fault+0x146e/0x2180 [ 2935.766379] ext4_filemap_fault+0x84/0xb0 [ 2935.770531] __do_fault+0x10b/0x4b0 [ 2935.774170] __handle_mm_fault+0x273b/0x41c0 [ 2935.778593] ? vm_insert_page+0x9c0/0x9c0 [ 2935.782763] ? check_preemption_disabled+0x41/0x280 [ 2935.787793] handle_mm_fault+0x436/0xb10 [ 2935.791865] __do_page_fault+0x68e/0xd60 [ 2935.795937] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2935.800969] ? spurious_fault+0x840/0x840 [ 2935.805122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2935.809976] ? page_fault+0x8/0x30 [ 2935.813521] page_fault+0x1e/0x30 [ 2935.816979] RIP: 0033:0x7f0da0d1c2e3 [ 2935.820692] Code: Bad RIP value. [ 2935.824053] RSP: 002b:00007ffc35f18ca8 EFLAGS: 00010246 [ 2935.829416] RAX: 0000000000000001 RBX: 0000560f7d9c11e0 RCX: 00007f0da0d1c2e3 [ 2935.836683] RDX: 0000000000000012 RSI: 00007ffc35f18cb0 RDI: 000000000000000b [ 2935.843954] RBP: 00007ffc35f18e90 R08: 0000000000989680 R09: 000002ee867ebce2 [ 2935.851224] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35f18cb0 [ 2935.858498] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d12966bebe [ 2935.870011] Mem-Info: [ 2935.872457] active_anon:27761 inactive_anon:90087 isolated_anon:0 [ 2935.872457] active_file:13 inactive_file:538 isolated_file:0 [ 2935.872457] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2935.872457] slab_reclaimable:13472 slab_unreclaimable:116398 [ 2935.872457] mapped:22461 shmem:104307 pagetables:557 bounce:0 [ 2935.872457] free:83742 free_pcp:1144 free_cma:0 [ 2935.876869] Node 0 active_anon:109120kB inactive_anon:145684kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:4kB writeback:0kB shmem:201164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2935.906209] Node 0 active_anon:109120kB inactive_anon:145684kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87068kB dirty:4kB writeback:0kB shmem:201164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2935.906235] Node 1 active_anon:1880kB inactive_anon:214664kB active_file:8kB inactive_file:2124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2820kB dirty:92kB writeback:0kB shmem:216064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2935.991158] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.017709] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2936.022738] Node 0 DMA32 free:18984kB min:35996kB low:44992kB high:53988kB active_anon:109120kB inactive_anon:142068kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2060kB bounce:0kB free_pcp:1644kB local_pcp:212kB free_cma:0kB [ 2936.025329] Node 1 active_anon:1880kB inactive_anon:214664kB active_file:8kB inactive_file:2124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2820kB dirty:92kB writeback:0kB shmem:216064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2936.060347] lowmem_reserve[]: 0 0 1 1 1 [ 2936.083765] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.109826] lowmem_reserve[]: 0 0 0 0 0 [ 2936.113815] Node 1 Normal free:450840kB min:53876kB low:67344kB high:80812kB active_anon:1880kB inactive_anon:214664kB active_file:8kB inactive_file:2124kB unevictable:0kB writepending:92kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:168kB bounce:0kB free_pcp:2684kB local_pcp:1424kB free_cma:0kB [ 2936.143474] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.143506] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2936.143525] Node 0 DMA32 free:18984kB min:35996kB low:44992kB high:53988kB active_anon:109120kB inactive_anon:142068kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2060kB bounce:0kB free_pcp:1644kB local_pcp:1432kB free_cma:0kB [ 2936.143556] lowmem_reserve[]: 0 0 1 1 1 [ 2936.143574] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.143602] lowmem_reserve[]: 0 0 0 0 0 [ 2936.143621] Node 1 Normal free:488940kB min:53876kB low:67344kB high:80812kB active_anon:1880kB inactive_anon:214664kB active_file:8kB inactive_file:2124kB unevictable:0kB writepending:92kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:168kB bounce:0kB free_pcp:2684kB local_pcp:1260kB free_cma:0kB [ 2936.143651] lowmem_reserve[]: 0 0 0 0 0 [ 2936.143669] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2936.143743] Node 0 DMA32: 1188*4kB (UME) 555*8kB (UME) 258*16kB (UME) 109*32kB (UME) 33*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19048kB [ 2936.143807] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2936.143858] Node 1 Normal: 36*4kB (UME) 384*8kB (UME) 209*16kB (UME) 88*32kB (UME) 18*64kB (UME) 6*128kB (UM) 8*256kB (UM) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 114*4096kB (U) = 488992kB [ 2936.143942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2936.143951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2936.143961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2936.143970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2936.143976] 104864 total pagecache pages [ 2936.143989] 0 pages in swap cache [ 2936.143996] Swap cache stats: add 0, delete 0, find 0/0 [ 2936.144001] Free swap = 0kB [ 2936.144006] Total swap = 0kB [ 2936.144014] 2097051 pages RAM [ 2936.144019] 0 pages HighMem/MovableOnly [ 2936.144023] 369649 pages reserved [ 2936.144028] 0 pages cma reserved [ 2936.144038] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 2936.144101] Killed process 5552 (syz-executor.3) total-vm:48512kB, anon-rss:432kB, file-rss:4kB, shmem-rss:0kB [ 2936.427542] Bluetooth: hci5: command 0x0406 tx timeout [ 2936.433444] lowmem_reserve[]: 0 0 0 0 0 [ 2936.452387] Node 0 DMA: 1*4kB (U) 4*8kB (M) 1*16kB (U) 0*32kB 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10868kB [ 2936.467708] Node 0 DMA32: 1534*4kB (UME) 708*8kB (UME) 341*16kB (UME) 153*32kB (UME) 199*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35016kB [ 2936.488516] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2936.501030] Node 1 Normal: 46*4kB (UME) 27*8kB (ME) 38*16kB (UME) 88*32kB (UME) 27*64kB (UME) 16*128kB (UM) 17*256kB (UM) 10*512kB (UM) 8*1024kB (UE) 6*2048kB (UM) 150*4096kB (U) = 651952kB [ 2936.519187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2936.529084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2936.538747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2936.557195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2936.566572] 106381 total pagecache pages [ 2936.577813] 0 pages in swap cache [ 2936.582787] Swap cache stats: add 0, delete 0, find 0/0 [ 2936.607404] Free swap = 0kB [ 2936.611049] Total swap = 0kB [ 2936.614069] 2097051 pages RAM [ 2936.627182] 0 pages HighMem/MovableOnly [ 2936.631166] 369649 pages reserved [ 2936.634607] 0 pages cma reserved [ 2936.648536] systemd-journal invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 2936.675408] systemd-journal cpuset=/ mems_allowed=0-1 [ 2936.681004] CPU: 1 PID: 6243 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2936.688890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2936.698243] Call Trace: [ 2936.700838] dump_stack+0x1fc/0x2ef [ 2936.704471] dump_header+0x15d/0xc3f [ 2936.708195] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2936.713297] ? ___ratelimit+0x319/0x590 [ 2936.717273] oom_kill_process.cold+0x10/0x692 [ 2936.721775] ? check_preemption_disabled+0x41/0x280 [ 2936.726799] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2936.732080] out_of_memory+0x1072/0x1390 [ 2936.736145] ? lock_acquire+0x170/0x3c0 [ 2936.740126] ? oom_killer_disable+0x270/0x270 [ 2936.744626] ? mutex_trylock+0x15f/0x1a0 [ 2936.748697] pagefault_out_of_memory+0x102/0x120 [ 2936.753451] ? out_of_memory+0x1390/0x1390 [ 2936.757688] ? lock_downgrade+0x720/0x720 [ 2936.761843] mm_fault_error+0x106/0x390 [ 2936.765840] __do_page_fault+0xc34/0xd60 [ 2936.769915] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2936.774930] ? spurious_fault+0x840/0x840 [ 2936.779078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2936.783927] ? page_fault+0x8/0x30 [ 2936.787474] page_fault+0x1e/0x30 [ 2936.790923] RIP: 0033:0x7f0da0d1c2e3 [ 2936.794634] Code: Bad RIP value. [ 2936.797994] RSP: 002b:00007ffc35f18ca8 EFLAGS: 00010246 [ 2936.803355] RAX: 0000000000000001 RBX: 0000560f7d9c11e0 RCX: 00007f0da0d1c2e3 [ 2936.810625] RDX: 0000000000000012 RSI: 00007ffc35f18cb0 RDI: 000000000000000b [ 2936.817889] RBP: 00007ffc35f18e90 R08: 0000000000989680 R09: 000002ee867ebce2 [ 2936.825155] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35f18cb0 [ 2936.832424] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5d12966bebe [ 2936.847029] Mem-Info: [ 2936.849527] active_anon:27664 inactive_anon:90086 isolated_anon:0 [ 2936.849527] active_file:535 inactive_file:1843 isolated_file:0 [ 2936.849527] unevictable:0 dirty:26 writeback:0 unstable:0 [ 2936.849527] slab_reclaimable:13470 slab_unreclaimable:116404 [ 2936.849527] mapped:20071 shmem:104306 pagetables:538 bounce:0 [ 2936.849527] free:237762 free_pcp:857 free_cma:0 [ 2936.887249] Node 0 active_anon:108268kB inactive_anon:145672kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72732kB dirty:4kB writeback:0kB shmem:201148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2936.916725] Node 1 active_anon:2316kB inactive_anon:214664kB active_file:2148kB inactive_file:7296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7628kB dirty:120kB writeback:0kB shmem:216064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2936.945533] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.976401] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2936.982424] Node 0 DMA32 free:66476kB min:35996kB low:44992kB high:53988kB active_anon:108268kB inactive_anon:142056kB active_file:44kB inactive_file:2744kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1952kB bounce:0kB free_pcp:356kB local_pcp:268kB free_cma:0kB [ 2937.013492] lowmem_reserve[]: 0 0 1 1 1 [ 2937.019647] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2937.046524] lowmem_reserve[]: 0 0 0 0 0 [ 2937.053124] Node 1 Normal free:966176kB min:53876kB low:67344kB high:80812kB active_anon:2316kB inactive_anon:214664kB active_file:2148kB inactive_file:7296kB unevictable:0kB writepending:120kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:232kB bounce:0kB free_pcp:1424kB local_pcp:136kB free_cma:0kB [ 2937.086143] lowmem_reserve[]: 0 0 0 0 0 [ 2937.095423] Node 0 DMA: 1*4kB (U) 5*8kB (UM) 0*16kB 1*32kB (U) 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 11020kB [ 2937.118826] Node 0 DMA32: 1099*4kB (UME) 997*8kB (UME) 386*16kB (UME) 161*32kB (UME) 232*64kB (UM) 8*128kB (UM) 3*256kB (UM) 41*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 65428kB [ 2937.144444] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2937.155952] Node 1 Normal: 72*4kB (UE) 33*8kB (UME) 23*16kB (UME) 103*32kB (UME) 39*64kB (UME) 28*128kB (UM) 24*256kB (UM) 23*512kB (UM) 14*1024kB (UE) 13*2048kB (UM) 219*4096kB (U) = 966200kB [ 2937.180869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2937.191646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2937.210258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2937.223719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2937.234330] 107650 total pagecache pages [ 2937.241789] 0 pages in swap cache [ 2937.245251] Swap cache stats: add 0, delete 0, find 0/0 [ 2937.257468] Free swap = 0kB [ 2937.260483] Total swap = 0kB [ 2937.263497] 2097051 pages RAM [ 2937.277304] 0 pages HighMem/MovableOnly [ 2937.281296] 369649 pages reserved [ 2937.284744] 0 pages cma reserved [ 2937.307302] Out of memory (oom_kill_allocating_task): Kill process 6243 (systemd-journal) score 0 or sacrifice child [ 2937.327328] Killed process 6243 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 2937.359816] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2937.389305] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2937.441194] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2937.457796] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2937.464666] systemd[1]: Stopped Journal Service. [ 2937.502889] systemd[1]: Starting Journal Service... [ 2937.674207] systemd-journald[6303]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2938.305179] systemd[1]: Started Journal Service. [ 2940.483009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2940.497317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2940.511186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2940.521769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2940.532561] device bridge_slave_1 left promiscuous mode [ 2940.541890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2940.551206] device bridge_slave_0 left promiscuous mode [ 2940.556715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2940.572292] device veth1_macvtap left promiscuous mode [ 2940.577627] device veth0_macvtap left promiscuous mode [ 2940.586657] device veth1_vlan left promiscuous mode [ 2940.593886] device veth0_vlan left promiscuous mode 06:53:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0x3f, 0x80, 0x5, "287247e7"}, 0x5, 0x1, {&(0x7f00000000c0)=[{0x3, 0x8, {0x6}, 0xa54}, {0x3, 0x1, {0x1}, 0xffff}]}, 0x400}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0x3f, 0x80, 0x5, "287247e7"}, 0x5, 0x1, {&(0x7f00000000c0)=[{0x3, 0x8, {0x6}, 0xa54}, {0x3, 0x1, {0x1}, 0xffff}]}, 0x400}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x81, 0x81, 0x80}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 06:53:10 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x8, 0x60000) syz_open_dev$vim2m(0x0, 0x1000000000000002, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7b, 0x2) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0xffffffff, 0x7, 0x380, 0x59455247, [0x1, 0x10000], [0x4d3fc88e, 0xf10c], 0x108}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x2, 0x2, 0x2, "4720205f2e376bf758469f61614160e6bc19fc86f372a38fa06ffd9fdf98e7dc", 0x30314752}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0x9, 0x7f}) 06:53:10 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x29, 0xfffffffffffffffc) 06:53:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:53:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r15 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x100}, @generic={0xc1, 0x2, 0x6, 0xff, 0x12}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000380)=""/140, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, r2, r3, r4, 0x1, r5, r14, r15, 0xffffffffffffffff]}, 0x80) 06:53:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) (async) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:53:10 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[], 0x29, 0xfffffffffffffffc) 06:53:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x6) 06:53:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x6) 06:53:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:53:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x6) syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x2, 0x0, "1cb2a607d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81542cf4"}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x6) (async) 06:53:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0xfffffff7, 0x2, 0x0, "1cb2a603d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81ff2cf4", 0x48524742}) 06:53:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0xfffffff7, 0x2, 0x0, "1cb2a603d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81ff2cf4", 0x48524742}) 06:53:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x0, @raw_data="37b35a880af09840fe3c665b89fb819b2167cec193e19c4a19dbadd9dc721944b4b5d26451acb6f55503227a04e0fd212b88eb0fd00e2bcaef510fa83c5598bc2ac84770747f4a23e825b39270c68b446e6c8a83c762f4c43245ef23f297bbfdc38af34fe7cc439bd287328abaf69089f63580362161a40fd802c752e53a9ad045dbb16df5cc5299cfcd593cbb87334046643e77bf2016d65a485ad069411c7cee30e5f85cfb8d81ffe4b166362cc8f8ca5cc4e7c4462ce946b831d3190cc557cf670631c2011240"}) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0x2, 0x440) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000480)=0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x3000, 0x100000, 0x2000], 0x4, 0x80, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x20363059, 0x9}}) 06:53:11 executing program 2: syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0xfffffff7, 0x2, 0x0, "1cb2a603d5720cbd186c8a00379c292db1c4fc5c9083f4b1dd45fc2e81ff2cf4", 0x48524742}) 06:53:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3f, 0x1, {0x1, @raw_data="ca9d89588e75d9e467bac50e70a3a02a4c2941ea9e30815d121a2b8a1c684f29ab8bb8e993d806185a62a2174c96cc2ecf47979da074b2f6bbecd5a7f1b14071a6b303c3417abfcdce8845cb5766c590e98cd28ac2079f1ed3a9588519077993694ad34efb247db476f249cb21b957d165553c298b025fdd1de473f9e589bc1133444ebba046f573f81d772192683a79d9a9258fb51e856e9ccfd023ecc234e76878057222505bf7cbc1f15b77e082b199066e9a7641f4e24fa9dbef761b2bd4ed7e9f8e3eefb399"}}) r1 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x5, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x34324d59, 0x2, @discrete={0xfffffffb, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x10000, 0x7, 0x8, 0x86, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x20, 0x1, 0x1, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x100000, 0x1000, 0xffff, 0x1200, 0x1, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xf}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, 0x0) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x1, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0x1, 0x2, 0xb, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x18, 0xfffffffffffffff0}], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r2]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x1, 0x2, 0x441, r4, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x4}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x121b4e464fbff4e, 0x400, 0x23, 0x10001, 0x120, r2, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8000, 0x100, 0x200, 0x1042, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x5, 0x2, 0x4}, 0x48) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x357, 0x7ff, 0x3, 0xc5, r3, 0x1, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="185500000f00000000000000001400000088feff01000000"], &(0x7f0000000800)='GPL\x00', 0xfcdd, 0x9d, &(0x7f0000000a00)=""/157, 0x40f00, 0x0, '\x00', r6, 0xc, r7, 0x8, &(0x7f0000000ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xa, 0x7, 0x2}, 0x10, 0x0, r8, 0x0, &(0x7f0000000f00)=[r5, r9, r2, r10, r3, r11, r12, r13]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0x5, 0x3, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) [ 2945.779031] Bluetooth: hci4: command 0x0409 tx timeout [ 2947.859351] Bluetooth: hci4: command 0x041b tx timeout [ 2948.397558] device hsr_slave_1 left promiscuous mode [ 2948.414847] device hsr_slave_0 left promiscuous mode [ 2948.447377] team0 (unregistering): Port device team_slave_1 removed [ 2948.463757] team0 (unregistering): Port device team_slave_0 removed [ 2948.478822] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2948.497131] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2948.555228] bond0 (unregistering): Released all slaves [ 2948.576591] IPVS: ftp: loaded support on port[0] = 21 [ 2948.908955] chnl_net:caif_netlink_parms(): no params data found [ 2949.072768] bridge0: port 1(bridge_slave_0) entered blocking state [ 2949.079297] bridge0: port 1(bridge_slave_0) entered disabled state [ 2949.102403] device bridge_slave_0 entered promiscuous mode [ 2949.122155] bridge0: port 2(bridge_slave_1) entered blocking state [ 2949.128581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2949.150668] device bridge_slave_1 entered promiscuous mode [ 2949.214254] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2949.234785] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2949.295086] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2949.313660] team0: Port device team_slave_0 added [ 2949.332700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2949.354319] team0: Port device team_slave_1 added [ 2949.407598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2949.432630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2949.503602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2949.532418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2949.538684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2949.571740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2949.592267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2949.603014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2949.642209] device hsr_slave_0 entered promiscuous mode [ 2949.652433] device hsr_slave_1 entered promiscuous mode [ 2949.673513] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2949.692810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2949.939695] Bluetooth: hci4: command 0x040f tx timeout [ 2950.773708] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2950.803555] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2950.808356] CPU: 1 PID: 8072 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2950.815795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2950.825142] Call Trace: [ 2950.827735] dump_stack+0x1fc/0x2ef [ 2950.831366] dump_header+0x15d/0xc3f [ 2950.835086] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2950.840196] ? ___ratelimit+0x319/0x590 [ 2950.844175] oom_kill_process.cold+0x10/0x692 [ 2950.848697] ? check_preemption_disabled+0x41/0x280 [ 2950.853717] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2950.859083] out_of_memory+0x1072/0x1390 [ 2950.863191] ? oom_killer_disable+0x270/0x270 [ 2950.867689] ? mutex_trylock+0x15f/0x1a0 [ 2950.871752] __alloc_pages_nodemask+0x23a2/0x2890 [ 2950.876598] ? find_get_entry+0x4cd/0x8a0 [ 2950.880752] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2950.885621] alloc_pages_current+0x193/0x2a0 [ 2950.890181] filemap_fault+0x146e/0x2180 [ 2950.894255] ext4_filemap_fault+0x84/0xb0 [ 2950.898401] __do_fault+0x10b/0x4b0 [ 2950.902021] ? do_raw_spin_unlock+0x171/0x230 [ 2950.906520] __handle_mm_fault+0x273b/0x41c0 [ 2950.910932] ? vm_insert_page+0x9c0/0x9c0 [ 2950.915076] ? __fget+0x356/0x510 [ 2950.918544] ? check_preemption_disabled+0x41/0x280 [ 2950.923562] handle_mm_fault+0x436/0xb10 [ 2950.927623] __do_page_fault+0x68e/0xd60 [ 2950.931684] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2950.936700] ? spurious_fault+0x840/0x840 [ 2950.940846] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2950.945690] ? page_fault+0x8/0x30 [ 2950.949228] page_fault+0x1e/0x30 [ 2950.952682] RIP: 0033:0x4574e8 [ 2950.955872] Code: Bad RIP value. [ 2950.959227] RSP: 002b:00007ffe2f4ee0d8 EFLAGS: 00010293 [ 2950.964579] RAX: 000000c000044500 RBX: 000002aefc2ef8ec RCX: 0000000000cbe5c0 [ 2950.971841] RDX: 000000c00008afa8 RSI: 0000000000000001 RDI: 0000000000000001 [ 2950.979105] RBP: 00007ffe2f4ee0f8 R08: 000000c000044500 R09: 0000000000000001 [ 2950.986380] R10: a0761d6478bd642f R11: 000000c000038060 R12: 000000c000042000 [ 2950.993650] R13: 0000000000000001 R14: 0000000001ec2d60 R15: 000002af72de900c [ 2951.178486] Mem-Info: [ 2951.184592] active_anon:27883 inactive_anon:90084 isolated_anon:0 [ 2951.184592] active_file:17 inactive_file:0 isolated_file:0 [ 2951.184592] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2951.184592] slab_reclaimable:13500 slab_unreclaimable:116680 [ 2951.184592] mapped:22129 shmem:104303 pagetables:564 bounce:0 [ 2951.184592] free:25090 free_pcp:0 free_cma:0 [ 2951.243599] Node 0 active_anon:109560kB inactive_anon:153868kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88516kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2951.337002] Node 1 active_anon:1972kB inactive_anon:206468kB active_file:32kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2951.432971] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2951.508021] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2951.534097] Node 0 DMA32 free:35964kB min:35996kB low:44992kB high:53988kB active_anon:109560kB inactive_anon:150252kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2951.615061] lowmem_reserve[]: 0 0 1 1 1 [ 2951.619066] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2951.686185] lowmem_reserve[]: 0 0 0 0 0 [ 2951.691902] Node 1 Normal free:53412kB min:53876kB low:67344kB high:80812kB active_anon:1972kB inactive_anon:206468kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2951.814878] lowmem_reserve[]: 0 0 0 0 0 [ 2951.818909] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2951.885900] Node 0 DMA32: 950*4kB (ME) 227*8kB (ME) 179*16kB (UME) 161*32kB (UME) 55*64kB (M) 23*128kB (UM) 8*256kB (M) 23*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35968kB [ 2951.914748] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2951.926000] Node 1 Normal: 585*4kB (UME) 452*8kB (ME) 196*16kB (ME) 91*32kB (ME) 19*64kB (UME) 10*128kB (M) 7*256kB (M) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53668kB [ 2951.963938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2951.985705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2952.009107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2952.025818] Bluetooth: hci4: command 0x0419 tx timeout [ 2952.058252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2952.092803] 104337 total pagecache pages [ 2952.096886] 0 pages in swap cache [ 2952.121017] Swap cache stats: add 0, delete 0, find 0/0 [ 2952.126396] Free swap = 0kB [ 2952.129401] Total swap = 0kB [ 2952.196245] 2097051 pages RAM [ 2952.199375] 0 pages HighMem/MovableOnly [ 2952.225231] 369649 pages reserved [ 2952.228686] 0 pages cma reserved [ 2952.253765] Out of memory (oom_kill_allocating_task): Kill process 8072 (syz-fuzzer) score 0 or sacrifice child [ 2952.296515] Killed process 5881 (syz-executor.4) total-vm:48512kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 2952.398697] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2952.440159] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2952.448356] CPU: 1 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2952.455835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2952.465186] Call Trace: [ 2952.467769] dump_stack+0x1fc/0x2ef [ 2952.471389] dump_header+0x15d/0xc3f [ 2952.475097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2952.480188] ? ___ratelimit+0x319/0x590 [ 2952.484177] oom_kill_process.cold+0x10/0x692 [ 2952.488662] ? check_preemption_disabled+0x41/0x280 [ 2952.493669] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2952.498935] out_of_memory+0x1072/0x1390 [ 2952.502988] ? oom_killer_disable+0x270/0x270 [ 2952.507470] ? mutex_trylock+0x15f/0x1a0 [ 2952.511521] __alloc_pages_nodemask+0x23a2/0x2890 [ 2952.516355] ? find_get_entry+0x4cd/0x8a0 [ 2952.520510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2952.525358] alloc_pages_current+0x193/0x2a0 [ 2952.529752] filemap_fault+0x146e/0x2180 [ 2952.533810] ext4_filemap_fault+0x84/0xb0 [ 2952.537946] __do_fault+0x10b/0x4b0 [ 2952.541562] __handle_mm_fault+0x273b/0x41c0 [ 2952.545959] ? vm_insert_page+0x9c0/0x9c0 [ 2952.550095] ? __fget+0x356/0x510 [ 2952.553557] ? check_preemption_disabled+0x41/0x280 [ 2952.558563] handle_mm_fault+0x436/0xb10 [ 2952.562612] __do_page_fault+0x68e/0xd60 [ 2952.566664] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2952.571664] ? spurious_fault+0x840/0x840 [ 2952.575815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2952.580649] ? page_fault+0x8/0x30 [ 2952.584175] page_fault+0x1e/0x30 [ 2952.587612] RIP: 0033:0x40be60 [ 2952.590793] Code: e8 e5 07 00 00 48 8b 6c 24 10 48 83 c4 18 c3 48 89 44 24 08 e8 91 b8 05 00 48 8b 44 24 08 eb ca cc cc cc cc cc cc cc cc cc cc <49> 3b 66 10 0f 86 6f 01 00 00 48 83 ec 38 48 89 6c 24 30 48 8d 6c [ 2952.609675] RSP: 002b:000000c000067ee8 EFLAGS: 00010206 [ 2952.615021] RAX: 0000000001ef20f8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2952.622275] RDX: 0000000000000000 RSI: 000000c000067920 RDI: 0000000000000004 [ 2952.629527] RBP: 000000c000067f20 R08: 0000000000000000 R09: 0000000000000000 [ 2952.636780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000c000067930 [ 2952.644031] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2952.674262] Mem-Info: [ 2952.676719] active_anon:27783 inactive_anon:90084 isolated_anon:0 [ 2952.676719] active_file:123 inactive_file:125 isolated_file:64 [ 2952.676719] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2952.676719] slab_reclaimable:13500 slab_unreclaimable:115823 [ 2952.676719] mapped:18754 shmem:104303 pagetables:563 bounce:0 [ 2952.676719] free:25038 free_pcp:530 free_cma:0 [ 2952.715848] Node 0 active_anon:109160kB inactive_anon:153868kB active_file:80kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:74516kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2952.752406] Node 1 active_anon:1972kB inactive_anon:206468kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2952.818120] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2952.864135] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2952.869734] Node 0 DMA32 free:36684kB min:35996kB low:44992kB high:53988kB active_anon:109032kB inactive_anon:150252kB active_file:536kB inactive_file:1044kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2076kB bounce:0kB free_pcp:316kB local_pcp:188kB free_cma:0kB [ 2952.900009] lowmem_reserve[]: 0 0 1 1 1 [ 2952.911173] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2952.946676] lowmem_reserve[]: 0 0 0 0 0 [ 2952.956600] Node 1 Normal free:53864kB min:53876kB low:67344kB high:80812kB active_anon:1972kB inactive_anon:206468kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2952.990794] lowmem_reserve[]: 0 0 0 0 0 [ 2952.994795] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2953.013864] Node 0 DMA32: 268*4kB (ME) 228*8kB (ME) 185*16kB (UME) 169*32kB (UME) 67*64kB (UM) 26*128kB (UM) 11*256kB (UM) 23*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35520kB [ 2953.036632] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2953.047741] Node 1 Normal: 584*4kB (ME) 453*8kB (UME) 197*16kB (UME) 92*32kB (UME) 18*64kB (ME) 10*128kB (M) 8*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53912kB [ 2953.073384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2953.125385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2953.150236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2953.159105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2953.180306] 104427 total pagecache pages [ 2953.184394] 0 pages in swap cache [ 2953.187848] Swap cache stats: add 0, delete 0, find 0/0 [ 2953.210241] Free swap = 0kB [ 2953.213283] Total swap = 0kB [ 2953.216295] 2097051 pages RAM [ 2953.219386] 0 pages HighMem/MovableOnly [ 2953.307671] 369649 pages reserved [ 2953.340529] 0 pages cma reserved [ 2953.345349] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2953.400331] Killed process 3450 (syz-executor.1) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2954.014617] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2954.110435] in:imklog cpuset=/ mems_allowed=0-1 [ 2954.115151] CPU: 1 PID: 6246 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2954.122509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2954.131854] Call Trace: [ 2954.134445] dump_stack+0x1fc/0x2ef [ 2954.138076] dump_header+0x15d/0xc3f [ 2954.141791] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2954.146887] ? ___ratelimit+0x319/0x590 [ 2954.150862] oom_kill_process.cold+0x10/0x692 [ 2954.155367] ? check_preemption_disabled+0x41/0x280 [ 2954.160517] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2954.165799] out_of_memory+0x1072/0x1390 [ 2954.169862] ? oom_killer_disable+0x270/0x270 [ 2954.174357] ? mutex_trylock+0x15f/0x1a0 [ 2954.178421] __alloc_pages_nodemask+0x23a2/0x2890 [ 2954.183273] ? find_get_entry+0x4cd/0x8a0 [ 2954.187429] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2954.192296] alloc_pages_current+0x193/0x2a0 [ 2954.196706] filemap_fault+0x146e/0x2180 [ 2954.200782] ext4_filemap_fault+0x84/0xb0 [ 2954.204932] __do_fault+0x10b/0x4b0 [ 2954.208565] __handle_mm_fault+0x273b/0x41c0 [ 2954.212976] ? vm_insert_page+0x9c0/0x9c0 [ 2954.217123] ? lock_downgrade+0x720/0x720 [ 2954.221283] ? check_preemption_disabled+0x41/0x280 [ 2954.226301] handle_mm_fault+0x436/0xb10 [ 2954.230366] __do_page_fault+0x68e/0xd60 [ 2954.234433] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2954.239448] ? spurious_fault+0x840/0x840 [ 2954.243619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2954.248461] ? page_fault+0x8/0x30 [ 2954.252000] page_fault+0x1e/0x30 [ 2954.255448] RIP: 0033:0x7f7c6ad09f7b [ 2954.259162] Code: Bad RIP value. [ 2954.262517] RSP: 002b:00007f7c6a2b94a0 EFLAGS: 00010206 [ 2954.267875] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 0000000000000003 [ 2954.275145] RDX: 00007f7c640021c0 RSI: 00007f7c6a2b9da3 RDI: 00007f7c640021c0 [ 2954.282585] RBP: 0000000000000003 R08: 0000000000000000 R09: a3d70a3d70a3d70b [ 2954.290119] R10: 2ce33e6c02ce33e7 R11: 00007f7c6a2b93d0 R12: 00007f7c6a2b9da0 [ 2954.297390] R13: 00007f7c6a2b9da3 R14: 0000000000001f9f R15: 00007f7c6a2b9ddd [ 2954.391021] Mem-Info: [ 2954.393480] active_anon:27609 inactive_anon:90084 isolated_anon:0 [ 2954.393480] active_file:11 inactive_file:12 isolated_file:0 [ 2954.393480] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2954.393480] slab_reclaimable:13500 slab_unreclaimable:115502 [ 2954.393480] mapped:14985 shmem:104303 pagetables:506 bounce:0 [ 2954.393480] free:25066 free_pcp:35 free_cma:0 [ 2954.426986] Node 0 active_anon:108480kB inactive_anon:153868kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59940kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2954.455302] Node 1 active_anon:1956kB inactive_anon:206468kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2954.520510] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2954.595601] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2954.604888] Node 0 DMA32 free:35544kB min:35996kB low:44992kB high:53988kB active_anon:108480kB inactive_anon:150252kB active_file:120kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:1952kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2954.638701] lowmem_reserve[]: 0 0 1 1 1 [ 2954.642915] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2954.699569] lowmem_reserve[]: 0 0 0 0 0 [ 2954.704500] Node 1 Normal free:53736kB min:53876kB low:67344kB high:80812kB active_anon:1956kB inactive_anon:206468kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2954.771786] lowmem_reserve[]: 0 0 0 0 0 [ 2954.775803] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2954.800115] Node 0 DMA32: 869*4kB (ME) 243*8kB (ME) 178*16kB (ME) 165*32kB (ME) 57*64kB (M) 21*128kB (M) 7*256kB (M) 23*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35500kB [ 2954.825845] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2954.876879] Node 1 Normal: 586*4kB (UME) 454*8kB (UME) 198*16kB (UME) 93*32kB (UME) 18*64kB (ME) 10*128kB (M) 8*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53976kB [ 2954.992386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2955.044395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2955.090901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2955.099773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2955.198472] 104359 total pagecache pages [ 2955.237364] 0 pages in swap cache [ 2955.251162] Swap cache stats: add 0, delete 0, find 0/0 [ 2955.256531] Free swap = 0kB [ 2955.259545] Total swap = 0kB [ 2955.311642] 2097051 pages RAM [ 2955.314768] 0 pages HighMem/MovableOnly [ 2955.318732] 369649 pages reserved [ 2955.372224] 0 pages cma reserved [ 2955.375621] Out of memory (oom_kill_allocating_task): Kill process 6246 (in:imklog) score 0 or sacrifice child [ 2955.434587] Killed process 6244 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 2955.487155] oom_reaper: reaped process 6244 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2955.832044] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2955.881675] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2955.886478] CPU: 0 PID: 8078 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2955.893917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2955.903266] Call Trace: [ 2955.905856] dump_stack+0x1fc/0x2ef [ 2955.909488] dump_header+0x15d/0xc3f [ 2955.913206] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2955.918312] ? ___ratelimit+0x319/0x590 [ 2955.922290] oom_kill_process.cold+0x10/0x692 [ 2955.926784] ? check_preemption_disabled+0x41/0x280 [ 2955.931802] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2955.937080] out_of_memory+0x1072/0x1390 [ 2955.941143] ? oom_killer_disable+0x270/0x270 [ 2955.945640] ? mutex_trylock+0x15f/0x1a0 [ 2955.949709] __alloc_pages_nodemask+0x23a2/0x2890 [ 2955.954558] ? find_get_entry+0x4cd/0x8a0 [ 2955.958719] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2955.963585] alloc_pages_current+0x193/0x2a0 [ 2955.967993] filemap_fault+0x146e/0x2180 [ 2955.972069] ext4_filemap_fault+0x84/0xb0 [ 2955.976212] __do_fault+0x10b/0x4b0 [ 2955.979839] __handle_mm_fault+0x273b/0x41c0 [ 2955.984247] ? vm_insert_page+0x9c0/0x9c0 [ 2955.988407] ? check_preemption_disabled+0x41/0x280 [ 2955.993436] handle_mm_fault+0x436/0xb10 [ 2955.997515] __do_page_fault+0x68e/0xd60 [ 2956.001591] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2956.006625] ? spurious_fault+0x840/0x840 [ 2956.010783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2956.015632] ? page_fault+0x8/0x30 [ 2956.019170] page_fault+0x1e/0x30 [ 2956.022624] RIP: 0033:0x436fe0 [ 2956.025813] Code: Bad RIP value. [ 2956.029170] RSP: 002b:000000c0004c5938 EFLAGS: 00010212 [ 2956.034537] RAX: 0000000000403ace RBX: 0000000000000002 RCX: 0000000000000181 [ 2956.041803] RDX: 000000c0004c5ac0 RSI: 000000c0007fc400 RDI: 000000c000a52680 [ 2956.049070] RBP: 000000c0004c59e8 R08: 0000000000000000 R09: 0000000000000000 [ 2956.056333] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c0004c59c0 [ 2956.063600] R13: 0000000000000000 R14: 000000c0007d8820 R15: 0000000000000001 [ 2956.749334] Mem-Info: [ 2956.752589] active_anon:27386 inactive_anon:90084 isolated_anon:0 [ 2956.752589] active_file:9 inactive_file:25 isolated_file:0 [ 2956.752589] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2956.752589] slab_reclaimable:13489 slab_unreclaimable:114746 [ 2956.752589] mapped:14971 shmem:104303 pagetables:476 bounce:0 [ 2956.752589] free:25448 free_pcp:91 free_cma:0 [ 2956.787464] Node 0 active_anon:107884kB inactive_anon:153868kB active_file:132kB inactive_file:380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59884kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2956.817848] Node 1 active_anon:1660kB inactive_anon:206468kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2956.847979] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2956.879935] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2956.886009] Node 0 DMA32 free:35888kB min:35996kB low:44992kB high:53988kB active_anon:107884kB inactive_anon:150252kB active_file:132kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1904kB bounce:0kB free_pcp:1256kB local_pcp:1020kB free_cma:0kB [ 2956.950844] lowmem_reserve[]: 0 0 1 1 1 [ 2956.954857] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2956.980910] lowmem_reserve[]: 0 0 0 0 0 [ 2956.984902] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:1660kB inactive_anon:206468kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2957.013274] lowmem_reserve[]: 0 0 0 0 0 [ 2957.017261] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2957.033070] Node 0 DMA32: 981*4kB (ME) 265*8kB (UME) 205*16kB (UME) 170*32kB (ME) 58*64kB (M) 22*128kB (UM) 7*256kB (M) 21*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35884kB [ 2957.054049] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2957.066862] Node 1 Normal: 565*4kB (UME) 433*8kB (ME) 181*16kB (UME) 87*32kB (UME) 20*64kB (UME) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53900kB [ 2957.086258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2957.095121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2957.108688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2957.117614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2957.132564] 104322 total pagecache pages [ 2957.136641] 0 pages in swap cache [ 2957.140089] Swap cache stats: add 0, delete 0, find 0/0 [ 2957.152037] Free swap = 0kB [ 2957.155063] Total swap = 0kB [ 2957.158079] 2097051 pages RAM [ 2957.164538] 0 pages HighMem/MovableOnly [ 2957.168513] 369649 pages reserved [ 2957.174124] 0 pages cma reserved [ 2957.177500] Out of memory (oom_kill_allocating_task): Kill process 8078 (syz-fuzzer) score 0 or sacrifice child [ 2957.193047] Killed process 6364 (syz-executor.3) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2957.295198] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2957.320932] systemd-journal cpuset=/ mems_allowed=0-1 [ 2957.326163] CPU: 1 PID: 6303 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2957.334037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2957.343381] Call Trace: [ 2957.345970] dump_stack+0x1fc/0x2ef [ 2957.349600] dump_header+0x15d/0xc3f [ 2957.353316] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2957.358422] ? ___ratelimit+0x319/0x590 [ 2957.362399] oom_kill_process.cold+0x10/0x692 [ 2957.366893] ? check_preemption_disabled+0x41/0x280 [ 2957.371914] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2957.377189] out_of_memory+0x1072/0x1390 [ 2957.381256] ? oom_killer_disable+0x270/0x270 [ 2957.385748] ? mutex_trylock+0x15f/0x1a0 [ 2957.389813] __alloc_pages_nodemask+0x23a2/0x2890 [ 2957.394662] ? find_get_entry+0x4cd/0x8a0 [ 2957.398814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2957.403681] alloc_pages_current+0x193/0x2a0 [ 2957.408087] filemap_fault+0x146e/0x2180 [ 2957.412159] ext4_filemap_fault+0x84/0xb0 [ 2957.416302] __do_fault+0x10b/0x4b0 [ 2957.419926] ? do_raw_spin_unlock+0x171/0x230 [ 2957.424423] __handle_mm_fault+0x273b/0x41c0 [ 2957.428844] ? vm_insert_page+0x9c0/0x9c0 [ 2957.432988] ? do_raw_spin_lock+0xcb/0x220 [ 2957.437234] ? check_preemption_disabled+0x41/0x280 [ 2957.442253] handle_mm_fault+0x436/0xb10 [ 2957.446315] __do_page_fault+0x68e/0xd60 [ 2957.450381] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2957.455396] ? spurious_fault+0x840/0x840 [ 2957.459547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2957.464395] ? page_fault+0x8/0x30 [ 2957.467933] page_fault+0x1e/0x30 [ 2957.471386] RIP: 0033:0x7fd99c8cd009 [ 2957.475097] Code: Bad RIP value. [ 2957.478457] RSP: 002b:00007ffc6861f260 EFLAGS: 00010246 [ 2957.483814] RAX: 0000000000000000 RBX: 00007fd99cbebb00 RCX: 01e0c0ff00000000 [ 2957.491078] RDX: 0000000000000020 RSI: 0000000000000001 RDI: 0000000000000041 [ 2957.498342] RBP: 0000000000000041 R08: 000000000000c0ff R09: 00000000000001e0 [ 2957.505603] R10: 0000000000000069 R11: 00007fd99c9bc060 R12: 00000000ffffffff [ 2957.512870] R13: 00005652208bd040 R14: 00007ffc6861f560 R15: 00005652208c2190 [ 2957.817470] Mem-Info: [ 2957.820824] active_anon:27261 inactive_anon:90084 isolated_anon:0 [ 2957.820824] active_file:69 inactive_file:138 isolated_file:0 [ 2957.820824] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2957.820824] slab_reclaimable:13489 slab_unreclaimable:114711 [ 2957.820824] mapped:11521 shmem:104303 pagetables:450 bounce:0 [ 2957.820824] free:28239 free_pcp:479 free_cma:0 [ 2957.903417] Node 0 active_anon:107384kB inactive_anon:153868kB active_file:692kB inactive_file:720kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:46684kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2957.940435] Node 1 active_anon:1660kB inactive_anon:206468kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2958.195732] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.355200] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2958.388487] Node 0 DMA32 free:35844kB min:35996kB low:44992kB high:53988kB active_anon:107384kB inactive_anon:150252kB active_file:264kB inactive_file:128kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.571029] lowmem_reserve[]: 0 0 1 1 1 [ 2958.575107] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.626103] lowmem_reserve[]: 0 0 0 0 0 [ 2958.630115] Node 1 Normal free:53848kB min:53876kB low:67344kB high:80812kB active_anon:1660kB inactive_anon:206468kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.698749] lowmem_reserve[]: 0 0 0 0 0 [ 2958.708793] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2958.741885] Node 0 DMA32: 980*4kB (UME) 257*8kB (UME) 188*16kB (UME) 168*32kB (UME) 69*64kB (UM) 24*128kB (UM) 8*256kB (M) 20*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36184kB [ 2958.757998] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2958.769985] Node 1 Normal: 566*4kB (UME) 433*8kB (ME) 181*16kB (UME) 87*32kB (UME) 20*64kB (UME) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53904kB [ 2958.786854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2958.795740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2958.804357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2958.813238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2958.821837] 104337 total pagecache pages [ 2958.825879] 0 pages in swap cache [ 2958.829310] Swap cache stats: add 0, delete 0, find 0/0 [ 2958.834674] Free swap = 0kB [ 2958.837668] Total swap = 0kB [ 2958.840666] 2097051 pages RAM [ 2958.843834] 0 pages HighMem/MovableOnly [ 2958.847793] 369649 pages reserved [ 2958.851261] 0 pages cma reserved [ 2958.854616] Out of memory (oom_kill_allocating_task): Kill process 6303 (systemd-journal) score 0 or sacrifice child [ 2958.866154] Killed process 6303 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1496kB [ 2959.107383] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2959.151186] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2959.155979] CPU: 0 PID: 8078 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2959.163419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2959.172766] Call Trace: [ 2959.175354] dump_stack+0x1fc/0x2ef [ 2959.178984] dump_header+0x15d/0xc3f [ 2959.182704] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2959.187807] ? ___ratelimit+0x319/0x590 [ 2959.191781] oom_kill_process.cold+0x10/0x692 [ 2959.196278] ? check_preemption_disabled+0x41/0x280 [ 2959.201299] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2959.206574] out_of_memory+0x1072/0x1390 [ 2959.210628] ? oom_killer_disable+0x270/0x270 [ 2959.215105] ? mutex_trylock+0x15f/0x1a0 [ 2959.219149] __alloc_pages_nodemask+0x23a2/0x2890 [ 2959.223975] ? find_get_entry+0x4cd/0x8a0 [ 2959.228109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2959.232943] alloc_pages_current+0x193/0x2a0 [ 2959.237331] filemap_fault+0x146e/0x2180 [ 2959.241382] ext4_filemap_fault+0x84/0xb0 [ 2959.245528] __do_fault+0x10b/0x4b0 [ 2959.249139] __handle_mm_fault+0x273b/0x41c0 [ 2959.253547] ? vm_insert_page+0x9c0/0x9c0 [ 2959.257685] ? check_preemption_disabled+0x41/0x280 [ 2959.262682] handle_mm_fault+0x436/0xb10 [ 2959.266726] __do_page_fault+0x68e/0xd60 [ 2959.270768] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2959.275763] ? spurious_fault+0x840/0x840 [ 2959.279890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2959.284718] ? page_fault+0x8/0x30 [ 2959.288237] page_fault+0x1e/0x30 [ 2959.291676] RIP: 0033:0x4644e0 [ 2959.294853] Code: Bad RIP value. [ 2959.298194] RSP: 002b:000000c0007f4550 EFLAGS: 00010206 [ 2959.303535] RAX: 0000000000000000 RBX: 000000c0007f4618 RCX: 0000000000000000 [ 2959.310788] RDX: 000000c0007f4618 RSI: 0000000000000d7a RDI: 0000000000000001 [ 2959.318037] RBP: 000000c0007f45d0 R08: 0000000000000000 R09: 0000000000000000 [ 2959.325307] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c0007f4660 [ 2959.332673] R13: 0000000000000000 R14: 000000c000a52680 R15: 0000000000000001 [ 2959.351337] Mem-Info: [ 2959.353782] active_anon:27148 inactive_anon:90083 isolated_anon:0 [ 2959.353782] active_file:17 inactive_file:18 isolated_file:0 [ 2959.353782] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2959.353782] slab_reclaimable:13482 slab_unreclaimable:114345 [ 2959.353782] mapped:11015 shmem:104303 pagetables:428 bounce:0 [ 2959.353782] free:25106 free_pcp:0 free_cma:0 [ 2959.439969] Node 0 active_anon:106932kB inactive_anon:153864kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44056kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2959.577325] Node 1 active_anon:1660kB inactive_anon:206468kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2959.752551] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2959.926933] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2959.944674] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.950448] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.994513] Node 0 DMA32 free:35788kB min:35996kB low:44992kB high:53988kB active_anon:106932kB inactive_anon:150248kB active_file:80kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2960.149775] lowmem_reserve[]: 0 0 1 1 1 [ 2960.155589] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2960.219797] lowmem_reserve[]: 0 0 0 0 0 [ 2960.223877] Node 1 Normal free:53848kB min:53876kB low:67344kB high:80812kB active_anon:1660kB inactive_anon:206468kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2960.296254] lowmem_reserve[]: 0 0 0 0 0 [ 2960.301615] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2960.317342] Node 0 DMA32: 1087*4kB (UME) 254*8kB (ME) 186*16kB (UME) 168*32kB (UME) 65*64kB (M) 24*128kB (UM) 9*256kB (UM) 19*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36044kB [ 2960.391551] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2960.451676] Node 1 Normal: 565*4kB (UME) 433*8kB (ME) 181*16kB (UME) 87*32kB (UME) 20*64kB (UME) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53900kB [ 2960.550100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2960.591037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2960.654892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2960.721052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2960.744276] 104337 total pagecache pages [ 2960.748358] 0 pages in swap cache [ 2960.751867] Swap cache stats: add 0, delete 0, find 0/0 [ 2960.757220] Free swap = 0kB [ 2960.760217] Total swap = 0kB [ 2960.763273] 2097051 pages RAM [ 2960.766410] 0 pages HighMem/MovableOnly [ 2960.770618] 369649 pages reserved [ 2960.774107] 0 pages cma reserved [ 2960.777456] Out of memory (oom_kill_allocating_task): Kill process 8078 (syz-fuzzer) score 0 or sacrifice child [ 2960.787741] Killed process 2359 (syz-executor.0) total-vm:48512kB, anon-rss:420kB, file-rss:0kB, shmem-rss:0kB [ 2960.798118] oom_reaper: reaped process 2359 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2960.992428] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2961.006001] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2961.010776] CPU: 0 PID: 8073 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2961.018213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2961.027642] Call Trace: [ 2961.030221] dump_stack+0x1fc/0x2ef [ 2961.033834] dump_header+0x15d/0xc3f [ 2961.037542] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2961.042631] ? ___ratelimit+0x319/0x590 [ 2961.046591] oom_kill_process.cold+0x10/0x692 [ 2961.051087] ? check_preemption_disabled+0x41/0x280 [ 2961.056091] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2961.061358] out_of_memory+0x1072/0x1390 [ 2961.065407] ? oom_killer_disable+0x270/0x270 [ 2961.069887] ? mutex_trylock+0x15f/0x1a0 [ 2961.073932] __alloc_pages_nodemask+0x23a2/0x2890 [ 2961.078897] ? find_get_entry+0x4cd/0x8a0 [ 2961.083034] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2961.087874] alloc_pages_current+0x193/0x2a0 [ 2961.092273] filemap_fault+0x146e/0x2180 [ 2961.096329] ext4_filemap_fault+0x84/0xb0 [ 2961.100462] __do_fault+0x10b/0x4b0 [ 2961.104072] ? do_raw_spin_unlock+0x171/0x230 [ 2961.108555] __handle_mm_fault+0x273b/0x41c0 [ 2961.112952] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2961.118059] ? vm_insert_page+0x9c0/0x9c0 [ 2961.122218] ? check_preemption_disabled+0x41/0x280 [ 2961.127304] handle_mm_fault+0x436/0xb10 [ 2961.131384] __do_page_fault+0x68e/0xd60 [ 2961.135442] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2961.140445] ? spurious_fault+0x840/0x840 [ 2961.144581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2961.149426] ? page_fault+0x8/0x30 [ 2961.152949] page_fault+0x1e/0x30 [ 2961.156383] RIP: 0033:0x432380 [ 2961.159587] Code: Bad RIP value. [ 2961.162953] RSP: 002b:000000c000067f28 EFLAGS: 00010246 [ 2961.168301] RAX: 0000000000000000 RBX: 0000000001ec3748 RCX: 000002b0b89ca601 [ 2961.175912] RDX: 000002b0c29b370e RSI: 000000c000067f00 RDI: 000000c000067edc [ 2961.183186] RBP: 000000c000067f90 R08: 00007ffe2f573000 R09: 000002f67fc5e965 [ 2961.190447] R10: 000608958710f41e R11: 0000000000000001 R12: 000000c000067f10 [ 2961.197707] R13: 000000c0007fd400 R14: 000000c0000064e0 R15: 0000000000000001 [ 2961.209864] Mem-Info: [ 2961.217633] active_anon:27048 inactive_anon:90083 isolated_anon:0 [ 2961.217633] active_file:15 inactive_file:2 isolated_file:17 [ 2961.217633] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2961.217633] slab_reclaimable:13482 slab_unreclaimable:114344 [ 2961.217633] mapped:7439 shmem:104303 pagetables:392 bounce:0 [ 2961.217633] free:25198 free_pcp:0 free_cma:0 [ 2961.251937] Node 0 active_anon:106532kB inactive_anon:153864kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:29756kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2961.279815] Node 1 active_anon:1660kB inactive_anon:206468kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2961.306696] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2961.336417] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2961.341520] Node 0 DMA32 free:36000kB min:35996kB low:44992kB high:53988kB active_anon:106496kB inactive_anon:150248kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7232kB pagetables:1564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2961.370221] lowmem_reserve[]: 0 0 1 1 1 [ 2961.374231] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2961.400279] lowmem_reserve[]: 0 0 0 0 0 [ 2961.404314] Node 1 Normal free:53848kB min:53876kB low:67344kB high:80812kB active_anon:1660kB inactive_anon:206468kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2961.433519] lowmem_reserve[]: 0 0 0 0 0 [ 2961.437502] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2961.451374] Node 0 DMA32: 1138*4kB (UME) 263*8kB (ME) 191*16kB (UME) 167*32kB (UME) 62*64kB (M) 27*128kB (UM) 9*256kB (UM) 18*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36048kB [ 2961.470536] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2961.481676] Node 1 Normal: 562*4kB (ME) 434*8kB (ME) 180*16kB (UME) 88*32kB (UME) 20*64kB (UME) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53912kB [ 2961.498456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2961.507342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2961.515962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2961.524817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2961.533409] 104336 total pagecache pages [ 2961.538379] 0 pages in swap cache [ 2961.541889] Swap cache stats: add 0, delete 0, find 0/0 [ 2961.547239] Free swap = 0kB [ 2961.550235] Total swap = 0kB [ 2961.553278] 2097051 pages RAM [ 2961.556365] 0 pages HighMem/MovableOnly [ 2961.560315] 369649 pages reserved [ 2961.563792] 0 pages cma reserved [ 2961.567152] Out of memory (oom_kill_allocating_task): Kill process 8073 (syz-fuzzer) score 0 or sacrifice child [ 2961.577474] Killed process 1530 (syz-executor.5) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2961.591664] oom_reaper: reaped process 1530 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2961.824510] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2961.906685] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2961.911493] CPU: 1 PID: 9218 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2961.918933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2961.928269] Call Trace: [ 2961.930875] dump_stack+0x1fc/0x2ef [ 2961.934494] dump_header+0x15d/0xc3f [ 2961.938218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2961.943311] ? ___ratelimit+0x319/0x590 [ 2961.947277] oom_kill_process.cold+0x10/0x692 [ 2961.951767] ? check_preemption_disabled+0x41/0x280 [ 2961.956779] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2961.962060] out_of_memory+0x1072/0x1390 [ 2961.966123] ? oom_killer_disable+0x270/0x270 [ 2961.970616] ? mutex_trylock+0x15f/0x1a0 [ 2961.974673] __alloc_pages_nodemask+0x23a2/0x2890 [ 2961.979515] ? find_get_entry+0x4cd/0x8a0 [ 2961.983658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2961.988508] alloc_pages_current+0x193/0x2a0 [ 2961.992904] filemap_fault+0x146e/0x2180 [ 2961.996965] ext4_filemap_fault+0x84/0xb0 [ 2962.001103] __do_fault+0x10b/0x4b0 [ 2962.004720] __handle_mm_fault+0x273b/0x41c0 [ 2962.009114] ? do_signal+0x49d/0x1670 [ 2962.012900] ? vm_insert_page+0x9c0/0x9c0 [ 2962.017043] ? check_preemption_disabled+0x41/0x280 [ 2962.022048] handle_mm_fault+0x436/0xb10 [ 2962.026099] __do_page_fault+0x68e/0xd60 [ 2962.030153] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2962.035154] ? spurious_fault+0x840/0x840 [ 2962.039293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2962.044124] ? page_fault+0x8/0x30 [ 2962.047674] page_fault+0x1e/0x30 [ 2962.051115] RIP: 0033:0x46b2a0 [ 2962.054297] Code: Bad RIP value. [ 2962.057644] RSP: 002b:000000c00083bab8 EFLAGS: 00010202 [ 2962.063339] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000403ace [ 2962.070594] RDX: 000000c00083bac0 RSI: 000000c00083bbf0 RDI: 0000000000000011 [ 2962.077847] RBP: 000000c000d03d48 R08: 0000000000000000 R09: 0000000000000000 [ 2962.085099] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c000d03e60 [ 2962.092350] R13: 0000000000000000 R14: 000000c000174820 R15: 0000000000000001 [ 2962.133383] Mem-Info: [ 2962.157519] active_anon:26989 inactive_anon:90083 isolated_anon:0 [ 2962.157519] active_file:25 inactive_file:99 isolated_file:0 [ 2962.157519] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2962.157519] slab_reclaimable:13481 slab_unreclaimable:113639 [ 2962.157519] mapped:7455 shmem:104303 pagetables:378 bounce:0 [ 2962.157519] free:25304 free_pcp:125 free_cma:0 [ 2962.194970] Node 0 active_anon:106316kB inactive_anon:153864kB active_file:80kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:29820kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2962.267790] Node 1 active_anon:1640kB inactive_anon:206468kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2962.581172] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2962.835041] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2962.840094] Node 0 DMA32 free:35700kB min:35996kB low:44992kB high:53988kB active_anon:106332kB inactive_anon:150248kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7232kB pagetables:1524kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2963.165219] lowmem_reserve[]: 0 0 1 1 1 [ 2963.169235] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2963.455988] lowmem_reserve[]: 0 0 0 0 0 [ 2963.460000] Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:1640kB inactive_anon:206468kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2963.705607] lowmem_reserve[]: 0 0 0 0 0 [ 2963.709620] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2963.788451] Node 0 DMA32: 1134*4kB (UME) 263*8kB (UME) 190*16kB (ME) 167*32kB (ME) 63*64kB (M) 26*128kB (M) 9*256kB (UM) 18*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35952kB [ 2963.905830] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2964.011887] Node 1 Normal: 564*4kB (UME) 435*8kB (UME) 179*16kB (ME) 88*32kB (UME) 20*64kB (UME) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53912kB [ 2964.185012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2964.216478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2964.239733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2964.279509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2964.321556] 104338 total pagecache pages [ 2964.399881] 0 pages in swap cache [ 2964.441839] Swap cache stats: add 0, delete 0, find 0/0 [ 2964.491847] Free swap = 0kB [ 2964.523861] Total swap = 0kB [ 2964.526903] 2097051 pages RAM [ 2964.567902] 0 pages HighMem/MovableOnly [ 2964.610733] 369649 pages reserved [ 2964.639172] 0 pages cma reserved [ 2964.670152] Out of memory (oom_kill_allocating_task): Kill process 9218 (syz-fuzzer) score 0 or sacrifice child [ 2964.747460] Killed process 5244 (syz-executor.2) total-vm:48512kB, anon-rss:416kB, file-rss:0kB, shmem-rss:0kB [ 2965.733627] systemd-cgroups invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2965.885516] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2965.890748] CPU: 0 PID: 6549 Comm: systemd-cgroups Not tainted 4.19.211-syzkaller #0 [ 2965.898624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2965.907972] Call Trace: [ 2965.910563] dump_stack+0x1fc/0x2ef [ 2965.914191] dump_header+0x15d/0xc3f [ 2965.917904] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2965.923004] ? ___ratelimit+0x319/0x590 [ 2965.926980] oom_kill_process.cold+0x10/0x692 [ 2965.931474] ? check_preemption_disabled+0x41/0x280 [ 2965.936499] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2965.941772] out_of_memory+0x1072/0x1390 [ 2965.945837] ? oom_killer_disable+0x270/0x270 [ 2965.950332] ? mutex_trylock+0x15f/0x1a0 [ 2965.954404] __alloc_pages_nodemask+0x23a2/0x2890 [ 2965.959247] ? io_schedule_timeout+0x140/0x140 [ 2965.963838] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2965.968684] ? __anon_vma_prepare+0x2a6/0x560 [ 2965.973184] ? __anon_vma_prepare+0xc2/0x560 [ 2965.977601] alloc_pages_vma+0xf2/0x780 [ 2965.981581] do_anonymous_page+0x7c2/0x1be0 [ 2965.985905] ? __pte_alloc+0x340/0x340 [ 2965.989789] ? up_read+0x17/0x110 [ 2965.993247] ? mark_held_locks+0xf0/0xf0 [ 2965.997315] __handle_mm_fault+0x227a/0x41c0 [ 2966.001731] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2966.006308] ? vm_insert_page+0x9c0/0x9c0 [ 2966.010455] ? finish_task_switch+0x1db/0x760 [ 2966.015048] ? check_preemption_disabled+0x41/0x280 [ 2966.020066] handle_mm_fault+0x436/0xb10 [ 2966.024135] __do_page_fault+0x68e/0xd60 [ 2966.028200] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2966.033213] ? spurious_fault+0x840/0x840 [ 2966.037357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2966.042200] ? page_fault+0x8/0x30 [ 2966.045739] page_fault+0x1e/0x30 [ 2966.049186] RIP: 0033:0x7f8c3ae0d3e3 [ 2966.052898] Code: Bad RIP value. [ 2966.056253] RSP: 002b:00007ffd894ae860 EFLAGS: 00010206 [ 2966.061617] RAX: 00007ffd894ae990 RBX: 0000000000000001 RCX: 0000000000000008 [ 2966.068925] RDX: 000005f0e4389064 RSI: 00007f8c3adf7f20 RDI: 00007ffd894ae978 [ 2966.076189] RBP: 00007ffd894ae960 R08: 00007f8c3adf62c0 R09: 00007f8c3ae0cf50 [ 2966.083459] R10: 0000000000000031 R11: 000000006ffffdff R12: 00007ffd894ae970 [ 2966.090726] R13: 00007f8c3adf7f20 R14: 00007f8c3adf6000 R15: 00007f8c3adf6438 [ 2966.201813] Mem-Info: [ 2966.210747] active_anon:26862 inactive_anon:90083 isolated_anon:0 [ 2966.210747] active_file:11 inactive_file:0 isolated_file:0 [ 2966.210747] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2966.210747] slab_reclaimable:13481 slab_unreclaimable:112967 [ 2966.210747] mapped:3830 shmem:104303 pagetables:355 bounce:0 [ 2966.210747] free:25205 free_pcp:58 free_cma:0 [ 2966.457171] Node 0 active_anon:105808kB inactive_anon:153864kB active_file:8kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15320kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2966.667379] Node 1 active_anon:1640kB inactive_anon:206468kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2966.781492] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2966.828051] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2966.843514] Node 0 DMA32 free:35648kB min:35996kB low:44992kB high:53988kB active_anon:105812kB inactive_anon:150248kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7104kB pagetables:1420kB bounce:0kB free_pcp:240kB local_pcp:236kB free_cma:0kB [ 2966.877054] lowmem_reserve[]: 0 0 1 1 1 [ 2966.881258] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2966.914707] lowmem_reserve[]: 0 0 0 0 0 [ 2966.918702] Node 1 Normal free:53660kB min:53876kB low:67344kB high:80812kB active_anon:1640kB inactive_anon:206468kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2966.950962] lowmem_reserve[]: 0 0 0 0 0 [ 2966.955010] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2966.979361] Node 0 DMA32: 1140*4kB (ME) 310*8kB (UME) 192*16kB (UME) 172*32kB (ME) 65*64kB (UM) 26*128kB (M) 9*256kB (UM) 16*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35648kB [ 2967.049668] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2967.087134] Node 1 Normal: 563*4kB (UME) 434*8kB (ME) 180*16kB (UME) 88*32kB (UME) 20*64kB (UME) 12*128kB (UM) 8*256kB (M) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53660kB [ 2967.113844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2967.140970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2967.162868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2967.186107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2967.198014] 104336 total pagecache pages [ 2967.202061] 0 pages in swap cache [ 2967.219021] Swap cache stats: add 0, delete 0, find 0/0 [ 2967.227823] Free swap = 0kB [ 2967.230839] Total swap = 0kB [ 2967.238393] 2097051 pages RAM [ 2967.241611] 0 pages HighMem/MovableOnly [ 2967.282032] 369649 pages reserved [ 2967.287239] 0 pages cma reserved [ 2967.290618] Out of memory (oom_kill_allocating_task): Kill process 6549 (systemd-cgroups) score 0 or sacrifice child [ 2967.314841] Killed process 6549 (systemd-cgroups) total-vm:316kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2967.338433] oom_reaper: reaped process 6549 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2967.350419] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2967.373853] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2967.378641] CPU: 0 PID: 8098 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2967.386077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2967.395419] Call Trace: [ 2967.397997] dump_stack+0x1fc/0x2ef [ 2967.401612] dump_header+0x15d/0xc3f [ 2967.405312] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2967.410397] ? ___ratelimit+0x319/0x590 [ 2967.414360] oom_kill_process.cold+0x10/0x692 [ 2967.418868] ? check_preemption_disabled+0x41/0x280 [ 2967.424047] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2967.429308] out_of_memory+0x1072/0x1390 [ 2967.433376] ? oom_killer_disable+0x270/0x270 [ 2967.437852] ? mutex_trylock+0x15f/0x1a0 [ 2967.442160] __alloc_pages_nodemask+0x23a2/0x2890 [ 2967.446989] ? find_get_entry+0x4cd/0x8a0 [ 2967.451126] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2967.455964] alloc_pages_current+0x193/0x2a0 [ 2967.460356] filemap_fault+0x146e/0x2180 [ 2967.464403] ext4_filemap_fault+0x84/0xb0 [ 2967.468534] __do_fault+0x10b/0x4b0 [ 2967.472145] __handle_mm_fault+0x273b/0x41c0 [ 2967.476688] ? do_signal+0x49d/0x1670 [ 2967.480568] ? vm_insert_page+0x9c0/0x9c0 [ 2967.484708] ? check_preemption_disabled+0x41/0x280 [ 2967.489707] handle_mm_fault+0x436/0xb10 [ 2967.493777] __do_page_fault+0x68e/0xd60 [ 2967.497837] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2967.502853] ? spurious_fault+0x840/0x840 [ 2967.507070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2967.512880] ? page_fault+0x8/0x30 [ 2967.516420] page_fault+0x1e/0x30 [ 2967.519853] RIP: 0033:0x436ff8 [ 2967.523026] Code: Bad RIP value. [ 2967.526370] RSP: 002b:000000c000653928 EFLAGS: 00010202 [ 2967.531724] RAX: 0000000000f07768 RBX: 00000000011071a0 RCX: 00000000011071a0 [ 2967.538972] RDX: 0000000000146bd0 RSI: 0000000000eea340 RDI: 0000000000eea340 [ 2967.546308] RBP: 000000c000653930 R08: 0000000000000043 R09: 0000000000eea558 [ 2967.553559] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c0006539c0 [ 2967.560807] R13: 0000000000000000 R14: 000000c0003a6d00 R15: 0000000000000001 [ 2967.602103] Mem-Info: [ 2967.608597] active_anon:26863 inactive_anon:90083 isolated_anon:0 [ 2967.608597] active_file:20 inactive_file:0 isolated_file:0 [ 2967.608597] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2967.608597] slab_reclaimable:13479 slab_unreclaimable:113020 [ 2967.608597] mapped:3846 shmem:104303 pagetables:355 bounce:0 [ 2967.608597] free:25009 free_pcp:178 free_cma:0 [ 2967.681931] Node 0 active_anon:105812kB inactive_anon:153864kB active_file:168kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15384kB dirty:0kB writeback:0kB shmem:209340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2967.719185] Node 1 active_anon:1640kB inactive_anon:206468kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:207872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2967.758139] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:3616kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2967.792824] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2967.797863] Node 0 DMA32 free:35428kB min:35996kB low:44992kB high:53988kB active_anon:105796kB inactive_anon:150248kB active_file:72kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7072kB pagetables:1400kB bounce:0kB free_pcp:444kB local_pcp:144kB free_cma:0kB [ 2967.844229] lowmem_reserve[]: 0 0 1 1 1 [ 2967.848250] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2968.092267] lowmem_reserve[]: 0 0 0 0 0 [ 2968.119379] Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:1640kB inactive_anon:206468kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2968.257721] lowmem_reserve[]: 0 0 0 0 0 [ 2968.261743] Node 0 DMA: 0*4kB 4*8kB (M) 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (E) = 10976kB [ 2968.280831] Node 0 DMA32: 1144*4kB (UME) 309*8kB (UME) 192*16kB (ME) 173*32kB (UME) 64*64kB (M) 26*128kB (M) 9*256kB (UM) 16*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35624kB [ 2968.359208] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2968.436019] Node 1 Normal: 563*4kB (UME) 435*8kB (UME) 179*16kB (ME) 88*32kB (UME) 20*64kB (UME) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 7*4096kB (UM) = 53908kB [ 2968.565178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2968.626287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2968.661678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2968.670704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2968.732533] 104336 total pagecache pages [ 2968.736629] 0 pages in swap cache [ 2968.740078] Swap cache stats: add 0, delete 0, find 0/0 [ 2968.802147] Free swap = 0kB [ 2968.808533] Total swap = 0kB [ 2968.811566] 2097051 pages RAM [ 2968.814749] 0 pages HighMem/MovableOnly [ 2968.818723] 369649 pages reserved [ 2968.822167] 0 pages cma reserved [ 2968.839261] Out of memory (oom_kill_allocating_task): Kill process 8098 (syz-fuzzer) score 0 or sacrifice child [ 2968.861417] Killed process 8072 (syz-fuzzer) total-vm:931324kB, anon-rss:42400kB, file-rss:0kB, shmem-rss:1044kB [ 2968.897520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2968.906107] oom_reaper: reaped process 8072 (syz-fuzzer), now anon-rss:0kB, file-rss:0kB, shmem-rss:1044kB [ 2968.907359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2968.926823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2968.934125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2968.943011] device bridge_slave_1 left promiscuous mode [ 2968.948525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2968.956140] device bridge_slave_0 left promiscuous mode [ 2968.961657] bridge0: port 1(bridge_slave_0) entered disabled state [ 2968.975942] device veth1_macvtap left promiscuous mode [ 2968.981320] device veth0_macvtap left promiscuous mode [ 2968.997767] device veth1_vlan left promiscuous mode [ 2969.012070] device veth0_vlan left promiscuous mode